Starbox is the Author Box for Humans. Professional Themes to choose from, HTML5, Social Media Profiles, Google Authorship
52
Score
144
Errors
19
Warnings
+0
Change
Category Scores
Security26
Repo94
Performance100
Maintainability70
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
I18n
125
5 issue groups
Security
23
5 issue groups
Maintainability
14
9 issue groups
Repo Compliance
1
1 issue group
ERRORI18nNon Singular String Literal DomainThe $domain parameter must be a single text string literal. Found: _ABH_PLUGIN_NAME_96
- Category
- I18n
- Occurrences
- 96
- Severity
- error
Sample message
The $domain parameter must be a single text string literal. Found: _ABH_PLUGIN_NAME_
ERRORI18nMissing Translators CommentA function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.11
- Category
- I18n
- Occurrences
- 11
- Severity
- error
Sample message
A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.
ERRORI18nUnordered Placeholders TextMultiple placeholders in translatable strings should be ordered. Expected "%1$s, %2$s", but got "%s, %s" in 'Choose the default theme to be displayed %s inside each blog article %s'.10
- Category
- I18n
- Occurrences
- 10
- Severity
- error
Sample message
Multiple placeholders in translatable strings should be ordered. Expected "%1$s, %2$s", but got "%s, %s" in 'Choose the default theme to be displayed %s inside each blog article %s'.
WARNINGSecurityMissing nonce verificationProcessing form data without nonce verification.9
- Category
- Security
- Occurrences
- 9
- Severity
- warning
Sample message
Processing form data without nonce verification.
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$message'.7
- Category
- Security
- Occurrences
- 7
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$message'.
ERRORI18nNon Singular String Literal TextThe $text parameter must be a single text string literal. Found: $this->menu[0]6
- Category
- I18n
- Occurrences
- 6
- Severity
- error
Sample message
The $text parameter must be a single text string literal. Found: $this->menu[0]
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_FILES['abh_gravatar']3
- Category
- Security
- Occurrences
- 3
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_FILES['abh_gravatar']
WARNINGSecurityRequest data is not unslashed$_POST[$key] not unslashed before sanitization. Use wp_unslash() or similar3
- Category
- Security
- Occurrences
- 3
- Severity
- warning
Sample message
$_POST[$key] not unslashed before sanitization. Use wp_unslash() or similar
ERRORMaintainabilityNon Enqueued ScriptScripts must be registered/enqueued via wp_enqueue_script()3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- error
Sample message
Scripts must be registered/enqueued via wp_enqueue_script()
ERRORMaintainabilityNon Enqueued StylesheetStylesheets must be registered/enqueued via wp_enqueue_style()3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- error
Sample message
Stylesheets must be registered/enqueued via wp_enqueue_style()
Show 10 moreShow less
WARNINGMaintainabilityslow db query meta key2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
Detected usage of meta_key, possible slow query.
ERRORI18nDeprecated parameter: load_plugin_textdomain parameter 22
- Category
- I18n
- Occurrences
- 2
- Severity
- error
Sample message
The parameter "_ABH_PLUGIN_NAME_ . '/languages/'" at position #2 of load_plugin_textdomain() has been deprecated since WordPress version 2.7.0. Instead do not pass the parameter.
ERRORMaintainabilityMissing required parameter: parse_str_result1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
The "result" parameter for function parse_str() is missing.
ERRORMaintainabilitydate date1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.
WARNINGSecurityNonce verification recommended1
- Category
- Security
- Occurrences
- 1
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGMaintainabilitymismatched plugin name1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Plugin name "Starbox - the Author Box for Humans" is different from the name declared in plugin header "StarBox".
ERRORRepo Complianceoutdated tested upto header1
- Category
- Repo Compliance
- Occurrences
- 1
- Severity
- error
Sample message
Tested up to: 6.8 < 7.0. The "Tested up to" value in your plugin is not set to the current version of WordPress. This means your plugin will not show up in searches, as we require plugins to be compatible and documented as tested up to the most recent version of WordPress.
ERRORMaintainabilitytrunk stable tag1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
Incorrect Stable Tag. It's recommended not to use "Stable Tag: trunk". Your Stable Tag is meant to be the stable version of your plugin and it needs to be exactly the same with the Version in your main plugin file's header. Any mismatch can prevent users from downloading the correct plugin files from WordPress.org.
ERRORMaintainabilityuninstall missing constant check1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
Check for WP_UNINSTALL_PLUGIN constant missing.
ERRORMaintainabilitywp function not compatible with requires wp1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
Function "wp_doing_ajax()" requires WordPress 4.7.0, but your plugin minimum supported version is WordPress 4.6.0.
External Connections
Not analyzed yet.
Score History
First score snapshot
v3.5.4
52
Latest
- Findings
- 163
- Errors
- 144
- Warnings
- 19
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 52 | 163 | 144 | 19 | v3.5.4 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueRelated
Relationship links
Author
Issue
Non Singular String Literal Domain96 findingsMissing Translators Comment11 findingsUnordered Placeholders Text10 findingsMissing nonce verification9 findingsOutput is not escaped7 findingsNon Singular String Literal Text6 findingsInput is not sanitized3 findingsRequest data is not unslashed3 findings
Related
Hide/Remove Metadata100 scoreLiteSpeed Cache35 scoreWooCommerce21 scoreAll-in-One WP Migration and Backup34 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreWP Mail SMTP by WPForms – The Most Popular SMTP and Email Log Plugin30 scoreWPCode – Insert Headers and Footers + Custom Code Snippets – WordPress Code Manager88 scoreAdvanced Custom Fields (ACF®)23 scoreLimit Login Attempts Security – Login Security, 2FA, Firewall, Brute Force Prevention25 scoreManageWP Worker23 scoreBreadcrumb NavXT36 scoreThe Events Calendar23 scoreWP-PageNavi36 scoreEdit Author Slug74 score
Author
Issue
Non Singular String Literal Domain96 findingsMissing Translators Comment11 findingsUnordered Placeholders Text10 findingsMissing nonce verification9 findingsOutput is not escaped7 findingsNon Singular String Literal Text6 findingsInput is not sanitized3 findingsRequest data is not unslashed3 findings
Related
Hide/Remove Metadata100 scoreLiteSpeed Cache35 scoreWooCommerce21 scoreAll-in-One WP Migration and Backup34 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreWP Mail SMTP by WPForms – The Most Popular SMTP and Email Log Plugin30 scoreWPCode – Insert Headers and Footers + Custom Code Snippets – WordPress Code Manager88 scoreAdvanced Custom Fields (ACF®)23 scoreLimit Login Attempts Security – Login Security, 2FA, Firewall, Brute Force Prevention25 scoreManageWP Worker23 scoreBreadcrumb NavXT36 scoreThe Events Calendar23 scoreWP-PageNavi36 scoreEdit Author Slug74 score
Related Plugins
Hide/Remove Metadata
20k+ active installs
100
Guest Author
5k+ active installs
98
Remove Author Pages
2k+ active installs
98
ThemeRuby Multi Authors – Assign Multiple Writers to Posts
2k+ active installs
98
Author Bio Box
1k+ active installs
98
Change Author Link Structure
700 active installs
98