Provides Instagram embedding functionality exclusively for WP Block Editor. Your feeds, other Pro accounts' feeds and posts related to hashtags.
42
Score
33
Errors
281
Warnings
+0
Change
Category Scores
Security5
Repo100
Performance100
Maintainability72
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Maintainability
265
4 issue groups
Security
34
5 issue groups
I18n
15
5 issue groups
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$_follow_pos".253
- Category
- Maintainability
- Occurrences
- 253
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$_follow_pos".
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$content'.17
- Category
- Security
- Occurrences
- 17
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$content'.
WARNINGMaintainabilityNot In FooterIn footer ($in_footer) is not set explicitly wp_enqueue_script; It is recommended to load scripts in the footer. Please set this value to `true` to load it in the footer, or explicitly `false` if it should be loaded in the header.10
- Category
- Maintainability
- Occurrences
- 10
- Severity
- warning
Sample message
In footer ($in_footer) is not set explicitly wp_enqueue_script; It is recommended to load scripts in the footer. Please set this value to `true` to load it in the footer, or explicitly `false` if it should be loaded in the header.
ERRORI18nMissing Translators CommentA function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.10
- Category
- I18n
- Occurrences
- 10
- Severity
- error
Sample message
A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_GET['_nonce']6
- Category
- Security
- Occurrences
- 6
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_GET['_nonce']
WARNINGSecurityInput is not validatedDetected usage of a possibly undefined superglobal array index: $_GET['_nonce']. Check that the array index exists before using it.4
- Category
- Security
- Occurrences
- 4
- Severity
- warning
Sample message
Detected usage of a possibly undefined superglobal array index: $_GET['_nonce']. Check that the array index exists before using it.
WARNINGSecurityRequest data is not unslashed$_GET['_nonce'] not unslashed before sanitization. Use wp_unslash() or similar4
- Category
- Security
- Occurrences
- 4
- Severity
- warning
Sample message
$_GET['_nonce'] not unslashed before sanitization. Use wp_unslash() or similar
WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.3
- Category
- Security
- Occurrences
- 3
- Severity
- warning
Sample message
Processing form data without nonce verification.
ERRORI18nUnordered Placeholders TextMultiple placeholders in translatable strings should be ordered. Expected "%1$d, %2$d", but got "%d, %d" in '* Set between %d days and %d days.'.2
- Category
- I18n
- Occurrences
- 2
- Severity
- error
Sample message
Multiple placeholders in translatable strings should be ordered. Expected "%1$d, %2$d", but got "%d, %d" in '* Set between %d days and %d days.'.
WARNINGMaintainabilityerror log error logerror_log() found. Debug code should not normally be used in production.1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
error_log() found. Debug code should not normally be used in production.
Show 4 moreShow less
ERRORI18nMissing Arg Domain1
- Category
- I18n
- Occurrences
- 1
- Severity
- error
Sample message
Missing $domain parameter in function call to __().
ERRORI18nNon Singular String Literal Text1
- Category
- I18n
- Occurrences
- 1
- Severity
- error
Sample message
The $text parameter must be a single text string literal. Found: sprintf( 'No user token is set for ID = %s.', implode( ', ', $no_user_token_ids ) )
ERRORI18nText Domain Mismatch1
- Category
- I18n
- Occurrences
- 1
- Severity
- error
Sample message
Mismatched text domain. Expected 'still-be-combine-social-photos' but got 'still-be'.
ERRORMaintainabilityMissing direct file access protection1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
External Connections
Potential connections found in static code analysis.
Outbound calls
40
External assets
0
Incoming endpoints
0
Notable Domains
instagram.com12 · outbound
graph.facebook.com5 · outbound
graph.instagram.com5 · outbound
api.still-be.com4 · outbound
donate.stripe.com2 · outbound
fontawesome.com2 · outbound
Platform / Reference Domains
w3.org4 · platform/reference
wordpress.org3 · platform/reference
External Asset Domains
No external asset domains detected.
Incoming Endpoints
No public endpoints detected.
Score History
2 score snapshots
v0.21.0
42
Latest
- Findings
- 314
- Errors
- 33
- Warnings
- 281
- Check
- 2.0.0
v0.20.3
42
Score
- Findings
- 314
- Errors
- 33
- Warnings
- 281
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 42 | 314 | 33 | 281 | v0.21.0 | 2.0.0 |
| 42 | 314 | 33 | 281 | v0.20.3 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Author
Issue
Domain
Related
Crowdsignal Forms100 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce22 scoreAkismet Anti-spam: Spam Protection35 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder39 scoreClassic Editor63 scoreLiteSpeed Cache35 scoreAll-in-One WP Migration and Backup34 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreSmash Balloon Social Photo Feed – Easy Social Feeds Plugin25 scoreSpectra Legacy – Gutenberg Blocks25 scoreBreadcrumb NavXT36 scorePDF Embedder – PDF Viewer & Embed PDF Files for WordPress91 score
Author
Issue
Domain
Related
Crowdsignal Forms100 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce22 scoreAkismet Anti-spam: Spam Protection35 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder39 scoreClassic Editor63 scoreLiteSpeed Cache35 scoreAll-in-One WP Migration and Backup34 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreSmash Balloon Social Photo Feed – Easy Social Feeds Plugin25 scoreSpectra Legacy – Gutenberg Blocks25 scoreBreadcrumb NavXT36 scorePDF Embedder – PDF Viewer & Embed PDF Files for WordPress91 score
Related Plugins
Crowdsignal Forms
200k+ active installs
100
Embed PDF Viewer
20k+ active installs
100
Advance Custom HTML – Show Off Code Snippets with Live Preview
10k+ active installs
100
Shortcode Redirect
10k+ active installs
100
Carousel Block – Showcase Images in Elegant Sliding Displays
7k+ active installs
100
Hyperlink Group Block
7k+ active installs
100