StoryChief

Connect your tools, knowledge, and workflows to plan, create, manage, and distribute content with smart AI

v1.0.46storychiefUpdated Added 1k+ installs94% rating
51
Score
12
Errors
55
Warnings
+0
Change

Category Scores

Security18
Repo100
Performance100
Maintainability81

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

67 findings

Security

39

5 issue groups

Maintainability

28

9 issue groups

WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_GET['tab']12
Category
Security
Occurrences
12
Severity
warning

Sample message

Detected usage of a non-sanitized input variable: $_GET['tab']

WARNINGSecurityRequest data is not unslashed$_GET['tab'] not unslashed before sanitization. Use wp_unslash() or similar12
Category
Security
Occurrences
12
Severity
warning

Sample message

$_GET['tab'] not unslashed before sanitization. Use wp_unslash() or similar

ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;12
Category
Maintainability
Occurrences
12
Severity
error

Sample message

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$active_tab".7
Category
Maintainability
Occurrences
7
Severity
warning

Sample message

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$active_tab".

WARNINGSecurityInput is not validatedDetected usage of a possibly undefined superglobal array index: $_POST['_wpnonce']. Check that the array index exists before using it.6
Category
Security
Occurrences
6
Severity
warning

Sample message

Detected usage of a possibly undefined superglobal array index: $_POST['_wpnonce']. Check that the array index exists before using it.

WARNINGSecurityMissing nonce verificationProcessing form data without nonce verification.5
Category
Security
Occurrences
5
Severity
warning

Sample message

Processing form data without nonce verification.

WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.4
Category
Security
Occurrences
4
Severity
warning

Sample message

Processing form data without nonce verification.

WARNINGMaintainabilityDiscouraged PHP functionThe use of function ini_set() is discouraged3
Category
Maintainability
Occurrences
3
Severity
warning

Sample message

The use of function ini_set() is discouraged

WARNINGMaintainabilityslow db query meta queryDetected usage of meta_query, possible slow query.1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

Detected usage of meta_query, possible slow query.

WARNINGMaintainabilityDynamic hook nameHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "$hook".1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "$hook".

Show 4 more
WARNINGMaintainabilityNon-prefixed class1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "WP_Async_Task".

WARNINGMaintainabilityNon-prefixed constant1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "DISABLE_WP_CRON".

WARNINGMaintainabilityNon-prefixed hook name1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "https_local_ssl_verify".

WARNINGMaintainabilityprevent path disclosure error reporting1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

error_reporting() can lead to full path disclosure.

External Connections

Potential connections found in static code analysis.

8 domains

Outbound calls

15

External assets

0

Incoming endpoints

3

Notable Domains

help.storychief.io2 · outbound
storychief.io2 · outbound

Platform / Reference Domains

wordpress.org4 · platform/reference
github.com2 · platform/reference
codex.wordpress.org1 · platform/reference
gnu.org1 · platform/reference

External Asset Domains

No external asset domains detected.

Incoming Endpoints

/wp-json/storychief/webhookREST

register_rest_route

admin_post_nopriv_wp_async_$this->actionpublic

admin_post

Admin AJAX endpoints1
admin_post_wp_async_$this->actionauthenticated

admin_post

Score History

First score snapshot

v1.0.46

51

Latest

Findings
67
Errors
12
Warnings
55
Check
2.0.0

Relationship Map

Author, categories, issues, domains, and nearby plugins.

32 nodes

Related Plugins

ContentStudio

700 active installs

99
Machete

7k+ active installs

99
Search Analytics for WP

3k+ active installs

99