20+ lightweight widgets and enhancements for Elementor. Modular, fast, and zero bloat — assets load only when used.
40
Score
143
Errors
81
Warnings
+0
Change
Category Scores
Security0
Repo94
Performance98
Maintainability79
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Security
87
6 issue groups
Maintainability
70
4 issue groups
I18n
65
4 issue groups
Performance
1
1 issue group
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$autoplay'.72
- Category
- Security
- Occurrences
- 72
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$autoplay'.
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$align".64
- Category
- Maintainability
- Occurrences
- 64
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$align".
ERRORI18nText Domain MismatchMismatched text domain. Expected 'stax-addons-for-elementor' but got 'elementor'.62
- Category
- I18n
- Occurrences
- 62
- Severity
- error
Sample message
Mismatched text domain. Expected 'stax-addons-for-elementor' but got 'elementor'.
WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.6
- Category
- Security
- Occurrences
- 6
- Severity
- warning
Sample message
Processing form data without nonce verification.
ERRORMaintainabilitystrip tags strip tagsstrip_tags() is discouraged. Use the more comprehensive wp_strip_all_tags() instead.4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- error
Sample message
strip_tags() is discouraged. Use the more comprehensive wp_strip_all_tags() instead.
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_GET['page']3
- Category
- Security
- Occurrences
- 3
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_GET['page']
WARNINGSecurityRequest data is not unslashed$_GET['page'] not unslashed before sanitization. Use wp_unslash() or similar3
- Category
- Security
- Occurrences
- 3
- Severity
- warning
Sample message
$_GET['page'] not unslashed before sanitization. Use wp_unslash() or similar
WARNINGSecuritywp redirect wp redirectwp_redirect() found. Using wp_safe_redirect(), along with the "allowed_redirect_hosts" filter if needed, can help avoid any chances of malicious redirects within code. It is also important to remember to call exit() after a redirect so that no other unwanted code is executed.2
- Category
- Security
- Occurrences
- 2
- Severity
- warning
Sample message
wp_redirect() found. Using wp_safe_redirect(), along with the "allowed_redirect_hosts" filter if needed, can help avoid any chances of malicious redirects within code. It is also important to remember to call exit() after a redirect so that no other unwanted code is executed.
WARNINGMaintainabilityNon-prefixed functionFunctions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "appsero_init_tracker_stax_addons_for_elementor".1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "appsero_init_tracker_stax_addons_for_elementor".
WARNINGMaintainabilityNon-prefixed hook nameHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "svq_breadcrumb_term".1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "svq_breadcrumb_term".
Show 6 moreShow less
ERRORSecurityUnsafe printing function1
- Category
- Security
- Occurrences
- 1
- Severity
- error
Sample message
All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.
ERRORI18nMissing Arg Domain1
- Category
- I18n
- Occurrences
- 1
- Severity
- error
Sample message
Missing $domain parameter in function call to esc_attr__().
ERRORI18nMissing Translators Comment1
- Category
- I18n
- Occurrences
- 1
- Severity
- error
Sample message
A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.
ERRORI18nNon Singular String Literal Text1
- Category
- I18n
- Occurrences
- 1
- Severity
- error
Sample message
The $text parameter must be a single text string literal. Found: $settings['title_ornament']
WARNINGPerformancePost Not In exclude1
- Category
- Performance
- Occurrences
- 1
- Severity
- warning
Sample message
Using exclusionary parameters, like exclude, in calls to get_posts() should be done with caution, see https://wpvip.com/documentation/performance-improvements-by-removing-usage-of-post__not_in/ for more information.
ERRORRepo Complianceplugin header no license1
- Category
- Repo Compliance
- Occurrences
- 1
- Severity
- error
Sample message
Missing "License" in Plugin Header. Please update your Plugin Header with a valid GPLv2 (or later) compatible license.
External Connections
Potential connections found in static code analysis.
Outbound calls
40
External assets
0
Incoming endpoints
2
Notable Domains
your-link.com10 · outbound
appsero.com3 · outbound
staxwp.com3 · outbound
php-fig.org2 · outbound
api.appsero.com1 · outbound
getcomposer.org1 · outbound
Platform / Reference Domains
External Asset Domains
No external asset domains detected.
Incoming Endpoints
No public endpoints detected.
Admin AJAX endpoints2
admin_post_stax_widget_activationauthenticated
admin_post
wp_ajax_appsero_refresh_license_authenticated
wp_ajax
Score History
First score snapshot
v1.5.1
40
Latest
- Findings
- 224
- Errors
- 143
- Warnings
- 81
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 40 | 224 | 143 | 81 | v1.5.1 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Author
Category
Issue
Domain
Related
Yoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce22 scoreAkismet Anti-spam: Spam Protection35 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder35 scoreClassic Editor63 scoreLiteSpeed Cache35 scoreAll-in-One WP Migration and Backup34 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreEssential Addons for Elementor – Popular Elementor Templates & Widgets63 scoreUltimate Addons for Elementor33 scoreElementsKit Elementor Addons – Advanced Widgets & Templates Addons for Elementor39 scorePremium Addons for Elementor – Powerful Elementor Templates & Widgets22 scoreRoyal Addons for Elementor – Addons and Templates Kit for Elementor21 score
Author
Category
Issue
Domain
Related
Yoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce22 scoreAkismet Anti-spam: Spam Protection35 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder35 scoreClassic Editor63 scoreLiteSpeed Cache35 scoreAll-in-One WP Migration and Backup34 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreEssential Addons for Elementor – Popular Elementor Templates & Widgets63 scoreUltimate Addons for Elementor33 scoreElementsKit Elementor Addons – Advanced Widgets & Templates Addons for Elementor39 scorePremium Addons for Elementor – Powerful Elementor Templates & Widgets22 scoreRoyal Addons for Elementor – Addons and Templates Kit for Elementor21 score
Related Plugins
Easy Elements for Elementor – Addons & Website Templates
1k+ active installs
100
Turbo Addons Elementor
2k+ active installs
100
99
Web Stories Widgets For Elementor
1k+ active installs
99
Widget Post Slider
1k+ active installs
99
X Addons for Elementor
900 active installs
99