PluginScore

The School Management – Education & Learning ERP

The School Management System is a complete, feature-rich WordPress plugin designed to seamlessly manage all aspects of school administration and educa …

v5.5Weblizar - WordPress Themes & PluginUpdated Added 900 installs90% rating
Fees ManagementLearning managementSchool Managementeducationstudent Management
25
Score
1
Errors
2,858
Warnings
+0
Change

Category Scores

Security0
Repo91
Performance100
Maintainability6

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

2,859 findings

Maintainability

1,759

7 issue groups

Security

1,097

9 issue groups

Repo Compliance

2

2 issue groups

I18n

1

1 issue group

WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$action_for".765
Category
Maintainability
Occurrences
765
Severity
warning

Sample message

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$action_for".

WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedVariableFound
WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.490
Category
Maintainability
Occurrences
490
Severity
warning

Sample message

Use of a direct database call is discouraged.

WordPress.DB.DirectDatabaseQuery.DirectQuery
WARNINGSecurityRequest data is not unslashed$_GET['action'] not unslashed before sanitization. Use wp_unslash() or similar457
Category
Security
Occurrences
457
Severity
warning

Sample message

$_GET['action'] not unslashed before sanitization. Use wp_unslash() or similar

WordPress.Security.ValidatedSanitizedInput.MissingUnslash
WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().449
Category
Maintainability
Occurrences
449
Severity
warning

Sample message

Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().

WordPress.DB.DirectDatabaseQuery.NoCaching
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_FILES['attachment']270
Category
Security
Occurrences
270
Severity
warning

Sample message

Detected usage of a non-sanitized input variable: $_FILES['attachment']

WordPress.Security.ValidatedSanitizedInput.InputNotSanitized
WARNINGSecurityInput is not validatedDetected usage of a possibly undefined superglobal array index: $_POST['add-' . $role . '']. Check that the array index exists before using it.217
Category
Security
Occurrences
217
Severity
warning

Sample message

Detected usage of a possibly undefined superglobal array index: $_POST['add-' . $role . '']. Check that the array index exists before using it.

WordPress.Security.ValidatedSanitizedInput.InputNotValidated
WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.88
Category
Security
Occurrences
88
Severity
warning

Sample message

Processing form data without nonce verification.

WordPress.Security.NonceVerification.Recommended
WARNINGSecurityDatabase parameter is not escapedUnescaped parameter $query used in $wpdb->get_results()\n$query assigned unsafely at line 1190.55
Category
Security
Occurrences
55
Severity
warning

Sample message

Unescaped parameter $query used in $wpdb->get_results()\n$query assigned unsafely at line 1190.

PluginCheck.Security.DirectDB.UnescapedDBParameter
WARNINGMaintainabilitySchema ChangeAttempting a database schema change is discouraged.36
Category
Maintainability
Occurrences
36
Severity
warning

Sample message

Attempting a database schema change is discouraged.

WordPress.DB.DirectDatabaseQuery.SchemaChange
WARNINGMaintainabilityMissing VersionResource version not set in call to wp_enqueue_script(). This means new versions of the script may not always be loaded due to browser caching.16
Category
Maintainability
Occurrences
16
Severity
warning

Sample message

Resource version not set in call to wp_enqueue_script(). This means new versions of the script may not always be loaded due to browser caching.

WordPress.WP.EnqueuedResourceParameters.MissingVersion
Show 9 more
WARNINGSecurityReplacements Wrong Number4
Category
Security
Occurrences
4
Severity
warning

Sample message

Incorrect number of replacements passed to $wpdb->prepare(). Found 1 replacement parameters, expected 2.

WordPress.DB.PreparedSQLPlaceholders.ReplacementsWrongNumber
WARNINGSecurityMissing nonce verification4
Category
Security
Occurrences
4
Severity
warning

Sample message

Processing form data without nonce verification.

WordPress.Security.NonceVerification.Missing
WARNINGMaintainabilityNon-prefixed function2
Category
Maintainability
Occurrences
2
Severity
warning

Sample message

Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "add_plugin_page_pro_link".

WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedFunctionFound
WARNINGI18nDiscouraged text-domain loading1
Category
I18n
Occurrences
1
Severity
warning

Sample message

load_plugin_textdomain() has been discouraged since WordPress version 4.6. When your plugin is hosted on WordPress.org, you no longer need to manually include this function call for translations under your plugin slug. WordPress will automatically load the translations for you as needed.

PluginCheck.CodeAnalysis.DiscouragedFunctions.load_plugin_textdomainFoundReference
WARNINGSecurityInterpolated SQL is not prepared1
Category
Security
Occurrences
1
Severity
warning

Sample message

Use placeholders and $wpdb->prepare(); found interpolated variable $sql at "$sql "

WordPress.DB.PreparedSQL.InterpolatedNotPrepared
WARNINGSecurityUnfinished Prepare1
Category
Security
Occurrences
1
Severity
warning

Sample message

Replacement variables found, but no valid placeholders found in the query.

WordPress.DB.PreparedSQLPlaceholders.UnfinishedPrepare
WARNINGMaintainabilityNon-prefixed hook name1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "wp_login".

WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedHooknameFound
ERRORRepo Complianceoutdated tested upto header1
Category
Repo Compliance
Occurrences
1
Severity
error

Sample message

Tested up to: 6.9 < 7.0. The "Tested up to" value in your plugin is not set to the current version of WordPress. This means your plugin will not show up in searches, as we require plugins to be compatible and documented as tested up to the most recent version of WordPress.

outdated_tested_upto_headerReference
WARNINGRepo Compliancereadme parser warnings no short description present1
Category
Repo Compliance
Occurrences
1
Severity
warning

Sample message

The "Short Description" section is missing. An excerpt was generated from your main plugin description.

readme_parser_warnings_no_short_description_present

External Connections

Potential connections found in static code analysis.

23 domains

Outbound calls

222

External assets

0

Incoming endpoints

78

Notable Domains

stripe.com167 · outbound
iso.org16 · outbound
cdnjs.com2 · outbound
craftpip.github.io2 · outbound
dashboard.stripe.com2 · outbound
developer.snapappointments.com2 · outbound

Platform / Reference Domains

github.com11 · platform/reference
w3.org2 · platform/reference
opensource.org1 · platform/reference

External Asset Domains

No external asset domains detected.

Incoming Endpoints

No public endpoints detected.

Admin AJAX endpoints78
wp_ajax_wlsm-add-admissionauthenticated

wp_ajax

wp_ajax_wlsm-assign-adminauthenticated

wp_ajax

wp_ajax_wlsm-assign-classesauthenticated

wp_ajax

wp_ajax_wlsm-assign-subject-adminsauthenticated

wp_ajax

wp_ajax_wlsm-collect-invoice-paymentauthenticated

wp_ajax

wp_ajax_wlsm-delete-classauthenticated

wp_ajax

wp_ajax_wlsm-delete-employeeauthenticated

wp_ajax

wp_ajax_wlsm-delete-inquiryauthenticated

wp_ajax

wp_ajax_wlsm-delete-invoiceauthenticated

wp_ajax

wp_ajax_wlsm-delete-invoice-paymentauthenticated

wp_ajax

wp_ajax_wlsm-delete-noticeauthenticated

wp_ajax

wp_ajax_wlsm-delete-paymentauthenticated

wp_ajax

66 more hidden

Score History

First score snapshot

v5.5

25

Latest

Findings
2,859
Errors
1
Warnings
2,858
Check
2.0.0

Relationship Map

Author, categories, issues, domains, and nearby plugins.

37 nodes

Related Plugins

PowerPack for LearnDash

1k+ active installs

97
Certify – Certificate Management & Verification

500 active installs

94
WPLMS CoAuthors Plus

1k+ active installs

92
LearnPress – Prerequisites Courses

6k+ active installs

84
Certificate customizer for Tutor LMS

1k+ active installs

76
Resume Builder

1k+ active installs

74