Issues to Review
Prioritized issue groups from the latest Plugin Check scan
I18n
444
1 issue group
Security
404
9 issue groups
Maintainability
207
15 issue groups
ERRORI18nNon Singular String Literal DomainThe $domain parameter must be a single text string literal. Found: PLUGIN_NOM_LANG444
- Category
- I18n
- Occurrences
- 444
- Severity
- error
Sample message
The $domain parameter must be a single text string literal. Found: PLUGIN_NOM_LANG
WARNINGSecurityMissing nonce verificationProcessing form data without nonce verification.132
- Category
- Security
- Occurrences
- 132
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$a".107
- Category
- Maintainability
- Occurrences
- 107
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$a".
WARNINGSecurityRequest data is not unslashed$_COOKIE[$this->name] not unslashed before sanitization. Use wp_unslash() or similar77
- Category
- Security
- Occurrences
- 77
- Severity
- warning
Sample message
$_COOKIE[$this->name] not unslashed before sanitization. Use wp_unslash() or similar
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_COOKIE[$this->name]53
- Category
- Security
- Occurrences
- 53
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_COOKIE[$this->name]
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$disp'.44
- Category
- Security
- Occurrences
- 44
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$disp'.
ERRORSecuritySQL query is not preparedUse placeholders and $wpdb->prepare(); found $req33
- Category
- Security
- Occurrences
- 33
- Severity
- error
Sample message
Use placeholders and $wpdb->prepare(); found $req
WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.31
- Category
- Maintainability
- Occurrences
- 31
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().25
- Category
- Maintainability
- Occurrences
- 25
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
WARNINGSecurityInput is not validatedDetected usage of a possibly undefined superglobal array index: $_GET['contact_form_id']. Check that the array index exists before using it.25
- Category
- Security
- Occurrences
- 25
- Severity
- warning
Sample message
Detected usage of a possibly undefined superglobal array index: $_GET['contact_form_id']. Check that the array index exists before using it.
Show 15 moreShow less
WARNINGSecurityNonce verification recommended21
- Category
- Security
- Occurrences
- 21
- Severity
- warning
Sample message
Processing form data without nonce verification.
ERRORSecurityDatabase parameter is not escaped16
- Category
- Security
- Occurrences
- 16
- Severity
- error
Sample message
Unescaped parameter $sql used in $wpdb->get_results()\n$sql assigned unsafely at line 22.
ERRORMaintainabilitycurl curl exec5
- Category
- Maintainability
- Occurrences
- 5
- Severity
- error
Sample message
Using cURL functions is highly discouraged. Use wp_remote_get() instead.
ERRORMaintainabilitycurl curl init5
- Category
- Maintainability
- Occurrences
- 5
- Severity
- error
Sample message
Using cURL functions is highly discouraged. Use wp_remote_get() instead.
ERRORMaintainabilityNo Explicit Version5
- Category
- Maintainability
- Occurrences
- 5
- Severity
- error
Sample message
Version parameter is not explicitly set or has been set to an equivalent of "false" for wp_enqueue_script; This means that the WordPress core version will be used which is not recommended for plugin or theme development.
WARNINGMaintainabilityNon-prefixed function4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- warning
Sample message
Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "__".
ERRORMaintainabilitycurl curl close4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- error
Sample message
Using cURL functions is highly discouraged. Use wp_remote_get() instead.
ERRORMaintainabilitycurl curl setopt4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- error
Sample message
Using cURL functions is highly discouraged. Use wp_remote_get() instead.
ERRORMaintainabilitycurl curl setopt array4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- error
Sample message
Using cURL functions is highly discouraged. Use wp_remote_get() instead.
WARNINGSecurityUnfinished Prepare3
- Category
- Security
- Occurrences
- 3
- Severity
- warning
Sample message
Replacement variables found, but no valid placeholders found in the query.
ERRORMaintainabilitycurl curl errno3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- error
Sample message
Using cURL functions is highly discouraged. Use wp_remote_get() instead.
ERRORMaintainabilitycurl curl error3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- error
Sample message
Using cURL functions is highly discouraged. Use wp_remote_get() instead.
ERRORMaintainabilityMissing direct file access protection3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
WARNINGMaintainabilityNon-prefixed constant2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "PLUGIN_NOM_LANG".
WARNINGMaintainabilityerror log print r2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
print_r() found. Debug code should not normally be used in production.
External Connections
Potential connections found in static code analysis.
Outbound calls
63
External assets
3
Incoming endpoints
5
Notable Domains
Platform / Reference Domains
External Asset Domains
Incoming Endpoints
wp_ajax
wp_ajax
Admin AJAX endpoints3
wp_ajax
wp_ajax
wp_ajax
Score History
First score snapshot
v2.4.0
22
Latest
- Findings
- 1,076
- Errors
- 586
- Warnings
- 490
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 22 | 1,076 | 586 | 490 | v2.4.0 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Relationship links
Plugin
Author
Issue
Domain
Related
Plugin
Author
Issue
Domain
Related
Related Plugins
1k+ active installs
20k+ active installs
700 active installs
1k+ active installs
9k+ active installs
600 active installs