One-click database optimization with precise revision cleanup and flexible scheduling. Speeding up sites since 2011!
Category Scores
Top Issues by Category
security580
maintainability117
i18n73
repo_compliance1
Issues Details
771 issues found in latest scan
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"')) {\r\n'.
All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.
The $domain parameter must be a single text string literal. Found: $this->odb_txt_domain
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
Unescaped parameter $odb_class->odb_utilities_obj used in $wpdb->get_results()\n$odb_class->odb_utilities_obj used without escaping.
Function "get_post_types()" requires WordPress 2.9.0, but your plugin minimum supported version is WordPress 2.8.0.
$_GET['_wpnonce'] not unslashed before sanitization. Use wp_unslash() or similar
The $text parameter must be a single text string literal. Found: $msg
SQL wildcards for a LIKE query should be passed in through a replacement parameter. Found: LIKE '_oembed_%%'.
Detected usage of a non-sanitized input variable: $_GET['_wpnonce']
Unescaped parameter $this->sql used in $wpdb->get_results()\n$this->sql assigned unsafely at line 181.
date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.
Processing form data without nonce verification.
Use placeholders and $wpdb->prepare(); found interpolated variable {$where1} at {$where1}\r\n
The use of function set_time_limit() is discouraged
Translatable string should not be wrapped in HTML. Found: '<span class="odb-optimized">TABLE OPTIMIZED</span>'
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
Attempting a database schema change is discouraged.
The parameter "// domain\r\n\t\t\t\tfalse" at position #2 of load_plugin_textdomain() has been deprecated since WordPress version 2.7.0. Use "" instead.
Missing "License" in Plugin Header. Please update your Plugin Header with a valid GPLv2 (or later) compatible license.
| Code | Type | Message | Count |
|---|---|---|---|
| WordPress.Security.EscapeOutput.OutputNotEscaped | ERROR | All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"')) {\r\n'. | 217 |
| WordPress.DB.PreparedSQL.NotPrepared | ERROR | Use placeholders and $wpdb->prepare(); found $i | 199 |
| WordPress.Security.EscapeOutput.UnsafePrintingFunction | ERROR | All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'. | 86 |
| WordPress.WP.I18n.NonSingularStringLiteralDomain | ERROR | The $domain parameter must be a single text string literal. Found: $this->odb_txt_domain | 62 |
| WordPress.DB.DirectDatabaseQuery.DirectQuery | WARNING | Use of a direct database call is discouraged. | 40 |
| WordPress.DB.DirectDatabaseQuery.NoCaching | WARNING | Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete(). | 40 |
| PluginCheck.Security.DirectDB.UnescapedDBParameter | ERROR | Unescaped parameter $odb_class->odb_utilities_obj used in $wpdb->get_results()\n$odb_class->odb_utilities_obj used without escaping. | 31 |
| wp_function_not_compatible_with_requires_wp | ERROR | Function "get_post_types()" requires WordPress 2.9.0, but your plugin minimum supported version is WordPress 2.8.0. | 28 |
| WordPress.Security.ValidatedSanitizedInput.MissingUnslash | WARNING | $_GET['_wpnonce'] not unslashed before sanitization. Use wp_unslash() or similar | 26 |
| WordPress.WP.I18n.NonSingularStringLiteralText | ERROR | The $text parameter must be a single text string literal. Found: $msg | 8 |
| WordPress.DB.PreparedSQLPlaceholders.LikeWildcardsInQuery | ERROR | SQL wildcards for a LIKE query should be passed in through a replacement parameter. Found: LIKE '_oembed_%%'. | 5 |
| WordPress.Security.ValidatedSanitizedInput.InputNotSanitized | WARNING | Detected usage of a non-sanitized input variable: $_GET['_wpnonce'] | 5 |
| PluginCheck.Security.DirectDB.UnescapedDBParameter | WARNING | Unescaped parameter $this->sql used in $wpdb->get_results()\n$this->sql assigned unsafely at line 181. | 4 |
| WordPress.DateTime.RestrictedFunctions.date_date | ERROR | date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead. | 4 |
| WordPress.Security.NonceVerification.Recommended | WARNING | Processing form data without nonce verification. | 4 |
| WordPress.DB.PreparedSQL.InterpolatedNotPrepared | WARNING | Use placeholders and $wpdb->prepare(); found interpolated variable {$where1} at {$where1}\r\n | 3 |
| Squiz.PHP.DiscouragedFunctions.Discouraged | WARNING | The use of function set_time_limit() is discouraged | 2 |
| WordPress.WP.I18n.NoHtmlWrappedStrings | WARNING | Translatable string should not be wrapped in HTML. Found: '<span class="odb-optimized">TABLE OPTIMIZED</span>' | 2 |
| missing_direct_file_access_protection | ERROR | PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit; | 2 |
| WordPress.DB.DirectDatabaseQuery.SchemaChange | WARNING | Attempting a database schema change is discouraged. | 1 |
| WordPress.WP.DeprecatedParameters.Load_plugin_textdomainParam2Found | ERROR | The parameter "// domain\r\n\t\t\t\tfalse" at position #2 of load_plugin_textdomain() has been deprecated since WordPress version 2.7.0. Use "" instead. | 1 |
| plugin_header_no_license | ERROR | Missing "License" in Plugin Header. Please update your Plugin Header with a valid GPLv2 (or later) compatible license. | 1 |
Latest Snapshot
Findings
771
Errors
644
Warnings
127
Score History
First score snapshot
First scan completed Jun 20, 2026
v5.3.0 · Plugin Check 2.0.0 · Model 2026.06-mvp-static-v2
Jun 20, 2026
v5.3.0
36
Latest
- Findings
- 771
- Errors
- 644
- Warnings
- 127
- Plugin Check
- 2.0.0
- Model
- 2026.06-mvp-static-v2
| Scan | Score | Findings | Errors | Warnings | Plugin | Plugin Check | Model |
|---|---|---|---|---|---|---|---|
| Jun 20, 2026Latest | 36 | 771 | 644 | 127 | v5.3.0 | 2.0.0 | 2026.06-mvp-static-v2 |