Social Share Buttons

Our Share Button addon to MaxButtons and MaxButtons Pro plugins gets you up and sharing within minutes. It's easy to setup and offers flexibility …

v1.20maxfoundryUpdated Added 1k+ installs96% rating
31
Score
462
Errors
156
Warnings
+0
Change

Category Scores

Security0
Repo80
Performance100
Maintainability47

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

618 findings

I18n

318

5 issue groups

Security

178

9 issue groups

Maintainability

113

11 issue groups

ERRORI18nText Domain MismatchMismatched text domain. Expected 'share-button' but got "maxbuttons".289
Category
I18n
Occurrences
289
Severity
error

Sample message

Mismatched text domain. Expected 'share-button' but got "maxbuttons".

WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$active".67
Category
Maintainability
Occurrences
67
Severity
warning

Sample message

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$active".

ERRORSecurityUnsafe printing functionAll output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.60
Category
Security
Occurrences
60
Severity
error

Sample message

All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.

ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"<a href='$url'>"'.56
Category
Security
Occurrences
56
Severity
error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"<a href='$url'>"'.

WARNINGSecurityMissing nonce verificationProcessing form data without nonce verification.14
Category
Security
Occurrences
14
Severity
warning

Sample message

Processing form data without nonce verification.

WARNINGSecurityInput is not validatedDetected usage of a possibly undefined superglobal array index: $_GET[&#039;doc&#039;]. Check that the array index exists before using it.13
Category
Security
Occurrences
13
Severity
warning

Sample message

Detected usage of a possibly undefined superglobal array index: $_GET[&#039;doc&#039;]. Check that the array index exists before using it.

WARNINGSecurityRequest data is not unslashed$_POST[&#039;block_name&#039;] not unslashed before sanitization. Use wp_unslash() or similar11
Category
Security
Occurrences
11
Severity
warning

Sample message

$_POST[&#039;block_name&#039;] not unslashed before sanitization. Use wp_unslash() or similar

ERRORI18nMissing Translators CommentA function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.11
Category
I18n
Occurrences
11
Severity
error

Sample message

A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.

WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.10
Category
Maintainability
Occurrences
10
Severity
warning

Sample message

Use of a direct database call is discouraged.

WARNINGMaintainabilityNon-prefixed hook nameHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: &quot;display/render/icon&quot;.10
Category
Maintainability
Occurrences
10
Severity
warning

Sample message

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: &quot;display/render/icon&quot;.

Show 15 more
WARNINGMaintainabilityNo Caching9
Category
Maintainability
Occurrences
9
Severity
warning

Sample message

Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().

ERRORSecuritySQL query is not prepared9
Category
Security
Occurrences
9
Severity
error

Sample message

Use placeholders and $wpdb->prepare(); found $sql

ERRORI18nMissing Arg Domain8
Category
I18n
Occurrences
8
Severity
error

Sample message

Missing $domain parameter in function call to __().

ERRORI18nUnordered Placeholders Text7
Category
I18n
Occurrences
7
Severity
error

Sample message

Multiple placeholders in translatable strings should be ordered. Expected "%1$s, %2$s", but got "%s, %s" in '%s Drag and drop %s the networks you want to use into the \'active\' box. You can find additional networks under the \'more networks\' tab.'.

ERRORSecurityDatabase parameter is not escaped6
Category
Security
Occurrences
6
Severity
error

Sample message

Unescaped parameter $sql used in $wpdb->get_col()\n$sql assigned unsafely at line 595.

ERRORMaintainabilityMissing direct file access protection6
Category
Maintainability
Occurrences
6
Severity
error

Sample message

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

WARNINGSecurityInput is not sanitized5
Category
Security
Occurrences
5
Severity
warning

Sample message

Detected usage of a non-sanitized input variable: $_POST[&#039;form&#039;]

WARNINGSecurityNonce verification recommended4
Category
Security
Occurrences
4
Severity
warning

Sample message

Processing form data without nonce verification.

ERRORI18nNon Singular String Literal Text3
Category
I18n
Occurrences
3
Severity
error

Sample message

The $text parameter must be a single text string literal. Found: sprintf("The Share Page networks will share your websites URL to other networks: These include %s networks.", implode(', ', $nw_share))

WARNINGMaintainabilityNo PHP code found2
Category
Maintainability
Occurrences
2
Severity
warning

Sample message

No PHP code was found in this file and short open tags are not allowed by this install of PHP. This file may be using short open tags but PHP does not allow them.

WARNINGMaintainabilityerror log var dump2
Category
Maintainability
Occurrences
2
Severity
warning

Sample message

var_dump() found. Debug code should not normally be used in production.

ERRORMaintainabilityparse url parse url2
Category
Maintainability
Occurrences
2
Severity
error

Sample message

parse_url() is discouraged because of inconsistency in the output across PHP versions; use wp_parse_url() instead.

ERRORMaintainabilityrand rand2
Category
Maintainability
Occurrences
2
Severity
error

Sample message

rand() is discouraged. Use the far less predictable wp_rand() instead.

WARNINGMaintainabilityMissing Version2
Category
Maintainability
Occurrences
2
Severity
warning

Sample message

Resource version not set in call to wp_enqueue_style(). This means new versions of the style may not always be loaded due to browser caching.

WARNINGMaintainabilityerror log print r1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

print_r() found. Debug code should not normally be used in production.

External Connections

Potential connections found in static code analysis.

100 domains

Outbound calls

209

External assets

0

Incoming endpoints

4

Notable Domains

en.wikipedia.org16 · outbound
msdn.microsoft.com5 · outbound
linkedin.com4 · outbound
maxbuttons.com4 · outbound
fly-phone.com3 · outbound
docs.aws.amazon.com2 · outbound

Platform / Reference Domains

github.com10 · platform/reference
wordpress.org4 · platform/reference

External Asset Domains

No external asset domains detected.

Incoming Endpoints

wp_ajax_nopriv_maxbuttons_social_csspublic

wp_ajax

wp_ajax_nopriv_mbsocial_get_countpublic

wp_ajax

Admin AJAX endpoints2
wp_ajax_maxbuttons_social_cssauthenticated

wp_ajax

wp_ajax_mbsocial_get_countauthenticated

wp_ajax

Score History

First score snapshot

v1.20

31

Latest

Findings
618
Errors
462
Warnings
156
Check
2.0.0

Relationship Map

Author, categories, issues, domains, and nearby plugins.

37 nodes

Related Plugins

Catch Web Tools

10k+ active installs

100
Social Icons Sticky

1k+ active installs

100
Ogp Plus

500 active installs

99
oEmbed Plus

4k+ active installs

98
Sharing Image

600 active installs

98