The most secure MCP Server for WordPress with Undo, plus AI Copilot & Chat Agent. ChatGPT, Claude, Gemini, OpenRouter & Mistral.
40
Score
16
Errors
131
Warnings
-1
Change
Category Scores
Security0
Repo97
Performance100
Maintainability77
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Security
88
9 issue groups
Maintainability
57
8 issue groups
I18n
1
1 issue group
Repo Compliance
1
1 issue group
WARNINGSecurityInterpolated SQL is not preparedUse placeholders and $wpdb->prepare(); found interpolated variable {$auto_table} at \t\t\t LEFT JOIN {$auto_table} a ON l.automation_id = a.id \r\n37
- Category
- Security
- Occurrences
- 37
- Severity
- warning
Sample message
Use placeholders and $wpdb->prepare(); found interpolated variable {$auto_table} at \t\t\t LEFT JOIN {$auto_table} a ON l.automation_id = a.id \r\n
WARNINGMaintainabilityslow db query meta keyDetected usage of meta_key, possible slow query.17
- Category
- Maintainability
- Occurrences
- 17
- Severity
- warning
Sample message
Detected usage of meta_key, possible slow query.
WARNINGSecurityMissing nonce verificationProcessing form data without nonce verification.17
- Category
- Security
- Occurrences
- 17
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGMaintainabilityDirect IntegrationDirect integration with a third-party AI provider (api.anthropic.com) detected. Consider the WordPress AI Client (wp_ai_client_prompt()) introduced in WordPress 7.0.13
- Category
- Maintainability
- Occurrences
- 13
- Severity
- warning
Sample message
Direct integration with a third-party AI provider (api.anthropic.com) detected. Consider the WordPress AI Client (wp_ai_client_prompt()) introduced in WordPress 7.0.
ERRORSecurityException output is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$count'.13
- Category
- Security
- Occurrences
- 13
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$count'.
WARNINGMaintainabilityslow db query meta valueDetected usage of meta_value, possible slow query.10
- Category
- Maintainability
- Occurrences
- 10
- Severity
- warning
Sample message
Detected usage of meta_value, possible slow query.
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_GET['sflmcp_gsc_message']7
- Category
- Security
- Occurrences
- 7
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_GET['sflmcp_gsc_message']
WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.6
- Category
- Security
- Occurrences
- 6
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.5
- Category
- Maintainability
- Occurrences
- 5
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().5
- Category
- Maintainability
- Occurrences
- 5
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
Show 9 moreShow less
WARNINGSecurityUnfinished Prepare5
- Category
- Security
- Occurrences
- 5
- Severity
- warning
Sample message
Replacement variables found, but no valid placeholders found in the query.
WARNINGMaintainabilitySchema Change4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- warning
Sample message
Attempting a database schema change is discouraged.
WARNINGMaintainabilityslow db query tax query2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
Detected usage of tax_query, possible slow query.
WARNINGSecurityDatabase parameter is not escaped1
- Category
- Security
- Occurrences
- 1
- Severity
- warning
Sample message
Unescaped parameter $profiles_table used in $wpdb->get_var()\n$profiles_table assigned unsafely at line 2220.
ERRORSecurityDatabase parameter is not escaped1
- Category
- Security
- Occurrences
- 1
- Severity
- error
Sample message
Unescaped parameter $query used in $wpdb->query()\n$query assigned unsafely at line 374.
ERRORSecuritySQL query is not prepared1
- Category
- Security
- Occurrences
- 1
- Severity
- error
Sample message
Use placeholders and $wpdb->prepare(); found $query
WARNINGMaintainabilityslow db query meta query1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Detected usage of meta_query, possible slow query.
ERRORI18nMissing Translators Comment1
- Category
- I18n
- Occurrences
- 1
- Severity
- error
Sample message
A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.
