Free, lightweight WordPress security. Harden your site with login protection & 2FA, see Site Health clearly and run on-demand checks—setup in minutes.
Category Scores
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
I18n
36
1 issue group
Maintainability
15
8 issue groups
Security
2
2 issue groups
ERRORI18nText Domain MismatchMismatched text domain. Expected 'sitelock' but got 'sitelock-wordpress-plugin'.36
- Category
- I18n
- Occurrences
- 36
- Severity
- error
Sample message
Mismatched text domain. Expected 'sitelock' but got 'sitelock-wordpress-plugin'.
WARNINGMaintainabilityNon-prefixed classClasses declared by a theme/plugin should start with the theme/plugin prefix. Found: "ApiHelper".3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "ApiHelper".
ERRORMaintainabilityparse url parse urlparse_url() is discouraged because of inconsistency in the output across PHP versions; use wp_parse_url() instead.3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- error
Sample message
parse_url() is discouraged because of inconsistency in the output across PHP versions; use wp_parse_url() instead.
ERRORMaintainabilityunlink unlinkunlink() is discouraged. Use wp_delete_file() to delete a file.3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- error
Sample message
unlink() is discouraged. Use wp_delete_file() to delete a file.
WARNINGMaintainabilitytrademarked termThe plugin name includes a restricted term. Your chosen plugin name - "SiteLock Security – WP Hardening, Login Security & Malware Scans" - contains the restricted term "wp" which cannot be used at all in your plugin name.2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
The plugin name includes a restricted term. Your chosen plugin name - "SiteLock Security – WP Hardening, Login Security & Malware Scans" - contains the restricted term "wp" which cannot be used at all in your plugin name.
WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_SERVER['HTTP_HOST']1
- Category
- Security
- Occurrences
- 1
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_SERVER['HTTP_HOST']
WARNINGSecurityRequest data is not unslashed$_SERVER['HTTP_HOST'] not unslashed before sanitization. Use wp_unslash() or similar1
- Category
- Security
- Occurrences
- 1
- Severity
- warning
Sample message
$_SERVER['HTTP_HOST'] not unslashed before sanitization. Use wp_unslash() or similar
ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
Show 1 moreShow less
ERRORMaintainabilitywp function not compatible with requires wp1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
Function "wp_set_option_autoload()" requires WordPress 6.4.0, but your plugin minimum supported version is WordPress 5.6.0.
External Connections
Potential connections found in static code analysis.
Outbound calls
88
External assets
0
Incoming endpoints
8
Notable Domains
Platform / Reference Domains
External Asset Domains
No external asset domains detected.
Incoming Endpoints
No public endpoints detected.
Admin AJAX endpoints8
admin_post
admin_post
admin_post
wp_ajax
wp_ajax
wp_ajax
wp_ajax
wp_ajax
Score History
First score snapshot
v5.1.2
89
Latest
- Findings
- 53
- Errors
- 44
- Warnings
- 9
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 89 | 53 | 44 | 9 | v5.1.2 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.