The Sucuri WordPress Security plugin is a security toolset for security integrity monitoring, malware detection and security hardening.
82
Score
51
Errors
11
Warnings
-12
Change
Category Scores
Security77
Repo97
Performance100
Maintainability76
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Maintainability
56
7 issue groups
Security
5
3 issue groups
Repo Compliance
1
1 issue group
ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;48
- Category
- Maintainability
- Occurrences
- 48
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
ERRORMaintainabilitywp function not compatible with requires wpFunction "get_password_reset_key()" requires WordPress 4.4.0, but your plugin minimum supported version is WordPress 3.6.0.3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- error
Sample message
Function "get_password_reset_key()" requires WordPress 4.4.0, but your plugin minimum supported version is WordPress 3.6.0.
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_GET['twofactor_search']2
- Category
- Security
- Occurrences
- 2
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_GET['twofactor_search']
WARNINGSecurityRequest data is not unslashed$_GET['twofactor_search'] not unslashed before sanitization. Use wp_unslash() or similar2
- Category
- Security
- Occurrences
- 2
- Severity
- warning
Sample message
$_GET['twofactor_search'] not unslashed before sanitization. Use wp_unslash() or similar
WARNINGMaintainabilityslow db query meta keyDetected usage of meta_key, possible slow query.1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Detected usage of meta_key, possible slow query.
WARNINGMaintainabilityNon-prefixed classClasses declared by a theme/plugin should start with the theme/plugin prefix. Found: "SucuriWordPressRecommendations".1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "SucuriWordPressRecommendations".
WARNINGSecurityMissing nonce verificationProcessing form data without nonce verification.1
- Category
- Security
- Occurrences
- 1
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGMaintainabilitymismatched plugin namePlugin name "Sucuri Security - Auditing, Malware Scanner and Security Hardening" is different from the name declared in plugin header "Sucuri Security - Auditing, Malware Scanner and Hardening".1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Plugin name "Sucuri Security - Auditing, Malware Scanner and Security Hardening" is different from the name declared in plugin header "Sucuri Security - Auditing, Malware Scanner and Hardening".
WARNINGRepo Compliancereadme parser warnings too many tagsOne or more tags were ignored. Please limit your plugin to 5 tags.1
- Category
- Repo Compliance
- Occurrences
- 1
- Severity
- warning
Sample message
One or more tags were ignored. Please limit your plugin to 5 tags.
WARNINGMaintainabilityunexpected markdown fileUnexpected markdown file "CLAUDE.md" detected in plugin root. Only specific markdown files are expected in production plugins.1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Unexpected markdown file "CLAUDE.md" detected in plugin root. Only specific markdown files are expected in production plugins.
Show 1 moreShow less
WARNINGMaintainabilityupgrade notice limit1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
The upgrade notice for "1.8.37" exceeds the limit of 300 characters.
External Connections
Potential connections found in static code analysis.
Outbound calls
276
External assets
0
Incoming endpoints
3
Notable Domains
sucuri.net26 · outbound
php.net12 · outbound
docs.sucuri.net7 · outbound
en.wikipedia.org4 · outbound
sitecheck.sucuri.net4 · outbound
waf.sucuri.net4 · outbound
Platform / Reference Domains
wordpress.org83 · platform/reference
gnu.org75 · platform/reference
developer.wordpress.org15 · platform/reference
w3.org13 · platform/reference
codex.wordpress.org7 · platform/reference
api.wordpress.org3 · platform/reference
core.svn.wordpress.org3 · platform/reference
github.com3 · platform/reference
i18n.svn.wordpress.org1 · platform/reference
opensource.org1 · platform/reference
External Asset Domains
No external asset domains detected.
Incoming Endpoints
No public endpoints detected.
Admin AJAX endpoints3
wp_ajax_sucuri_profile_2fa_enableauthenticated
wp_ajax
wp_ajax_sucuri_profile_2fa_resetauthenticated
wp_ajax
wp_ajax_sucuriscan_ajaxauthenticated
wp_ajax
Score History
2 score snapshots
v2.7.4
82
Latest
- Findings
- 62
- Errors
- 51
- Warnings
- 11
- Check
- 2.0.0
v2.7.3
94
Score
- Findings
- 57
- Errors
- 52
- Warnings
- 5
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 82 | 62 | 51 | 11 | v2.7.4 | 2.0.0 |
| 94 | 57 | 52 | 5 | v2.7.3 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Author
Issue
Domain
Related
Elementor Website Builder – more than just a page builder39 scoreLiteSpeed Cache35 scoreAkismet Anti-spam: Spam Protection35 scoreContact Form 769 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreClassic Editor63 scoreWooCommerce21 scoreAll-in-One WP Migration and Backup34 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreHostinger Tools82 scoreJetpack – WP Security, Backup, Speed, & Growth22 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreAll-In-One Security (AIOS) – Security and Firewall24 score
Author
Issue
Domain
Related
Elementor Website Builder – more than just a page builder39 scoreLiteSpeed Cache35 scoreAkismet Anti-spam: Spam Protection35 scoreContact Form 769 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreClassic Editor63 scoreWooCommerce21 scoreAll-in-One WP Migration and Backup34 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreHostinger Tools82 scoreJetpack – WP Security, Backup, Speed, & Growth22 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreAll-In-One Security (AIOS) – Security and Firewall24 score
Related Plugins
Login Security Captcha
10k+ active installs
100
Stop XML-RPC Attacks
6k+ active installs
100
Dam Spam
2k+ active installs
100
Vigilant – 100% Free Security Suite: Firewall, 2FA, Login, Headers, Scanner…
1k+ active installs
100
Remove XML-RPC Methods
1k+ active installs
100
Compromise Scanner for wp2shell
1k+ active installs
100