Turn your SQL queries into beautiful dynamic charts with a visual SQL builder, live autocomplete and no-code date/input filters.
41
Score
52
Errors
56
Warnings
+0
Change
Category Scores
Security0
Repo100
Performance100
Maintainability82
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Security
43
7 issue groups
Maintainability
36
6 issue groups
I18n
29
2 issue groups
ERRORI18nText Domain MismatchMismatched text domain. Expected 'sql-chart-builder' but got 'guaven_sqlcharts'.28
- Category
- I18n
- Occurrences
- 28
- Severity
- error
Sample message
Mismatched text domain. Expected 'sql-chart-builder' but got 'guaven_sqlcharts'.
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$gvnsql_argexample".22
- Category
- Maintainability
- Occurrences
- 22
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$gvnsql_argexample".
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found 'guaven_sqlcharts_axis_title'.16
- Category
- Security
- Occurrences
- 16
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found 'guaven_sqlcharts_axis_title'.
WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.9
- Category
- Security
- Occurrences
- 9
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_GET[$vrow_arr[0]]6
- Category
- Security
- Occurrences
- 6
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_GET[$vrow_arr[0]]
WARNINGSecurityRequest data is not unslashed$_GET[$vrow_arr[0]] not unslashed before sanitization. Use wp_unslash() or similar5
- Category
- Security
- Occurrences
- 5
- Severity
- warning
Sample message
$_GET[$vrow_arr[0]] not unslashed before sanitization. Use wp_unslash() or similar
WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
ERRORSecuritySQL query is not preparedUse placeholders and $wpdb->prepare(); found $i4
- Category
- Security
- Occurrences
- 4
- Severity
- error
Sample message
Use placeholders and $wpdb->prepare(); found $i
WARNINGMaintainabilityNon-prefixed functionFunctions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "gvn_chart_check_sql_query".4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- warning
Sample message
Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "gvn_chart_check_sql_query".
Show 5 moreShow less
ERRORSecurityDatabase parameter is not escaped2
- Category
- Security
- Occurrences
- 2
- Severity
- error
Sample message
Unescaped parameter $sql_split[$i] used in $wpdb->get_results()\n$sql_split[$i] used without escaping.
WARNINGMaintainabilityNon-prefixed constant1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "GVNSQLCHARTS_VERSION".
WARNINGSecurityInput is not validated1
- Category
- Security
- Occurrences
- 1
- Severity
- warning
Sample message
Detected usage of a possibly undefined superglobal array index: $_SERVER["REQUEST_URI"]. Check that the array index exists before using it.
ERRORMaintainabilityinvalid tested upto minor1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
Tested up to: 7.1.2 The version number should only include major versions 7.1.
ERRORI18ntextdomain invalid format1
- Category
- I18n
- Occurrences
- 1
- Severity
- error
Sample message
The "Text Domain" header in the plugin file should only contain lowercase letters, numbers, and hyphens. Found "guaven_sqlcharts".
External Connections
Potential connections found in static code analysis.
Outbound calls
14
External assets
0
Incoming endpoints
2
Notable Domains
guaven.com5 · outbound
fengyuanchen.github.io2 · outbound
chartjs.org1 · outbound
codecanyon.net1 · outbound
jsdelivr.com1 · outbound
Platform / Reference Domains
External Asset Domains
No external asset domains detected.
Incoming Endpoints
No public endpoints detected.
Admin AJAX endpoints2
wp_ajax_guaven_sqlcharts_onboarding_notice_dismissedauthenticated
wp_ajax
wp_ajax_gvnsql_get_columnsauthenticated
wp_ajax
Score History
8 score snapshots
v3.0.6
41
Latest
- Findings
- 108
- Errors
- 52
- Warnings
- 56
- Check
- 2.1.0
v3.0.5
41
Score
- Findings
- 108
- Errors
- 52
- Warnings
- 56
- Check
- 2.1.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 41 | 108 | 52 | 56 | v3.0.6 | 2.1.0 |
| 41 | 108 | 52 | 56 | v3.0.5 | 2.1.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Author
Issue
Domain
Related
Yoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder38 scoreLiteSpeed Cache35 scoreWooCommerce22 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreAkismet Anti-spam: Spam Protection35 scoreJetpack – WP Security, Backup, Speed, & Growth22 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreAdvanced Custom Fields (ACF®)23 scoreSearch & Replace36 scoreDatabase Backup for WordPress35 scoreIndex WP MySQL For Speed25 score
Author
Issue
Domain
Related
Yoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder38 scoreLiteSpeed Cache35 scoreWooCommerce22 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreAkismet Anti-spam: Spam Protection35 scoreJetpack – WP Security, Backup, Speed, & Growth22 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreAdvanced Custom Fields (ACF®)23 scoreSearch & Replace36 scoreDatabase Backup for WordPress35 scoreIndex WP MySQL For Speed25 score
Related Plugins
Ninja Charts – Interactive Charts and Graphs
3k+ active installs
100
Simple Table Manager
300 active installs
100
WP-ServerInfo
10k+ active installs
99
Chart Block – Visualize Data with Bar, Line, Pie Charts
1k+ active installs
98
Run SQL Query
500 active installs
78
UsageDD
1k+ active installs
77