Adds useful decoration features to the Gutenberg RichText editor toolbar.
Category Scores
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Security
20
1 issue group
Maintainability
6
3 issue groups
Supply Chain
3
1 issue group
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$i'.20
- Category
- Security
- Occurrences
- 20
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$i'.
WARNINGMaintainabilityMissing VersionResource version not set in call to wp_enqueue_script(). This means new versions of the script may not always be loaded due to browser caching.3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
Resource version not set in call to wp_enqueue_script(). This means new versions of the script may not always be loaded due to browser caching.
ERRORSupply ChainHidden files includedHidden files are not permitted.3
- Category
- Supply Chain
- Occurrences
- 3
- Severity
- error
Sample message
Hidden files are not permitted.
ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
WARNINGMaintainabilityNot In FooterIn footer ($in_footer) is not set explicitly wp_enqueue_script; It is recommended to load scripts in the footer. Please set this value to `true` to load it in the footer, or explicitly `false` if it should be loaded in the header.1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
In footer ($in_footer) is not set explicitly wp_enqueue_script; It is recommended to load scripts in the footer. Please set this value to `true` to load it in the footer, or explicitly `false` if it should be loaded in the header.
External Connections
Potential connections found in static code analysis.
Outbound calls
5
External assets
0
Incoming endpoints
0
Notable Domains
No notable third-party domains detected.
Platform / Reference Domains
External Asset Domains
No external asset domains detected.
Incoming Endpoints
No public endpoints detected.
Score History
First score snapshot
v3.0.1
35
Latest
- Findings
- 29
- Errors
- 25
- Warnings
- 4
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 35 | 29 | 25 | 4 | v3.0.1 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.