The Sucuri WordPress Security plugin is a security toolset for security integrity monitoring, malware detection and security hardening.
93
Score
62
Errors
6
Warnings
+11
Change
Category Scores
Security100
Repo97
Performance100
Maintainability68
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Maintainability
66
9 issue groups
I18n
1
1 issue group
Repo Compliance
1
1 issue group
ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;49
- Category
- Maintainability
- Occurrences
- 49
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
ERRORMaintainabilityunlink unlinkunlink() is discouraged. Use wp_delete_file() to delete a file.10
- Category
- Maintainability
- Occurrences
- 10
- Severity
- error
Sample message
unlink() is discouraged. Use wp_delete_file() to delete a file.
WARNINGI18nDiscouraged text-domain loadingload_plugin_textdomain() has been discouraged since WordPress version 4.6. When your plugin is hosted on WordPress.org, you no longer need to manually include this function call for translations under your plugin slug. WordPress will automatically load the translations for you as needed.1
- Category
- I18n
- Occurrences
- 1
- Severity
- warning
Sample message
load_plugin_textdomain() has been discouraged since WordPress version 4.6. When your plugin is hosted on WordPress.org, you no longer need to manually include this function call for translations under your plugin slug. WordPress will automatically load the translations for you as needed.
ERRORMaintainabilityOffloaded ContentOffloading images, js, css, and other scripts to your servers or any remote service is disallowed.1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
Offloading images, js, css, and other scripts to your servers or any remote service is disallowed.
WARNINGMaintainabilityslow db query meta keyDetected usage of meta_key, possible slow query.1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Detected usage of meta_key, possible slow query.
WARNINGMaintainabilityNon-prefixed classClasses declared by a theme/plugin should start with the theme/plugin prefix. Found: "SucuriWordPressRecommendations".1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "SucuriWordPressRecommendations".
ERRORMaintainabilityfile system operations fwriteFile operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fwrite().1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fwrite().
ERRORMaintainabilityparse url parse urlparse_url() is discouraged because of inconsistency in the output across PHP versions; use wp_parse_url() instead.1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
parse_url() is discouraged because of inconsistency in the output across PHP versions; use wp_parse_url() instead.
WARNINGMaintainabilitymismatched plugin namePlugin name "Sucuri Security - Auditing, Malware Scanner and Security Hardening" is different from the name declared in plugin header "Sucuri Security - Auditing, Malware Scanner and Hardening".1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Plugin name "Sucuri Security - Auditing, Malware Scanner and Security Hardening" is different from the name declared in plugin header "Sucuri Security - Auditing, Malware Scanner and Hardening".
WARNINGRepo Compliancereadme parser warnings too many tagsOne or more tags were ignored. Please limit your plugin to 5 tags.1
- Category
- Repo Compliance
- Occurrences
- 1
- Severity
- warning
Sample message
One or more tags were ignored. Please limit your plugin to 5 tags.
Show 1 moreShow less
WARNINGMaintainabilityupgrade notice limit1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
The upgrade notice for "1.8.37" exceeds the limit of 300 characters.
External Connections
Potential connections found in static code analysis.
Outbound calls
278
External assets
0
Incoming endpoints
5
Notable Domains
sucuri.net26 · outbound
php.net12 · outbound
docs.sucuri.net7 · outbound
en.wikipedia.org4 · outbound
sitecheck.sucuri.net4 · outbound
waf.sucuri.net4 · outbound
Platform / Reference Domains
wordpress.org84 · platform/reference
gnu.org76 · platform/reference
developer.wordpress.org15 · platform/reference
w3.org13 · platform/reference
codex.wordpress.org7 · platform/reference
api.wordpress.org3 · platform/reference
core.svn.wordpress.org3 · platform/reference
github.com3 · platform/reference
i18n.svn.wordpress.org1 · platform/reference
opensource.org1 · platform/reference
External Asset Domains
No external asset domains detected.
Incoming Endpoints
No public endpoints detected.
Admin AJAX endpoints5
admin_post_sucuriscan_download_audit_logsauthenticated
admin_post
wp_ajax_sucuri_profile_2fa_backup_regenauthenticated
wp_ajax
wp_ajax_sucuri_profile_2fa_enableauthenticated
wp_ajax
wp_ajax_sucuri_profile_2fa_resetauthenticated
wp_ajax
wp_ajax_sucuriscan_ajaxauthenticated
wp_ajax
Score History
3 score snapshots
v2.8
93
Latest
- Findings
- 68
- Errors
- 62
- Warnings
- 6
- Check
- 2.1.0
v2.7.4
82
Score
- Findings
- 62
- Errors
- 51
- Warnings
- 11
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 93 | 68 | 62 | 6 | v2.8 | 2.1.0 |
| 82 | 62 | 51 | 11 | v2.7.4 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Author
Issue
Domain
Related
Wordfence Security – Firewall, Malware Scan, and Login Security21 scoreJetpack – WP Security, Backup, Speed, & Growth22 scoreElementor Website Builder – more than just a page builder39 scoreWooCommerce22 scoreContact Form 769 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreLiteSpeed Cache35 scoreAkismet Anti-spam: Spam Protection35 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWP Mail SMTP by WPForms – The Most Popular SMTP and Email Log Plugin30 scoreHostinger Tools82 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreAll-In-One Security (AIOS) – Security and Firewall24 scoreLimit Login Attempts Security – Login Security, 2FA, Firewall, Brute Force Prevention24 score
Author
Issue
Domain
Related
Wordfence Security – Firewall, Malware Scan, and Login Security21 scoreJetpack – WP Security, Backup, Speed, & Growth22 scoreElementor Website Builder – more than just a page builder39 scoreWooCommerce22 scoreContact Form 769 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreLiteSpeed Cache35 scoreAkismet Anti-spam: Spam Protection35 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWP Mail SMTP by WPForms – The Most Popular SMTP and Email Log Plugin30 scoreHostinger Tools82 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreAll-In-One Security (AIOS) – Security and Firewall24 scoreLimit Login Attempts Security – Login Security, 2FA, Firewall, Brute Force Prevention24 score
Related Plugins
User Role Editor
700k+ active installs
100
Stop User Enumeration
50k+ active installs
100
Login Security Captcha
10k+ active installs
100
Stop XML-RPC Attacks
6k+ active installs
100
Dam Spam
3k+ active installs
100
Compromise Scanner for wp2shell
3k+ active installs
100