Starbox is the Author Box for Humans. Professional Themes to choose from, HTML5, Social Media Profiles, Google Authorship
Category Scores
Top Issues by Category
i18n125
security23
maintainability14
repo_compliance1
Issues Details
163 issues found in latest scan
The $domain parameter must be a single text string literal. Found: _ABH_PLUGIN_NAME_
A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.
Multiple placeholders in translatable strings should be ordered. Expected "%1$s, %2$s", but got "%s, %s" in 'Choose the default theme to be displayed %s inside each blog article %s'.
Processing form data without nonce verification.
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$message'.
The $text parameter must be a single text string literal. Found: $this->menu[0]
Detected usage of a non-sanitized input variable: $_FILES['abh_gravatar']
$_POST[$key] not unslashed before sanitization. Use wp_unslash() or similar
Scripts must be registered/enqueued via wp_enqueue_script()
Stylesheets must be registered/enqueued via wp_enqueue_style()
Detected usage of meta_key, possible slow query.
The parameter "_ABH_PLUGIN_NAME_ . '/languages/'" at position #2 of load_plugin_textdomain() has been deprecated since WordPress version 2.7.0. Instead do not pass the parameter.
The "result" parameter for function parse_str() is missing.
date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.
Processing form data without nonce verification.
Plugin name "Starbox - the Author Box for Humans" is different from the name declared in plugin header "StarBox".
Tested up to: 6.8 < 7.0. The "Tested up to" value in your plugin is not set to the current version of WordPress. This means your plugin will not show up in searches, as we require plugins to be compatible and documented as tested up to the most recent version of WordPress.
Incorrect Stable Tag. It's recommended not to use "Stable Tag: trunk". Your Stable Tag is meant to be the stable version of your plugin and it needs to be exactly the same with the Version in your main plugin file's header. Any mismatch can prevent users from downloading the correct plugin files from WordPress.org.
Function "wp_doing_ajax()" requires WordPress 4.7.0, but your plugin minimum supported version is WordPress 4.6.0.
| Code | Type | Message | Count |
|---|---|---|---|
| WordPress.WP.I18n.NonSingularStringLiteralDomain | ERROR | The $domain parameter must be a single text string literal. Found: _ABH_PLUGIN_NAME_ | 96 |
| WordPress.WP.I18n.MissingTranslatorsComment | ERROR | A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders. | 11 |
| WordPress.WP.I18n.UnorderedPlaceholdersText | ERROR | Multiple placeholders in translatable strings should be ordered. Expected "%1$s, %2$s", but got "%s, %s" in 'Choose the default theme to be displayed %s inside each blog article %s'. | 10 |
| WordPress.Security.NonceVerification.Missing | WARNING | Processing form data without nonce verification. | 9 |
| WordPress.Security.EscapeOutput.OutputNotEscaped | ERROR | All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$message'. | 7 |
| WordPress.WP.I18n.NonSingularStringLiteralText | ERROR | The $text parameter must be a single text string literal. Found: $this->menu[0] | 6 |
| WordPress.Security.ValidatedSanitizedInput.InputNotSanitized | WARNING | Detected usage of a non-sanitized input variable: $_FILES['abh_gravatar'] | 3 |
| WordPress.Security.ValidatedSanitizedInput.MissingUnslash | WARNING | $_POST[$key] not unslashed before sanitization. Use wp_unslash() or similar | 3 |
| WordPress.WP.EnqueuedResources.NonEnqueuedScript | ERROR | Scripts must be registered/enqueued via wp_enqueue_script() | 3 |
| WordPress.WP.EnqueuedResources.NonEnqueuedStylesheet | ERROR | Stylesheets must be registered/enqueued via wp_enqueue_style() | 3 |
| WordPress.DB.SlowDBQuery.slow_db_query_meta_key | WARNING | Detected usage of meta_key, possible slow query. | 2 |
| WordPress.WP.DeprecatedParameters.Load_plugin_textdomainParam2Found | ERROR | The parameter "_ABH_PLUGIN_NAME_ . '/languages/'" at position #2 of load_plugin_textdomain() has been deprecated since WordPress version 2.7.0. Instead do not pass the parameter. | 2 |
| PluginCheck.CodeAnalysis.RequiredFunctionParameters.parse_str_resultMissing | ERROR | The "result" parameter for function parse_str() is missing. | 1 |
| WordPress.DateTime.RestrictedFunctions.date_date | ERROR | date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead. | 1 |
| WordPress.Security.NonceVerification.Recommended | WARNING | Processing form data without nonce verification. | 1 |
| mismatched_plugin_name | WARNING | Plugin name "Starbox - the Author Box for Humans" is different from the name declared in plugin header "StarBox". | 1 |
| outdated_tested_upto_header | ERROR | Tested up to: 6.8 < 7.0. The "Tested up to" value in your plugin is not set to the current version of WordPress. This means your plugin will not show up in searches, as we require plugins to be compatible and documented as tested up to the most recent version of WordPress. | 1 |
| trunk_stable_tag | ERROR | Incorrect Stable Tag. It's recommended not to use "Stable Tag: trunk". Your Stable Tag is meant to be the stable version of your plugin and it needs to be exactly the same with the Version in your main plugin file's header. Any mismatch can prevent users from downloading the correct plugin files from WordPress.org. | 1 |
| uninstall_missing_constant_check | ERROR | Check for WP_UNINSTALL_PLUGIN constant missing. | 1 |
| wp_function_not_compatible_with_requires_wp | ERROR | Function "wp_doing_ajax()" requires WordPress 4.7.0, but your plugin minimum supported version is WordPress 4.6.0. | 1 |
Latest Snapshot
Findings
163
Errors
144
Warnings
19
Score History
First score snapshot
First scan completed Jun 20, 2026
v3.5.4 · Plugin Check 2.0.0 · Model 2026.06-mvp-static-v2
Jun 20, 2026
v3.5.4
52
Latest
- Findings
- 163
- Errors
- 144
- Warnings
- 19
- Plugin Check
- 2.0.0
- Model
- 2026.06-mvp-static-v2
| Scan | Score | Findings | Errors | Warnings | Plugin | Plugin Check | Model |
|---|---|---|---|---|---|---|---|
| Jun 20, 2026Latest | 52 | 163 | 144 | 19 | v3.5.4 | 2.0.0 | 2026.06-mvp-static-v2 |
