Simple XML Sitemap Generator

add a sitemap to your wordpress website.

v2.5Eric-Oliver MächlerUpdated Added 3k+ installs92% rating
54
Score
8
Errors
28
Warnings
+0
Change

Category Scores

Security24
Repo89
Performance100
Maintainability89

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

36 findings

Maintainability

18

5 issue groups

Security

16

7 issue groups

Repo Compliance

2

2 issue groups

WARNINGMaintainabilityNon Prefixed Function FoundFunctions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "QWA_sxmlsg".9
Category
Maintainability
Occurrences
9
Severity
warning

Sample message

Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "QWA_sxmlsg".

WARNINGMaintainabilityNon Prefixed Variable FoundGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$absolute_path".4
Category
Maintainability
Occurrences
4
Severity
warning

Sample message

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$absolute_path".

WARNINGSecurityMissing Unslash$_POST['nonce_reset_cpt'] not unslashed before sanitization. Use wp_unslash() or similar4
Category
Security
Occurrences
4
Severity
warning

Sample message

$_POST['nonce_reset_cpt'] not unslashed before sanitization. Use wp_unslash() or similar

ERRORSecurityUnsafe Printing FunctionAll output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.3
Category
Security
Occurrences
3
Severity
error

Sample message

All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.

WARNINGSecurityInput Not SanitizedDetected usage of a non-sanitized input variable: $_POST['nonce_reset_cpt']3
Category
Security
Occurrences
3
Severity
warning

Sample message

Detected usage of a non-sanitized input variable: $_POST['nonce_reset_cpt']

WARNINGMaintainabilityerror log error logerror_log() found. Debug code should not normally be used in production.2
Category
Maintainability
Occurrences
2
Severity
warning

Sample message

error_log() found. Debug code should not normally be used in production.

WARNINGSecurityMissingProcessing form data without nonce verification.2
Category
Security
Occurrences
2
Severity
warning

Sample message

Processing form data without nonce verification.

WARNINGSecurityRecommendedProcessing form data without nonce verification.2
Category
Security
Occurrences
2
Severity
warning

Sample message

Processing form data without nonce verification.

ERRORMaintainabilitymissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;2
Category
Maintainability
Occurrences
2
Severity
error

Sample message

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

ERRORSecurityOutput Not EscapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$sxmlsg_cpt'.1
Category
Security
Occurrences
1
Severity
error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$sxmlsg_cpt'.

Show 4 more issue groups
WARNINGSecurityInput Not Validated1
Category
Security
Occurrences
1
Severity
warning

Sample message

Detected usage of a possibly undefined superglobal array index: $_SERVER['SCRIPT_FILENAME']. Check that the array index exists before using it.

WARNINGMaintainabilityMissing Version1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

Resource version not set in call to wp_enqueue_style(). This means new versions of the style may not always be loaded due to browser caching.

ERRORRepo Complianceoutdated tested upto header1
Category
Repo Compliance
Occurrences
1
Severity
error

Sample message

Tested up to: 6.9 < 7.0. The "Tested up to" value in your plugin is not set to the current version of WordPress. This means your plugin will not show up in searches, as we require plugins to be compatible and documented as tested up to the most recent version of WordPress.

ERRORRepo Compliancereadme short description non official language1
Category
Repo Compliance
Occurrences
1
Severity
error

Sample message

The readme short description contains unofficial language. It must be written in standard English.

Score History

First score snapshot

First scan
Jun 21, 2026, 09:54 AM UTC
Plugin version
v2.5
Plugin Check
2.0.0
Scoring model
2026.06-mvp-static-v2
Scan records1

v2.5

54

Latest

Findings
36
Errors
8
Warnings
28
Plugin Check
2.0.0
Model
2026.06-mvp-static-v2

Related Plugins

Disable WP Sitemaps

10k+ active installs

99
Hierarchical HTML Sitemap

4k+ active installs

97
Page-list

30k+ active installs

97
Table of Contents Plus

200k+ active installs

95