PluginScore

Stratum Widgets for Elementor

20+ Premium widgets for Elementor, including Advanced Slider, Instagram, Google Maps, Advanced Accordion, Post Grid.

v1.6.2jetmonstersUpdated Added 20k+ installs90% rating0% support resolved
elementorelementor addonselementor extraselementor pluginselementor widgets
60
Score
66
Errors
366
Warnings
+0
Change

Category Scores

Security52
Repo91
Performance87
Maintainability47

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

432 findings

Maintainability

361

11 issue groups

I18n

36

6 issue groups

Performance

24

2 issue groups

Security

9

6 issue groups

WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$accordion_options".316
Category
Maintainability
Occurrences
316
Severity
warning

Sample message

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$accordion_options".

WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedVariableFound
ERRORI18nMissing Translators CommentA function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.26
Category
I18n
Occurrences
26
Severity
error

Sample message

A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.

WordPress.WP.I18n.MissingTranslatorsCommentReference
ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;25
Category
Maintainability
Occurrences
25
Severity
error

Sample message

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

missing_direct_file_access_protectionReference
WARNINGPerformancePost Not In excludeUsing exclusionary parameters, like exclude, in calls to get_posts() should be done with caution, see https://wpvip.com/documentation/performance-improvements-by-removing-usage-of-post__not_in/ for more information.23
Category
Performance
Occurrences
23
Severity
warning

Sample message

Using exclusionary parameters, like exclude, in calls to get_posts() should be done with caution, see https://wpvip.com/documentation/performance-improvements-by-removing-usage-of-post__not_in/ for more information.

WordPressVIPMinimum.Performance.WPQueryParams.PostNotIn_exclude
WARNINGMaintainabilityNon-prefixed hook nameHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "'wsa_form_bottom_' . $form['id']".8
Category
Maintainability
Occurrences
8
Severity
warning

Sample message

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "'wsa_form_bottom_' . $form['id']".

WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedHooknameFound
WARNINGMaintainabilityslow db query meta queryDetected usage of meta_query, possible slow query.4
Category
Maintainability
Occurrences
4
Severity
warning

Sample message

Detected usage of meta_query, possible slow query.

WordPress.DB.SlowDBQuery.slow_db_query_meta_query
ERRORI18nMissing Arg DomainMissing $domain parameter in function call to esc_html__().4
Category
I18n
Occurrences
4
Severity
error

Sample message

Missing $domain parameter in function call to esc_html__().

WordPress.WP.I18n.MissingArgDomainReference
WARNINGSecurityRequest data is not unslashed$_GET['instagram-token'] not unslashed before sanitization. Use wp_unslash() or similar3
Category
Security
Occurrences
3
Severity
warning

Sample message

$_GET['instagram-token'] not unslashed before sanitization. Use wp_unslash() or similar

WordPress.Security.ValidatedSanitizedInput.MissingUnslash
ERRORI18nNon Singular String Literal TextThe $text parameter must be a single text string literal. Found: $item[ 'title' ]3
Category
I18n
Occurrences
3
Severity
error

Sample message

The $text parameter must be a single text string literal. Found: $item[ 'title' ]

WordPress.WP.I18n.NonSingularStringLiteralTextReference
WARNINGSecuritywp redirect wp redirectwp_redirect() found. Using wp_safe_redirect(), along with the "allowed_redirect_hosts" filter if needed, can help avoid any chances of malicious redirects within code. It is also important to remember to call exit() after a redirect so that no other unwanted code is executed.2
Category
Security
Occurrences
2
Severity
warning

Sample message

wp_redirect() found. Using wp_safe_redirect(), along with the "allowed_redirect_hosts" filter if needed, can help avoid any chances of malicious redirects within code. It is also important to remember to call exit() after a redirect so that no other unwanted code is executed.

WordPress.Security.SafeRedirect.wp_redirect_wp_redirectReference
Show 15 more
ERRORMaintainabilitystrip tags strip tags2
Category
Maintainability
Occurrences
2
Severity
error

Sample message

strip_tags() is discouraged. Use the more comprehensive wp_strip_all_tags() instead.

WordPress.WP.AlternativeFunctions.strip_tags_strip_tags
ERRORMaintainabilityForbidden PHP function found1
Category
Maintainability
Occurrences
1
Severity
error

Sample message

The use of function create_function() is forbidden

Generic.PHP.ForbiddenFunctions.Found
WARNINGI18nDiscouraged text-domain loading1
Category
I18n
Occurrences
1
Severity
warning

Sample message

load_plugin_textdomain() has been discouraged since WordPress version 4.6. When your plugin is hosted on WordPress.org, you no longer need to manually include this function call for translations under your plugin slug. WordPress will automatically load the translations for you as needed.

