Real-time activity log and audit log for WordPress. Track every user action — logins, edits, plugin & settings changes — and get alerts.
80
Score
8
Errors
81
Warnings
-1
Change
Category Scores
Security77
Repo100
Performance97
Maintainability66
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Maintainability
79
12 issue groups
Security
8
2 issue groups
Performance
2
1 issue group
WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.21
- Category
- Maintainability
- Occurrences
- 21
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().18
- Category
- Maintainability
- Occurrences
- 18
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
WARNINGMaintainabilityNon-prefixed hook nameHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "'jetpack_module_configurable_' . $slug".11
- Category
- Maintainability
- Occurrences
- 11
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "'jetpack_module_configurable_' . $slug".
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$author".9
- Category
- Maintainability
- Occurrences
- 9
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$author".
ERRORMaintainabilitywp function not compatible with requires wpFunction "wp_has_ability()" requires WordPress 6.9.0, but your plugin minimum supported version is WordPress 4.6.0.7
- Category
- Maintainability
- Occurrences
- 7
- Severity
- error
Sample message
Function "wp_has_ability()" requires WordPress 6.9.0, but your plugin minimum supported version is WordPress 4.6.0.
WARNINGSecurityDatabase parameter is not escapedUnescaped parameter $column used in $wpdb->get_results()\n$column used without escaping.6
- Category
- Security
- Occurrences
- 6
- Severity
- warning
Sample message
Unescaped parameter $column used in $wpdb->get_results()\n$column used without escaping.
WARNINGMaintainabilityslow db query meta valueDetected usage of meta_value, possible slow query.4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- warning
Sample message
Detected usage of meta_value, possible slow query.
WARNINGMaintainabilityslow db query meta keyDetected usage of meta_key, possible slow query.3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
Detected usage of meta_key, possible slow query.
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_POST[$option]2
- Category
- Security
- Occurrences
- 2
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_POST[$option]
WARNINGPerformancePost Not In excludeUsing exclusionary parameters, like exclude, in calls to get_posts() should be done with caution, see https://wpvip.com/documentation/performance-improvements-by-removing-usage-of-post__not_in/ for more information.2
- Category
- Performance
- Occurrences
- 2
- Severity
- warning
Sample message
Using exclusionary parameters, like exclude, in calls to get_posts() should be done with caution, see https://wpvip.com/documentation/performance-improvements-by-removing-usage-of-post__not_in/ for more information.
Show 5 moreShow less
WARNINGMaintainabilityupdate modification detected2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
Plugin Updater detected. Detected code which may be altering WordPress update routines. Detected: _site_transient_update_themes
WARNINGMaintainabilitySchema Change1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Attempting a database schema change is discouraged.
WARNINGMaintainabilityNon-prefixed constant1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "WP_NETWORK_ADMIN".
WARNINGMaintainabilitymismatched plugin name1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Plugin name "Stream – Activity Log & Audit Trail" is different from the name declared in plugin header "Stream - Activity Log & Audit Trail".
ERRORMaintainabilityplugin updater detected1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
Plugin Updater detected. These are not permitted in WordPress.org hosted plugins. Detected: site_transient_update_plugins
External Connections
Potential connections found in static code analysis.
Outbound calls
64
External assets
0
Incoming endpoints
12
Notable Domains
purl.org6 · outbound
ifttt.com5 · outbound
php.net5 · outbound
actionscheduler.org4 · outbound
en.wikipedia.org4 · outbound
secure.php.net3 · outbound
Platform / Reference Domains
github.com14 · platform/reference
core.trac.wordpress.org3 · platform/reference
w3.org2 · platform/reference
wordpress.org2 · platform/reference
codex.wordpress.org1 · platform/reference
gnu.org1 · platform/reference
External Asset Domains
No external asset domains detected.
Incoming Endpoints
wp_ajax_nopriv_public
wp_ajax
Admin AJAX endpoints11
wp_ajax_edit-theme-plugin-fileauthenticated
wp_ajax
wp_ajax_get_actionsauthenticated
wp_ajax
wp_ajax_get_new_alert_triggers_notificationsauthenticated
wp_ajax
wp_ajax_load_alerts_settingsauthenticated
wp_ajax
wp_ajax_save_new_alertauthenticated
wp_ajax
wp_ajax_stream_enable_live_updateauthenticated
wp_ajax
wp_ajax_stream_get_ipsauthenticated
wp_ajax
wp_ajax_stream_get_usersauthenticated
wp_ajax
wp_ajax_wp_stream_clean_orphan_metaauthenticated
wp_ajax
wp_ajax_wp_stream_filtersauthenticated
wp_ajax
wp_ajax_wp_stream_resetauthenticated
wp_ajax
Score History
4 score snapshots
v4.3.0
80
Latest
- Findings
- 89
- Errors
- 8
- Warnings
- 81
- Check
- 2.0.0
v4.2.2
81
Score
- Findings
- 85
- Errors
- 5
- Warnings
- 80
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 80 | 89 | 8 | 81 | v4.3.0 | 2.0.0 |
| 81 | 85 | 5 | 80 | v4.2.2 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Author
Issue
Domain
Related
Contact Form 769 scoreElementor Website Builder – more than just a page builder39 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce21 scoreAkismet Anti-spam: Spam Protection35 scoreLiteSpeed Cache35 scoreAll-in-One WP Migration and Backup34 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreHostinger Tools82 scoreJetpack – WP Security, Backup, Speed, & Growth22 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreAll-In-One Security (AIOS) – Security and Firewall24 scoreLimit Login Attempts Security – Login Security, 2FA, Firewall, Brute Force Prevention25 scoreLogin Security Captcha100 score
Author
Issue
Domain
Related
Contact Form 769 scoreElementor Website Builder – more than just a page builder39 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce21 scoreAkismet Anti-spam: Spam Protection35 scoreLiteSpeed Cache35 scoreAll-in-One WP Migration and Backup34 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreHostinger Tools82 scoreJetpack – WP Security, Backup, Speed, & Growth22 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreAll-In-One Security (AIOS) – Security and Firewall24 scoreLimit Login Attempts Security – Login Security, 2FA, Firewall, Brute Force Prevention25 scoreLogin Security Captcha100 score
Related Plugins
Login Security Captcha
10k+ active installs
100
Stop XML-RPC Attacks
6k+ active installs
100
Dam Spam
2k+ active installs
100
Compromise Scanner for wp2shell
2k+ active installs
100
Vigilant – 100% Free Security Suite: Firewall, 2FA, Login, Headers, Scanner…
1k+ active installs
100
Remove XML-RPC Methods
1k+ active installs
100