Connect your tools, knowledge, and workflows to plan, create, manage, and distribute content with smart AI
51
Score
12
Errors
55
Warnings
+0
Change
Category Scores
Security18
Repo100
Performance100
Maintainability81
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Security
39
5 issue groups
Maintainability
28
9 issue groups
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_GET['tab']12
- Category
- Security
- Occurrences
- 12
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_GET['tab']
WARNINGSecurityRequest data is not unslashed$_GET['tab'] not unslashed before sanitization. Use wp_unslash() or similar12
- Category
- Security
- Occurrences
- 12
- Severity
- warning
Sample message
$_GET['tab'] not unslashed before sanitization. Use wp_unslash() or similar
ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;12
- Category
- Maintainability
- Occurrences
- 12
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$active_tab".7
- Category
- Maintainability
- Occurrences
- 7
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$active_tab".
WARNINGSecurityInput is not validatedDetected usage of a possibly undefined superglobal array index: $_POST['_wpnonce']. Check that the array index exists before using it.6
- Category
- Security
- Occurrences
- 6
- Severity
- warning
Sample message
Detected usage of a possibly undefined superglobal array index: $_POST['_wpnonce']. Check that the array index exists before using it.
WARNINGSecurityMissing nonce verificationProcessing form data without nonce verification.5
- Category
- Security
- Occurrences
- 5
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.4
- Category
- Security
- Occurrences
- 4
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGMaintainabilityDiscouraged PHP functionThe use of function ini_set() is discouraged3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
The use of function ini_set() is discouraged
WARNINGMaintainabilityslow db query meta queryDetected usage of meta_query, possible slow query.1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Detected usage of meta_query, possible slow query.
WARNINGMaintainabilityDynamic hook nameHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "$hook".1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "$hook".
Show 4 moreShow less
WARNINGMaintainabilityNon-prefixed class1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "WP_Async_Task".
WARNINGMaintainabilityNon-prefixed constant1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "DISABLE_WP_CRON".
WARNINGMaintainabilityNon-prefixed hook name1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "https_local_ssl_verify".
WARNINGMaintainabilityprevent path disclosure error reporting1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
error_reporting() can lead to full path disclosure.
External Connections
Potential connections found in static code analysis.
Outbound calls
15
External assets
0
Incoming endpoints
3
Notable Domains
developers.storychief.io2 · outbound
help.storychief.io2 · outbound
storychief.io2 · outbound
redsandmarketing.com1 · outbound
Platform / Reference Domains
wordpress.org4 · platform/reference
github.com2 · platform/reference
codex.wordpress.org1 · platform/reference
gnu.org1 · platform/reference
External Asset Domains
No external asset domains detected.
Incoming Endpoints
/wp-json/storychief/webhookREST
register_rest_route
admin_post_nopriv_wp_async_$this->actionpublic
admin_post
Admin AJAX endpoints1
admin_post_wp_async_$this->actionauthenticated
admin_post
Score History
First score snapshot
v1.0.46
51
Latest
- Findings
- 67
- Errors
- 12
- Warnings
- 55
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 51 | 67 | 12 | 55 | v1.0.46 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Plugin
Author
Category
Issue
Input is not sanitized12 findingsRequest data is not unslashed12 findingsMissing direct file access protection12 findingsNon-prefixed global variable7 findingsInput is not validated6 findingsMissing nonce verification5 findingsNonce verification recommended4 findingsDiscouraged PHP function3 findings
Domain
Related
Site Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce21 scoreAll-in-One WP Migration and Backup34 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreContact Form 769 scoreClassic Editor63 scoreMonsterInsights – Google Analytics Dashboard for WordPress (Website Stats Made Easy)25 scoreWP Statistics – Simple, privacy-friendly Google Analytics alternative25 scoreGA Google Analytics – Connect Google Analytics to WordPress42 scoreExactMetrics – Google Analytics Dashboard for WordPress (Website Stats Plugin)24 scoreBurst Statistics – Simple WordPress Analytics (Google Analytics Alternative)66 scoreWeb Worker Offloading99 scoreWP Client Reports100 score
Plugin
Author
Category
Issue
Input is not sanitized12 findingsRequest data is not unslashed12 findingsMissing direct file access protection12 findingsNon-prefixed global variable7 findingsInput is not validated6 findingsMissing nonce verification5 findingsNonce verification recommended4 findingsDiscouraged PHP function3 findings
Domain
Related
Site Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce21 scoreAll-in-One WP Migration and Backup34 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreContact Form 769 scoreClassic Editor63 scoreMonsterInsights – Google Analytics Dashboard for WordPress (Website Stats Made Easy)25 scoreWP Statistics – Simple, privacy-friendly Google Analytics alternative25 scoreGA Google Analytics – Connect Google Analytics to WordPress42 scoreExactMetrics – Google Analytics Dashboard for WordPress (Website Stats Plugin)24 scoreBurst Statistics – Simple WordPress Analytics (Google Analytics Alternative)66 scoreWeb Worker Offloading99 scoreWP Client Reports100 score
Related Plugins
WP Client Reports
6k+ active installs
100
Nelio Content – Editorial Calendar & Social Media Auto-Posting
4k+ active installs
100
VigIA – AI Visibility, Analytics & Control
1k+ active installs
100
PufferSights – AI Crawler Insights
0 active installs
100
Web Worker Offloading
10k+ active installs
99
Machete
6k+ active installs
99