WARNINGRepo Compliancereadme parser warnings trimmed section changelog1
- Category
- Repo Compliance
- Occurrences
- 1
- Severity
- warning
Sample message
The "Changelog" section is too long and was truncated. A maximum of 5000 characters is supported.
External Connections
Potential connections found in static code analysis.
Outbound calls
33
External assets
0
Incoming endpoints
81
Notable Domains
googleapis.com4 · outbound
andromedanova.com2 · outbound
generativelanguage.googleapis.com2 · outbound
accounts.google.com1 · outbound
api.anthropic.com1 · outbound
api.openai.com1 · outbound
Platform / Reference Domains
github.com4 · platform/reference
make.wordpress.org2 · platform/reference
developer.wordpress.org1 · platform/reference
gnu.org1 · platform/reference
w3.org1 · platform/reference
wordpress.org1 · platform/reference
External Asset Domains
No external asset domains detected.
Incoming Endpoints
No public endpoints detected.
Admin AJAX endpoints81
admin_post_sflmcp_download_mcpb_bundleauthenticated
admin_post
admin_post_sflmcp_gsc_oauth_callbackauthenticated
admin_post
admin_post_sflmcp_gsc_oauth_startauthenticated
admin_post
admin_post_sflmcp_save_addonsauthenticated
admin_post
wp_ajax_sflmcp_apply_profileauthenticated
wp_ajax
wp_ajax_sflmcp_automation_delete_taskauthenticated
wp_ajax
wp_ajax_sflmcp_automation_get_logsauthenticated
wp_ajax
wp_ajax_sflmcp_automation_get_tasksauthenticated
wp_ajax
wp_ajax_sflmcp_automation_get_templatesauthenticated
wp_ajax
wp_ajax_sflmcp_automation_run_taskauthenticated
wp_ajax
wp_ajax_sflmcp_automation_save_taskauthenticated
wp_ajax
wp_ajax_sflmcp_automation_test_promptauthenticated
wp_ajax
69 more hidden
Score History
13 score snapshots
v3.5.4
40
Latest
- Findings
- 147
- Errors
- 16
- Warnings
- 131
- Check
- 2.1.0
v3.4.8
41
Score
- Findings
- 118
- Errors
- 2
- Warnings
- 116
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 40 | 147 | 16 | 131 | v3.5.4 | 2.1.0 |
| 41 | 118 | 2 | 116 | v3.4.8 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Author
Issue
Domain
Related
Yoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce22 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreRank Math SEO – AI SEO Tools to Dominate SEO Rankings29 scoreElementor Website Builder – more than just a page builder38 scoreAkismet Anti-spam: Spam Protection35 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreAll-In-One Security (AIOS) – Security and Firewall24 scoreSocial Sharing Plugin – Sassy Social Share22 scoreAI Engine – The Chatbot, AI Framework & MCP for WordPress23 scoreLocoAI – Auto Translate for Loco Translate95 scoreAI73 scoreAI Provider for Anthropic78 scoreAI Provider for Google62 score
Author
Issue
Domain
Related
Yoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce22 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreRank Math SEO – AI SEO Tools to Dominate SEO Rankings29 scoreElementor Website Builder – more than just a page builder38 scoreAkismet Anti-spam: Spam Protection35 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreAll-In-One Security (AIOS) – Security and Firewall24 scoreSocial Sharing Plugin – Sassy Social Share22 scoreAI Engine – The Chatbot, AI Framework & MCP for WordPress23 scoreLocoAI – Auto Translate for Loco Translate95 scoreAI73 scoreAI Provider for Anthropic78 scoreAI Provider for Google62 score
Related Plugins
VigIA – AI Visibility, Analytics & Control
1k+ active installs
100
Share Buttons & AI-powered Summaries
1k+ active installs
100
Block AI Crawlers
1k+ active installs
100
Cowboy MCP – Free MCP Server with Undo for Claude & ChatGPT
400 active installs
100
AutoPen – AI Content Writer
3k+ active installs
99
LLMs.txt Generator
1k+ active installs
99