Powerful sessions manager for WordPress with sessions limiter and full analytics reporting capabilities.
32
Score
205
Errors
103
Warnings
-1
Change
Category Scores
Security0
Repo100
Performance100
Maintainability35
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Maintainability
144
14 issue groups
Security
113
9 issue groups
I18n
47
2 issue groups
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$analytics'.71
- Category
- Security
- Occurrences
- 71
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$analytics'.
ERRORI18nMissing Translators CommentA function call to _n() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.40
- Category
- I18n
- Occurrences
- 40
- Severity
- error
Sample message
A function call to _n() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.
ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;34
- Category
- Maintainability
- Occurrences
- 34
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
WARNINGMaintainabilityNon-prefixed namespaceNamespaces declared by a theme/plugin should start with the theme/plugin prefix. Found: "PerfOpsOne".32
- Category
- Maintainability
- Occurrences
- 32
- Severity
- warning
Sample message
Namespaces declared by a theme/plugin should start with the theme/plugin prefix. Found: "PerfOpsOne".
ERRORSecuritySetting is missing a sanitization callbackSanitization missing for register_setting().26
- Category
- Security
- Occurrences
- 26
- Severity
- error
Sample message
Sanitization missing for register_setting().
WARNINGMaintainabilityNon-prefixed hook nameHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "all_plugins".22
- Category
- Maintainability
- Occurrences
- 22
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "all_plugins".
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$args".21
- Category
- Maintainability
- Occurrences
- 21
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$args".
ERRORMaintainabilityOffloaded ContentOffloading images, js, css, and other scripts to your servers or any remote service is disallowed.10
- Category
- Maintainability
- Occurrences
- 10
- Severity
- error
Sample message
Offloading images, js, css, and other scripts to your servers or any remote service is disallowed.
WARNINGMaintainabilityNon-prefixed constantGlobal constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "APCU_CACHE_PREFIX".7
- Category
- Maintainability
- Occurrences
- 7
- Severity
- warning
Sample message
Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "APCU_CACHE_PREFIX".
ERRORI18nMissing Arg DomainMissing $domain parameter in function call to __().7
- Category
- I18n
- Occurrences
- 7
- Severity
- error
Sample message
Missing $domain parameter in function call to __().
Show 15 moreShow less
ERRORMaintainabilitydate date6
- Category
- Maintainability
- Occurrences
- 6
- Severity
- error
Sample message
date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.
ERRORSecuritySQL query is not prepared4
- Category
- Security
- Occurrences
- 4
- Severity
- error
Sample message
Use placeholders and $wpdb->prepare(); found $column
WARNINGSecurityInput is not sanitized4
- Category
- Security
- Occurrences
- 4
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_POST['_wpnonce']
WARNINGSecurityRequest data is not unslashed4
- Category
- Security
- Occurrences
- 4
- Severity
- warning
Sample message
$_POST['_wpnonce'] not unslashed before sanitization. Use wp_unslash() or similar
ERRORMaintainabilityNot Allowed2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
Use of heredoc syntax (<<<) is not allowed; use standard strings or inline HTML instead
WARNINGMaintainabilityDirect Query2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGMaintainabilityNo Caching2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
WARNINGMaintainabilityslow db query meta value2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
Detected usage of meta_value, possible slow query.
WARNINGMaintainabilityunexpected markdown file2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
Unexpected markdown file "HOOKS.md" detected in plugin root. Only specific markdown files are expected in production plugins.
WARNINGSecurityDatabase parameter is not escaped1
- Category
- Security
- Occurrences
- 1
- Severity
- warning
Sample message
Unescaped parameter $table used in $wpdb->get_var()
ERRORSecurityDatabase parameter is not escaped1
- Category
- Security
- Occurrences
- 1
- Severity
- error
Sample message
Unescaped parameter $id used in $wpdb->query()\n$id assigned unsafely at line 1211.
WARNINGMaintainabilityNon-prefixed function1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "poo_switch_autoupdate_callback".