PluginCheck.CodeAnalysis.DiscouragedFunctions.load_plugin_textdomainFoundReference
WARNINGMaintainabilityslow db query tax query1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

Detected usage of tax_query, possible slow query.

WordPress.DB.SlowDBQuery.slow_db_query_tax_query
WARNINGMaintainabilityNon-prefixed class1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "WeDevs_Settings_API".

WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedClassFound
ERRORSecurityOutput is not escaped1
Category
Security
Occurrences
1
Severity
error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$body_bg'.

WordPress.Security.EscapeOutput.OutputNotEscapedReference
WARNINGSecurityNonce verification recommended1
Category
Security
Occurrences
1
Severity
warning

Sample message

Processing form data without nonce verification.

WordPress.Security.NonceVerification.Recommended
WARNINGSecurityInput is not sanitized1
Category
Security
Occurrences
1
Severity
warning

Sample message

Detected usage of a non-sanitized input variable: $_POST['settings']

WordPress.Security.ValidatedSanitizedInput.InputNotSanitized
WARNINGSecurityInput is not validated1
Category
Security
Occurrences
1
Severity
warning

Sample message

Detected usage of a possibly undefined superglobal array index: $_POST['nonce']. Check that the array index exists before using it.

WordPress.Security.ValidatedSanitizedInput.InputNotValidated
WARNINGMaintainabilityMissing Version1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

Resource version not set in call to wp_register_style(). This means new versions of the style may not always be loaded due to browser caching.

WordPress.WP.EnqueuedResourceParameters.MissingVersion
WARNINGMaintainabilityNot In Footer1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

In footer ($in_footer) is not set explicitly wp_register_script; It is recommended to load scripts in the footer. Please set this value to `true` to load it in the footer, or explicitly `false` if it should be loaded in the header.

WordPress.WP.EnqueuedResourceParameters.NotInFooter
ERRORI18nNo Empty Strings1
Category
I18n
Occurrences
1
Severity
error

Sample message

The $text text string should have translatable content. Found: ''

WordPress.WP.I18n.NoEmptyStringsReference
ERRORI18nText Domain Mismatch1
Category
I18n
Occurrences
1
Severity
error

Sample message

Mismatched text domain. Expected 'stratum' but got 'cryptop'.

WordPress.WP.I18n.TextDomainMismatchReference
WARNINGPerformancePost Not In post not in1
Category
Performance
Occurrences
1
Severity
warning

Sample message

Using exclusionary parameters, like post__not_in, in calls to get_posts() should be done with caution, see https://wpvip.com/documentation/performance-improvements-by-removing-usage-of-post__not_in/ for more information.

WordPressVIPMinimum.Performance.WPQueryParams.PostNotIn_post__not_in
ERRORMaintainabilitylibrary core files1
Category
Maintainability
Occurrences
1
Severity
error

Sample message

Library files that are already in the WordPress core are not permitted.

library_core_files

External Connections

Not analyzed yet.

Score History

First score snapshot

v1.6.2

60

Latest

Findings
432
Errors
66
Warnings
366
Check
2.0.0

Relationship Map

Author, categories, issues, domains, and nearby plugins.

29 nodes

Related

Elementor Website Builder – more than just a page builder35 scoreLiteSpeed Cache35 scoreWooCommerce21 scoreContact Form 769 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreAkismet Anti-spam: Spam Protection35 scoreAll-in-One WP Migration and Backup40 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreWP Mail SMTP by WPForms – The Most Popular SMTP and Email Log Plugin36 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreEssential Addons for Elementor – Popular Elementor Templates & Widgets63 scoreUltimate Addons for Elementor35 scoreElementsKit Elementor Addons – Advanced Widgets & Templates Addons for Elementor39 scoreStarter Templates – AI-Powered Templates for Elementor & Gutenberg24 score

Related Plugins

Input Mask For Elementor Form Fields

20k+ active installs

100
Turbo Addons Elementor

2k+ active installs

100
Country Code For Elementor Form Telephone Field

10k+ active installs

99
Maps from Yandex for Elementor

7k+ active installs

99
RT Mega Menu – Mega Menu Builder for Elementor & Gutenberg

8k+ active installs

99
Vertical Timeline Widget for Elementor

10k+ active installs

99