The most secure MCP Server for WordPress with Undo, plus AI Copilot & Chat Agent. ChatGPT, Claude, Gemini, OpenRouter & Mistral.
40
Score
5
Errors
116
Warnings
+0
Change
Category Scores
Security0
Repo100
Performance100
Maintainability76
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Security
75
8 issue groups
Maintainability
46
10 issue groups
WARNINGSecurityInterpolated SQL is not preparedUse placeholders and $wpdb->prepare(); found interpolated variable {$auto_table} at \t\t\t LEFT JOIN {$auto_table} a ON l.automation_id = a.id \r\n37
- Category
- Security
- Occurrences
- 37
- Severity
- warning
Sample message
Use placeholders and $wpdb->prepare(); found interpolated variable {$auto_table} at \t\t\t LEFT JOIN {$auto_table} a ON l.automation_id = a.id \r\n
WARNINGMaintainabilityslow db query meta keyDetected usage of meta_key, possible slow query.17
- Category
- Maintainability
- Occurrences
- 17
- Severity
- warning
Sample message
Detected usage of meta_key, possible slow query.
WARNINGSecurityMissing nonce verificationProcessing form data without nonce verification.17
- Category
- Security
- Occurrences
- 17
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGMaintainabilityslow db query meta valueDetected usage of meta_value, possible slow query.10
- Category
- Maintainability
- Occurrences
- 10
- Severity
- warning
Sample message
Detected usage of meta_value, possible slow query.
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_GET['sflmcp_gsc_message']7
- Category
- Security
- Occurrences
- 7
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_GET['sflmcp_gsc_message']
WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.6
- Category
- Security
- Occurrences
- 6
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.5
- Category
- Maintainability
- Occurrences
- 5
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().5
- Category
- Maintainability
- Occurrences
- 5
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
WARNINGSecurityUnfinished PrepareReplacement variables found, but no valid placeholders found in the query.5
- Category
- Security
- Occurrences
- 5
- Severity
- warning
Sample message
Replacement variables found, but no valid placeholders found in the query.
WARNINGMaintainabilitySchema ChangeAttempting a database schema change is discouraged.4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- warning
Sample message
Attempting a database schema change is discouraged.
Show 8 moreShow less
WARNINGSecurityDatabase parameter is not escaped1
- Category
- Security
- Occurrences
- 1
- Severity
- warning
Sample message
Unescaped parameter $profiles_table used in $wpdb->get_var()\n$profiles_table assigned unsafely at line 2013.
ERRORSecurityDatabase parameter is not escaped1
- Category
- Security
- Occurrences
- 1
- Severity
- error
Sample message
Unescaped parameter $query used in $wpdb->query()\n$query assigned unsafely at line 367.
ERRORSecuritySQL query is not prepared1
- Category
- Security
- Occurrences
- 1
- Severity
- error
Sample message
Use placeholders and $wpdb->prepare(); found $query
WARNINGMaintainabilityslow db query meta query1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Detected usage of meta_query, possible slow query.
WARNINGMaintainabilityslow db query tax query1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Detected usage of tax_query, possible slow query.
ERRORMaintainabilityfile system operations fclose1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fclose().
ERRORMaintainabilityfile system operations fopen1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fopen().
ERRORMaintainabilityfile system operations fread1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fread().
External Connections
Potential connections found in static code analysis.
Outbound calls
48
External assets
0
Incoming endpoints
81
Notable Domains
api.openai.com7 · outbound
generativelanguage.googleapis.com6 · outbound
googleapis.com4 · outbound
andromedanova.com2 · outbound
hook.eu1.make.com2 · outbound
hooks.zapier.com2 · outbound
Platform / Reference Domains
github.com4 · platform/reference
make.wordpress.org2 · platform/reference
developer.wordpress.org1 · platform/reference
gnu.org1 · platform/reference
w3.org1 · platform/reference
wordpress.org1 · platform/reference
External Asset Domains
No external asset domains detected.
Incoming Endpoints
No public endpoints detected.
Admin AJAX endpoints81
admin_post_sflmcp_download_mcpb_bundleauthenticated
admin_post
admin_post_sflmcp_gsc_oauth_callbackauthenticated
admin_post
admin_post_sflmcp_gsc_oauth_startauthenticated
admin_post
admin_post_sflmcp_save_addonsauthenticated
admin_post
wp_ajax_sflmcp_apply_profileauthenticated
wp_ajax
wp_ajax_sflmcp_automation_delete_taskauthenticated
wp_ajax
wp_ajax_sflmcp_automation_get_logsauthenticated
wp_ajax
wp_ajax_sflmcp_automation_get_tasksauthenticated
wp_ajax
wp_ajax_sflmcp_automation_get_templatesauthenticated
wp_ajax
wp_ajax_sflmcp_automation_run_taskauthenticated
wp_ajax
wp_ajax_sflmcp_automation_save_taskauthenticated
wp_ajax
wp_ajax_sflmcp_automation_test_promptauthenticated
wp_ajax
69 more hidden
Score History
10 score snapshots
v3.4.6
40
Latest
- Findings
- 121
- Errors
- 5
- Warnings
- 116
- Check
- 2.0.0
v3.4.5
40
Score
- Findings
- 121
- Errors
- 5
- Warnings
- 116
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 40 | 121 | 5 | 116 | v3.4.6 | 2.0.0 |
| 40 | 121 | 5 | 116 | v3.4.5 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Author
Issue
Domain
Related
Yoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce21 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreRank Math SEO – AI SEO Tools to Dominate SEO Rankings30 scoreElementor Website Builder – more than just a page builder39 scoreAkismet Anti-spam: Spam Protection35 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreAll-In-One Security (AIOS) – Security and Firewall24 scoreAI Engine – The Chatbot, AI Framework & MCP for WordPress23 scoreSocial Sharing Plugin – Sassy Social Share22 scoreLocoAI – Auto Translate for Loco Translate95 scoreAI Provider for Anthropic78 scoreChat Button & Custom ChatGPT-Powered Bot by GetButton.io58 scoreRoyal MCP – Secure AI Connector for Claude, ChatGPT & Gemini40 score
Author
Issue
Domain
Related
Yoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce21 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreRank Math SEO – AI SEO Tools to Dominate SEO Rankings30 scoreElementor Website Builder – more than just a page builder39 scoreAkismet Anti-spam: Spam Protection35 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreAll-In-One Security (AIOS) – Security and Firewall24 scoreAI Engine – The Chatbot, AI Framework & MCP for WordPress23 scoreSocial Sharing Plugin – Sassy Social Share22 scoreLocoAI – Auto Translate for Loco Translate95 scoreAI Provider for Anthropic78 scoreChat Button & Custom ChatGPT-Powered Bot by GetButton.io58 scoreRoyal MCP – Secure AI Connector for Claude, ChatGPT & Gemini40 score
Related Plugins
Easy MCP AI – Connector for Claude, ChatGPT & SEO Data
6k+ active installs
100
VigIA – AI Visibility, Analytics & Control
1k+ active installs
100
Share Buttons & AI-powered Summaries
1k+ active installs
100
Block AI Crawlers
1k+ active installs
100
LLMs.txt Generator
1k+ active installs
99
AutoPen – AI Content Writer
1k+ active installs
99