PluginScore

Servebolt Optimizer

This plugin implements Servebolt's WordPress best practices, and connects your site to the Servebolt Admin Panel.

v3.6.4ServeboltUpdated Added 1k+ installs100% rating
cloudflarehtml cachemultisiteoptimizationperformance
24
Score
1,958
Errors
681
Warnings
+0
Change

Category Scores

Security0
Repo90
Performance100
Maintainability0

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

2,639 findings

I18n

1,027

4 issue groups

Security

1,009

13 issue groups

Maintainability

551

8 issue groups

ERRORI18nText Domain MismatchMismatched text domain. Expected 'servebolt-optimizer' but got 'servebolt-wp'.844
Category
I18n
Occurrences
844
Severity
error

Sample message

Mismatched text domain. Expected 'servebolt-optimizer' but got 'servebolt-wp'.

WordPress.WP.I18n.TextDomainMismatchReference
ERRORSecurityUnsafe printing functionAll output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.423
Category
Security
Occurrences
423
Severity
error

Sample message

All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.

WordPress.Security.EscapeOutput.UnsafePrintingFunctionReference
WARNINGMaintainabilityNon-prefixed hook nameHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "'sb_optimizer_add_version_parameter_to_' . $type . '_src_' . $handle".296
Category
Maintainability
Occurrences
296
Severity
warning

Sample message

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "'sb_optimizer_add_version_parameter_to_' . $type . '_src_' . $handle".

WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedHooknameFound
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"Call to undefined method $class::$name() in $file on line $line"'.296
Category
Security
Occurrences
296
Severity
error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"Call to undefined method $class::$name() in $file on line $line"'.

WordPress.Security.EscapeOutput.OutputNotEscapedReference
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$$key".172
Category
Maintainability
Occurrences
172
Severity
warning

Sample message

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$$key".

WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedVariableFound
ERRORSecurityException output is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"$name not found on class"'.129
Category
Security
Occurrences
129
Severity
error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"$name not found on class"'.

WordPress.Security.EscapeOutput.ExceptionNotEscapedReference
ERRORI18nMissing Translators CommentA function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.118
Category
I18n
Occurrences
118
Severity
error

Sample message

A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.

WordPress.WP.I18n.MissingTranslatorsCommentReference
ERRORI18nUnordered Placeholders TextMultiple placeholders in translatable strings should be ordered. Expected "%1$s, %2$s", but got "%s, %s" in '%sGet in touch with Servebolt Support%s to get Cloudflare added to your domain and set up correctly.'.48
Category
I18n
Occurrences
48
Severity
error

Sample message

Multiple placeholders in translatable strings should be ordered. Expected "%1$s, %2$s", but got "%s, %s" in '%sGet in touch with Servebolt Support%s to get Cloudflare added to your domain and set up correctly.'.

WordPress.WP.I18n.UnorderedPlaceholdersTextReference
WARNINGSecurityRequest data is not unslashed$_GET['deprecations'] not unslashed before sanitization. Use wp_unslash() or similar30
Category
Security
Occurrences
30
Severity
warning

Sample message

$_GET['deprecations'] not unslashed before sanitization. Use wp_unslash() or similar

WordPress.Security.ValidatedSanitizedInput.MissingUnslash
WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.29
Category
Security
Occurrences
29
Severity
warning

Sample message

Processing form data without nonce verification.

WordPress.Security.NonceVerification.Recommended
Show 15 more
WARNINGSecurityInput is not sanitized26
Category
Security
Occurrences
26
Severity
warning

Sample message

Detected usage of a non-sanitized input variable: $_GET['deprecations']

WordPress.Security.ValidatedSanitizedInput.InputNotSanitized
WARNINGSecurityMissing nonce verification21
Category
Security
Occurrences
21
Severity
warning

Sample message

Processing form data without nonce verification.

WordPress.Security.NonceVerification.Missing
WARNINGMaintainabilityDirect Query17
Category
Maintainability
Occurrences
17
Severity
warning

Sample message

Use of a direct database call is discouraged.

WordPress.DB.DirectDatabaseQuery.DirectQuery
ERRORMaintainabilityparse url parse url17
Category
Maintainability
Occurrences
17
Severity
error

Sample message

parse_url() is discouraged because of inconsistency in the output across PHP versions; use wp_parse_url() instead.

WordPress.WP.AlternativeFunctions.parse_url_parse_url
ERRORI18nMissing Arg Domain17
Category
I18n
Occurrences
17
Severity
error

Sample message

Missing $domain parameter in function call to __().

WordPress.WP.I18n.MissingArgDomainReference
WARNINGMaintainabilityNo Caching16
Category
Maintainability
Occurrences
16
Severity
warning

Sample message

Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().

