Site Reviews is the best free reviews plugin. It integrates with WooCommerce & SureCart and works just like reviews on Amazon, Tripadvisor, and Yelp.
23
Score
1,380
Errors
605
Warnings
+0
Change
Category Scores
Security0
Repo97
Performance85
Maintainability0
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Security
1,038
8 issue groups
Maintainability
647
14 issue groups
I18n
252
2 issue groups
Performance
12
1 issue group
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"</{$this->get_tag()}>"'.616
- Category
- Security
- Occurrences
- 616
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"</{$this->get_tag()}>"'.
ERRORSecurityException output is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"Method [$method] does not exist."'.379
- Category
- Security
- Occurrences
- 379
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"Method [$method] does not exist."'.
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$addon".286
- Category
- Maintainability
- Occurrences
- 286
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$addon".
ERRORI18nText Domain MismatchMismatched text domain. Expected 'site-reviews' but got 'action-scheduler'.220
- Category
- I18n
- Occurrences
- 220
- Severity
- error
Sample message
Mismatched text domain. Expected 'site-reviews' but got 'action-scheduler'.
ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;83
- Category
- Maintainability
- Occurrences
- 83
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.78
- Category
- Maintainability
- Occurrences
- 78
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().69
- Category
- Maintainability
- Occurrences
- 69
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
WARNINGMaintainabilityNon-prefixed hook nameHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "admin_memory_limit".47
- Category
- Maintainability
- Occurrences
- 47
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "admin_memory_limit".
ERRORI18nMissing Translators CommentA function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.32
- Category
- I18n
- Occurrences
- 32
- Severity
- error
Sample message
A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.
WARNINGMaintainabilityNon-prefixed functionFunctions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "as_enqueue_async_action".18
- Category
- Maintainability
- Occurrences
- 18
- Severity
- warning
Sample message
Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "as_enqueue_async_action".
Show 15 moreShow less
WARNINGSecurityDatabase parameter is not escaped17
- Category
- Security
- Occurrences
- 17
- Severity
- warning
Sample message
Unescaped parameter $column_name used in $wpdb->get_var()
ERRORMaintainabilitydate date14
- Category
- Maintainability
- Occurrences
- 14
- Severity
- error
Sample message
date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.
WARNINGMaintainabilityDynamic hook name14
- Category
- Maintainability
- Occurrences
- 14
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "$hook".
WARNINGPerformancePost Not In exclude12
- Category
- Performance
- Occurrences
- 12
- Severity
- warning
Sample message
Using exclusionary parameters, like exclude, in calls to get_posts() should be done with caution, see https://docs.wpvip.com/databases/optimize-queries/using-post__not_in/ for more information.
WARNINGMaintainabilityslow db query meta key9
- Category
- Maintainability
- Occurrences
- 9
- Severity
- warning
Sample message
Detected usage of meta_key, possible slow query.
ERRORMaintainabilityOffloaded Content8
- Category
- Maintainability
- Occurrences
- 8
- Severity
- error
Sample message
Offloading images, js, css, and other scripts to your servers or any remote service is disallowed.
ERRORSecurityUnsafe printing function8
- Category
- Security
- Occurrences
- 8
- Severity
- error
Sample message
All output should be run through an escaping function (like echo esc_html_x() or echo esc_attr_x()), found '_ex'.
WARNINGMaintainabilityslow db query meta value6
- Category
- Maintainability
- Occurrences
- 6
- Severity
- warning
Sample message
Detected usage of meta_value, possible slow query.
WARNINGSecurityMissing nonce verification6
- Category
- Security
- Occurrences
- 6
- Severity
- warning
Sample message
Processing form data without nonce verification.
ERRORMaintainabilityparse url parse url6
- Category
- Maintainability
- Occurrences
- 6
- Severity
- error
Sample message
parse_url() is discouraged because of inconsistency in the output across PHP versions; use wp_parse_url() instead.
WARNINGMaintainabilitySchema Change5
- Category
- Maintainability
- Occurrences
- 5
- Severity
- warning
Sample message
Attempting a database schema change is discouraged.
