Spacious Toolkit is a companion for Spacious WordPress theme by ThemeGrill
35
Score
48
Errors
94
Warnings
+0
Change
Category Scores
Security0
Repo81
Performance100
Maintainability63
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Maintainability
90
12 issue groups
Security
38
8 issue groups
I18n
11
4 issue groups
Supply Chain
2
1 issue group
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$alignment".55
- Category
- Maintainability
- Occurrences
- 55
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$alignment".
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$instance'.23
- Category
- Security
- Occurrences
- 23
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$instance'.
WARNINGMaintainabilityNon-prefixed classClasses declared by a theme/plugin should start with the theme/plugin prefix. Found: "SPT_AJAX".9
- Category
- Maintainability
- Occurrences
- 9
- Severity
- warning
Sample message
Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "SPT_AJAX".
WARNINGMaintainabilityDynamic hook nameHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "$this->identifier . '_cron_interval'".6
- Category
- Maintainability
- Occurrences
- 6
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "$this->identifier . '_cron_interval'".
WARNINGSecurityInterpolated SQL is not preparedUse placeholders and $wpdb->prepare(); found interpolated variable {$column} at \t\t\tWHERE {$column} LIKE %s\n5
- Category
- Security
- Occurrences
- 5
- Severity
- warning
Sample message
Use placeholders and $wpdb->prepare(); found interpolated variable {$column} at \t\t\tWHERE {$column} LIKE %s\n
ERRORI18nText Domain MismatchMismatched text domain. Expected 'spacious-toolkit' but got 'spacious'.4
- Category
- I18n
- Occurrences
- 4
- Severity
- error
Sample message
Mismatched text domain. Expected 'spacious-toolkit' but got 'spacious'.
WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
WARNINGMaintainabilityNon-prefixed hook nameHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "https_local_ssl_verify".3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "https_local_ssl_verify".
WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.3
- Category
- Security
- Occurrences
- 3
- Severity
- warning
Sample message
Processing form data without nonce verification.
Show 15 moreShow less
ERRORI18nMissing Arg Domain3
- Category
- I18n
- Occurrences
- 3
- Severity
- error
Sample message
Missing $domain parameter in function call to esc_html__().
ERRORI18nMissing Translators Comment3
- Category
- I18n
- Occurrences
- 3
- Severity
- error
Sample message
A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.
ERRORMaintainabilityMissing direct file access protection3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
ERRORMaintainabilitywp function not compatible with requires wp3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- error
Sample message
Function "get_user_locale()" requires WordPress 4.7.0, but your plugin minimum supported version is WordPress 4.5.0.
ERRORSecurityDatabase parameter is not escaped2
- Category
- Security
- Occurrences
- 2
- Severity
- error
Sample message
Unescaped parameter $column used in $wpdb->get_row()\n$column assigned unsafely at line 268.
WARNINGMaintainabilityNon-prefixed function2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "is_on_elementor_page".
WARNINGSecurityRequest data is not unslashed2
- Category
- Security
- Occurrences
- 2
- Severity
- warning
Sample message
$_GET['_spacious_toolkit_notice_nonce'] not unslashed before sanitization. Use wp_unslash() or similar
ERRORSupply ChainHidden files included2
- Category
- Supply Chain
- Occurrences
- 2
- Severity
- error
Sample message
Hidden files are not permitted.
ERRORSecuritySQL query is not prepared1
- Category
- Security
- Occurrences
- 1
- Severity
- error
Sample message
Use placeholders and $wpdb->prepare(); found $sql
WARNINGMaintainabilityNon-prefixed global variable1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "$name".
ERRORSecurityUnsafe printing function1
- Category
- Security
- Occurrences
- 1
- Severity
- error
Sample message
All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.
WARNINGSecurityInput is not sanitized1
- Category
- Security
- Occurrences
- 1
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_GET['_spacious_toolkit_notice_nonce']
ERRORMaintainabilityrand rand1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
rand() is discouraged. Use the far less predictable wp_rand() instead.
WARNINGMaintainabilityMissing Version1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Resource version not set in call to wp_enqueue_style(). This means new versions of the style may not always be loaded due to browser caching.
ERRORI18nUnordered Placeholders Text1
- Category
- I18n
- Occurrences
- 1
- Severity
- error
Sample message
Multiple placeholders in translatable strings should be ordered. Expected "%1$s, %2$s", but got "%s, %s" in 'If you like <strong>Spacious Toolkit</strong> please leave us a %s★★★★★%s rating. A huge thanks in advance!'.
External Connections
Potential connections found in static code analysis.
Outbound calls
28
External assets
0
Incoming endpoints
3
Notable Domains
Platform / Reference Domains
External Asset Domains
No external asset domains detected.
Incoming Endpoints
wp_ajax_nopriv_public
wp_ajax
wp_ajax_nopriv_spacious_toolkit_public
wp_ajax
Admin AJAX endpoints1
wp_ajax_spacious_toolkit_authenticated
wp_ajax
Score History
First score snapshot
v1.0.6
35
Latest
- Findings
- 142
- Errors
- 48
- Warnings
- 94
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 35 | 142 | 48 | 94 | v1.0.6 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Plugin
Author
Issue
Related
Starter Templates & Sites Pack by ThemeGrill72 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce22 scoreAkismet Anti-spam: Spam Protection35 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder39 scoreClassic Editor63 scoreLiteSpeed Cache35 scoreAll-in-One WP Migration and Backup34 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreChild Theme Configurator32 scoreAll In One Favicon34 scoreEasy Theme and Plugin Upgrades94 scoreTheme Editor22 score
Plugin
Author
Issue
Related
Starter Templates & Sites Pack by ThemeGrill72 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce22 scoreAkismet Anti-spam: Spam Protection35 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder39 scoreClassic Editor63 scoreLiteSpeed Cache35 scoreAll-in-One WP Migration and Backup34 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreChild Theme Configurator32 scoreAll In One Favicon34 scoreEasy Theme and Plugin Upgrades94 scoreTheme Editor22 score
Related Plugins
Generate Child Theme
9k+ active installs
100
Child Theme Check
800 active installs
100
Basic URL ShortCodes
4k+ active installs
99
Multi Device Switcher
20k+ active installs
98
Suffice Toolkit
1k+ active installs
98
Material Admin Theme
1k+ active installs
98