WordPress.DB.DirectDatabaseQuery.NoCaching
WARNINGMaintainabilityerror log error log16
Category
Maintainability
Occurrences
16
Severity
warning

Sample message

error_log() found. Debug code should not normally be used in production.

WordPress.PHP.DevelopmentFunctions.error_log_error_log
ERRORSecuritySQL query is not prepared15
Category
Security
Occurrences
15
Severity
error

Sample message

Use placeholders and $wpdb->prepare(); found $sql

WordPress.DB.PreparedSQL.NotPrepared
WARNINGSecurityInput is not validated11
Category
Security
Occurrences
11
Severity
warning

Sample message

Detected usage of a possibly undefined superglobal array index: $_POST['auth_type']. Check that the array index exists before using it.

WordPress.Security.ValidatedSanitizedInput.InputNotValidated
WARNINGMaintainabilityerror log trigger error9
Category
Maintainability
Occurrences
9
Severity
warning

Sample message

trigger_error() found. Debug code should not normally be used in production.

WordPress.PHP.DevelopmentFunctions.error_log_trigger_error
ERRORSecuritySetting is missing a sanitization callback8
Category
Security
Occurrences
8
Severity
error

Sample message

Sanitization missing for register_setting().

PluginCheck.CodeAnalysis.SettingSanitization.register_settingMissingReference
WARNINGSecurityInterpolated SQL is not prepared8
Category
Security
Occurrences
8
Severity
warning

Sample message

Use placeholders and $wpdb->prepare(); found interpolated variable {$columnName} at "SHOW COLUMNS FROM {$tableName} LIKE '{$columnName}'"

WordPress.DB.PreparedSQL.InterpolatedNotPrepared
WARNINGMaintainabilityNon-prefixed function8
Category
Maintainability
Occurrences
8
Severity
warning

Sample message

Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "sb_drop_index".

WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedFunctionFound
WARNINGSecurityDatabase parameter is not escaped7
Category
Security
Occurrences
7
Severity
warning

Sample message

Unescaped parameter $dbTable used in $wpdb->get_results()\n$dbTable assigned unsafely at line 112.

PluginCheck.Security.DirectDB.UnescapedDBParameter
ERRORSecurityDatabase parameter is not escaped6
Category
Security
Occurrences
6
Severity
error

Sample message

Unescaped parameter $sql used in $wpdb->get_results()\n$sql used without escaping.

PluginCheck.Security.DirectDB.UnescapedDBParameter

External Connections

Potential connections found in static code analysis.

36 domains

Outbound calls

145

External assets

0

Incoming endpoints

32

Notable Domains

datatracker.ietf.org26 · outbound
php.net19 · outbound
tools.ietf.org16 · outbound
servebo.lt11 · outbound
servebolt.com5 · outbound
admin.servebolt.com4 · outbound

Platform / Reference Domains

github.com10 · platform/reference
developer.wordpress.org1 · platform/reference
gnu.org1 · platform/reference
make.wordpress.org1 · platform/reference
wordpress.org1 · platform/reference

External Asset Domains

No external asset domains detected.

Incoming Endpoints

No public endpoints detected.

Admin AJAX endpoints32
wp_ajax_image-editorauthenticated

wp_ajax

wp_ajax_servebolt_acd_add_image_sizeauthenticated

wp_ajax

wp_ajax_servebolt_acd_image_resize_disableauthenticated

wp_ajax

wp_ajax_servebolt_acd_load_image_sizesauthenticated

wp_ajax

wp_ajax_servebolt_acd_purge_all_cacheauthenticated

wp_ajax

wp_ajax_servebolt_acd_purge_server_cacheauthenticated

wp_ajax

wp_ajax_servebolt_acd_remove_image_sizeauthenticated

wp_ajax

wp_ajax_servebolt_acd_remove_image_sizesauthenticated

wp_ajax

wp_ajax_servebolt_clear_all_settingsauthenticated

wp_ajax

wp_ajax_servebolt_convert_table_to_innodbauthenticated

wp_ajax

wp_ajax_servebolt_create_indexauthenticated

wp_ajax

wp_ajax_servebolt_delete_cache_purge_queue_itemsauthenticated

wp_ajax

20 more hidden

Score History

First score snapshot

v3.6.4

24

Latest

Findings
2,639
Errors
1,958
Warnings
681
Check
2.0.0

Relationship Map

Author, categories, issues, domains, and nearby plugins.

37 nodes

Related Plugins

AI Content Signals

500 active installs

100
CodingBunny Image Optimizer LITE

400 active installs

100
DietPress

2k+ active installs

100
Kitgenix CAPTCHA for Cloudflare Turnstile

500 active installs

100
Login Security Captcha

10k+ active installs

100
Memory Limit Manager

400 active installs

100