WARNINGSecurityInterpolated SQL is not prepared4
- Category
- Security
- Occurrences
- 4
- Severity
- warning
Sample message
Use placeholders and $wpdb->prepare(); found interpolated variable {$constraint->CONSTRAINT_NAME} at ALTER TABLE {$constraint->TABLE_NAME} DROP FOREIGN KEY {$constraint->CONSTRAINT_NAME};\n
WARNINGMaintainabilityslow db query meta query4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- warning
Sample message
Detected usage of meta_query, possible slow query.
WARNINGSecurityInput is not sanitized4
- Category
- Security
- Occurrences
- 4
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_POST[$key]
WARNINGSecurityRequest data is not unslashed4
- Category
- Security
- Occurrences
- 4
- Severity
- warning
Sample message
$_POST[$key] not unslashed before sanitization. Use wp_unslash() or similar
External Connections
Potential connections found in static code analysis.
Outbound calls
300
External assets
0
Incoming endpoints
0
Notable Domains
developers.google.com8 · outbound
google.com7 · outbound
schemas.wp.org7 · outbound
fulmicoton.com5 · outbound
xkcd.com5 · outbound
developer.friendlycaptcha.com4 · outbound
Platform / Reference Domains
w3.org62 · platform/reference
schema.org37 · platform/reference
wordpress.org33 · platform/reference
api.w.org11 · platform/reference
codex.wordpress.org8 · platform/reference
github.com6 · platform/reference
developer.wordpress.org3 · platform/reference
api.wordpress.org1 · platform/reference
blog.schema.org1 · platform/reference
downloads.wordpress.org1 · platform/reference
opensource.org1 · platform/reference
External Asset Domains
No external asset domains detected.
Incoming Endpoints
No public endpoints detected.
Score History
10 score snapshots
v8.3.2
23
Latest
- Findings
- 1,985
- Errors
- 1,380
- Warnings
- 605
- Check
- 2.1.0
v8.3.1
23
Score
- Findings
- 1,985
- Errors
- 1,380
- Warnings
- 605
- Check
- 2.1.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 23 | 1,985 | 1,380 | 605 | v8.3.2 | 2.1.0 |
| 23 | 1,985 | 1,380 | 605 | v8.3.1 | 2.1.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Plugin
Author
Category
Issue
Domain
Related
Yoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce22 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreClassic Editor63 scoreAkismet Anti-spam: Spam Protection35 scoreAll-in-One WP Migration and Backup34 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreWP Mail SMTP by WPForms – The Most Popular SMTP and Email Log Plugin30 scoreJetpack – WP Security, Backup, Speed, & Growth22 scoreReviews Feed – Add Testimonials and Customer Reviews From Google Reviews, Yelp, TripAdvisor, and More24 scoreRich Showcase for Google Reviews32 scoreWP Google Review Slider25 scoreWP Customer Reviews98 scoreWP Tripadvisor Review Widgets95 score
Plugin
Author
Category
Issue
Domain
Related
Yoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce22 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreClassic Editor63 scoreAkismet Anti-spam: Spam Protection35 scoreAll-in-One WP Migration and Backup34 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreWP Mail SMTP by WPForms – The Most Popular SMTP and Email Log Plugin30 scoreJetpack – WP Security, Backup, Speed, & Growth22 scoreReviews Feed – Add Testimonials and Customer Reviews From Google Reviews, Yelp, TripAdvisor, and More24 scoreRich Showcase for Google Reviews32 scoreWP Google Review Slider25 scoreWP Customer Reviews98 scoreWP Tripadvisor Review Widgets95 score
Related Plugins
Reviews Widgets for Google & 45+ platforms by Repuso
1k+ active installs
100
Business Reviews – build trust with real customer feedback
1k+ active installs
100
Easy Testimonial Blocks
1k+ active installs
100
Absolute Reviews
6k+ active installs
99
TWB Woocommerce Reviews
600 active installs
99
Manually Approved Reviews for WooCommerce
600 active installs
99