Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Security
59
4 issue groups
Maintainability
12
4 issue groups
I18n
1
1 issue group
Repo Compliance
1
1 issue group
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$account_name'.48
- Category
- Security
- Occurrences
- 48
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$account_name'.
ERRORMaintainabilitywp function not compatible with requires wpFunction "get_rest_url()" requires WordPress 4.4.0, but your plugin minimum supported version is WordPress 3.1.0.7
- Category
- Maintainability
- Occurrences
- 7
- Severity
- error
Sample message
Function "get_rest_url()" requires WordPress 4.4.0, but your plugin minimum supported version is WordPress 3.1.0.
ERRORSecuritySetting is missing a sanitization callbackSanitization missing for register_setting().5
- Category
- Security
- Occurrences
- 5
- Severity
- error
Sample message
Sanitization missing for register_setting().
ERRORSecurityUnsafe printing functionAll output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.5
- Category
- Security
- Occurrences
- 5
- Severity
- error
Sample message
All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.
WARNINGMaintainabilityNon-prefixed functionFunctions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "activate_shinystat_analytics".3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "activate_shinystat_analytics".
WARNINGI18nDiscouraged text-domain loadingload_plugin_textdomain() has been discouraged since WordPress version 4.6. When your plugin is hosted on WordPress.org, you no longer need to manually include this function call for translations under your plugin slug. WordPress will automatically load the translations for you as needed.1
- Category
- I18n
- Occurrences
- 1
- Severity
- warning
Sample message
load_plugin_textdomain() has been discouraged since WordPress version 4.6. When your plugin is hosted on WordPress.org, you no longer need to manually include this function call for translations under your plugin slug. WordPress will automatically load the translations for you as needed.
WARNINGMaintainabilityNon-prefixed hook nameHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "active_plugins".1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "active_plugins".
WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.1
- Category
- Security
- Occurrences
- 1
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGMaintainabilityMissing VersionResource version not set in call to wp_enqueue_script(). This means new versions of the script may not always be loaded due to browser caching.1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Resource version not set in call to wp_enqueue_script(). This means new versions of the script may not always be loaded due to browser caching.
WARNINGRepo Compliancereadme parser warnings too many tagsOne or more tags were ignored. Please limit your plugin to 5 tags.1
- Category
- Repo Compliance
- Occurrences
- 1
- Severity
- warning
Sample message
One or more tags were ignored. Please limit your plugin to 5 tags.
External Connections
Potential connections found in static code analysis.
Outbound calls
23
External assets
0
Incoming endpoints
3
Notable Domains
shinystat.com14 · outbound
amp-wp.org2 · outbound
codice.shinystat.com1 · outbound
codicebusiness.shinystat.com1 · outbound
report.shinystat.com1 · outbound
semver.org1 · outbound
Platform / Reference Domains
gnu.org1 · platform/reference
it.wordpress.org1 · platform/reference
wordpress.org1 · platform/reference
External Asset Domains
No external asset domains detected.
Incoming Endpoints
/wp-json/shinystat/v1/cartREST
register_rest_route
/wp-json/shinystat/v1/product/(?P<id>\d+)REST
register_rest_route
/wp-json/shinystat/v1/set_product_quantityREST
register_rest_route
Score History
2 score snapshots
v1.0.17
43
Latest
- Findings
- 73
- Errors
- 65
- Warnings
- 8
- Check
- 2.0.0
v1.0.16
41
Score
- Findings
- 113
- Errors
- 88
- Warnings
- 25
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 43 | 73 | 65 | 8 | v1.0.17 | 2.0.0 |
| 41 | 113 | 88 | 25 | v1.0.16 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Author
Issue
Output is not escaped48 findingswp function not compatible with requires wp7 findingsSetting is missing a sanitization callback5 findingsUnsafe printing function5 findingsNon-prefixed function3 findingsDiscouraged text-domain loading1 findingNon-prefixed hook name1 findingNonce verification recommended1 finding
Domain
Related
Site Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreClassic Editor63 scoreAkismet Anti-spam: Spam Protection35 scoreAll-in-One WP Migration and Backup34 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreElementor Website Builder – more than just a page builder39 scoreWooCommerce21 scoreLiteSpeed Cache35 scoreMonsterInsights – Google Analytics Dashboard for WordPress (Website Stats Made Easy)25 scoreHostinger Reach – AI-Powered Email Marketing for WordPress40 scorePopup Builder & Popup Maker for WordPress – OptinMonster Email Marketing and Lead Generation32 scorePopup Maker – Boost Sales, Conversions, Optins, Subscribers with the Ultimate WP Popup Builder66 scoreWP Statistics – Simple, privacy-friendly Google Analytics alternative25 scoreWP Client Reports100 score
Author
Issue
Output is not escaped48 findingswp function not compatible with requires wp7 findingsSetting is missing a sanitization callback5 findingsUnsafe printing function5 findingsNon-prefixed function3 findingsDiscouraged text-domain loading1 findingNon-prefixed hook name1 findingNonce verification recommended1 finding
Domain
Related
Site Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreClassic Editor63 scoreAkismet Anti-spam: Spam Protection35 scoreAll-in-One WP Migration and Backup34 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreElementor Website Builder – more than just a page builder39 scoreWooCommerce21 scoreLiteSpeed Cache35 scoreMonsterInsights – Google Analytics Dashboard for WordPress (Website Stats Made Easy)25 scoreHostinger Reach – AI-Powered Email Marketing for WordPress40 scorePopup Builder & Popup Maker for WordPress – OptinMonster Email Marketing and Lead Generation32 scorePopup Maker – Boost Sales, Conversions, Optins, Subscribers with the Ultimate WP Popup Builder66 scoreWP Statistics – Simple, privacy-friendly Google Analytics alternative25 scoreWP Client Reports100 score
Related Plugins
WP Client Reports
6k+ active installs
100
GetResponse Official
4k+ active installs
100
Block for Mailchimp – grow your email list with signup forms
2k+ active installs
100
Coupon Shortcodes for WooCommerce
1k+ active installs
100
VigIA – AI Visibility, Analytics & Control
1k+ active installs
100
What Would Seth Godin Do
900 active installs
100