WARNINGSecuritywp redirect wp redirect1
- Category
- Security
- Occurrences
- 1
- Severity
- warning
Sample message
wp_redirect() found. Using wp_safe_redirect(), along with the "allowed_redirect_hosts" filter if needed, can help avoid any chances of malicious redirects within code. It is also important to remember to call exit() after a redirect so that no other unwanted code is executed.
WARNINGSecurityInput is not validated1
- Category
- Security
- Occurrences
- 1
- Severity
- warning
Sample message
Detected usage of a possibly undefined superglobal array index: $_SERVER['REMOTE_ADDR']. Check that the array index exists before using it.
ERRORMaintainabilityfile system operations mkdir1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: mkdir().
External Connections
Potential connections found in static code analysis.
Outbound calls
298
External assets
0
Incoming endpoints
2
Notable Domains
pierre.lannoy.fr148 · outbound
tools.ietf.org16 · outbound
php.net7 · outbound
momentjs.com6 · outbound
perfops.one5 · outbound
cdn.jsdelivr.net4 · outbound
Platform / Reference Domains
github.com57 · platform/reference
w3.org17 · platform/reference
wordpress.org6 · platform/reference
lists.w3.org1 · platform/reference
opensource.org1 · platform/reference
profiles.wordpress.org1 · platform/reference
External Asset Domains
No external asset domains detected.
Incoming Endpoints
No public endpoints detected.
Admin AJAX endpoints2
wp_ajax_hide_pose_nagauthenticated
wp_ajax
wp_ajax_pose_get_statsauthenticated
wp_ajax
Score History
2 score snapshots
v3.5.0
32
Latest
- Findings
- 308
- Errors
- 205
- Warnings
- 103
- Check
- 2.1.0
v3.4.0
33
Score
- Findings
- 299
- Errors
- 196
- Warnings
- 103
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 32 | 308 | 205 | 103 | v3.5.0 | 2.1.0 |
| 33 | 299 | 196 | 103 | v3.4.0 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Plugin
Author
Issue
Output is not escaped71 findingsMissing Translators Comment40 findingsMissing direct file access protection34 findingsNon-prefixed namespace32 findingsSetting is missing a sanitization callback26 findingsNon-prefixed hook name22 findingsNon-prefixed global variable21 findingsOffloaded Content10 findings
Domain
Related
User Role Editor100 scoreWooCommerce22 scoreAll-in-One WP Migration and Backup34 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreClassic Editor63 scoreLiteSpeed Cache35 scoreAkismet Anti-spam: Spam Protection35 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreWP Mail SMTP by WPForms – The Most Popular SMTP and Email Log Plugin30 scoreWPCode – Insert Headers and Footers + Custom Code Snippets – WordPress Code Manager88 scoreWPS Hide Login42 scoreLoginizer25 scoreSecurity Optimizer – The All-In-One Protection Plugin35 score
Plugin
Author
Issue
Output is not escaped71 findingsMissing Translators Comment40 findingsMissing direct file access protection34 findingsNon-prefixed namespace32 findingsSetting is missing a sanitization callback26 findingsNon-prefixed hook name22 findingsNon-prefixed global variable21 findingsOffloaded Content10 findings
Domain
Related
User Role Editor100 scoreWooCommerce22 scoreAll-in-One WP Migration and Backup34 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreClassic Editor63 scoreLiteSpeed Cache35 scoreAkismet Anti-spam: Spam Protection35 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreWP Mail SMTP by WPForms – The Most Popular SMTP and Email Log Plugin30 scoreWPCode – Insert Headers and Footers + Custom Code Snippets – WordPress Code Manager88 scoreWPS Hide Login42 scoreLoginizer25 scoreSecurity Optimizer – The All-In-One Protection Plugin35 score
Related Plugins
User Role Editor
700k+ active installs
100
Login as User: See the Site as Any User
30k+ active installs
100
Login Security Captcha
10k+ active installs
100
Simple Login Log
5k+ active installs
100
Active Directory Integration / LDAP Integration
4k+ active installs
100
Shibboleth
3k+ active installs
100