Super Testimonial – Testimonial & Customer Review Slider Plugin for WordPress

Testimonials are easy to use the plugin that allows users to add Testimonials to the sidebar, as a widget, or to embed testimonials into a Page or Pos …

v5.0.0ThemepointsUpdated Added 2k+ installs94% rating0% support resolved
40
Score
28
Errors
167
Warnings
+0
Change

Category Scores

Security0
Repo91
Performance100
Maintainability80

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

195 findings

Security

163

7 issue groups

Maintainability

26

7 issue groups

I18n

4

2 issue groups

Repo Compliance

2

2 issue groups

WARNINGSecurityRequest data is not unslashed$_GET['order'] not unslashed before sanitization. Use wp_unslash() or similar134
Category
Security
Occurrences
134
Severity
warning

Sample message

$_GET['order'] not unslashed before sanitization. Use wp_unslash() or similar

ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$placeholder_attr'.10
Category
Security
Occurrences
10
Severity
error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$placeholder_attr'.

ERRORMaintainabilitywp function not compatible with requires wpFunction "get_avatar_url()" requires WordPress 4.2.0, but your plugin minimum supported version is WordPress 4.0.0.10
Category
Maintainability
Occurrences
10
Severity
error

Sample message

Function "get_avatar_url()" requires WordPress 4.2.0, but your plugin minimum supported version is WordPress 4.0.0.

WARNINGMaintainabilityMissing VersionResource version not set in call to wp_enqueue_style(). This means new versions of the style may not always be loaded due to browser caching.9
Category
Maintainability
Occurrences
9
Severity
warning

Sample message

Resource version not set in call to wp_enqueue_style(). This means new versions of the style may not always be loaded due to browser caching.

WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_FILES['photo']7
Category
Security
Occurrences
7
Severity
warning

Sample message

Detected usage of a non-sanitized input variable: $_FILES['photo']

WARNINGSecurityMissing nonce verificationProcessing form data without nonce verification.4
Category
Security
Occurrences
4
Severity
warning

Sample message

Processing form data without nonce verification.

WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.4
Category
Security
Occurrences
4
Severity
warning

Sample message

Processing form data without nonce verification.

ERRORI18nMissing Translators CommentA function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.3
Category
I18n
Occurrences
3
Severity
error

Sample message

A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.

WARNINGMaintainabilityslow db query tax queryDetected usage of tax_query, possible slow query.2
Category
Maintainability
Occurrences
2
Severity
warning

Sample message

Detected usage of tax_query, possible slow query.

WARNINGSecuritywp redirect wp redirectwp_redirect() found. Using wp_safe_redirect(), along with the "allowed_redirect_hosts" filter if needed, can help avoid any chances of malicious redirects within code. It is also important to remember to call exit() after a redirect so that no other unwanted code is executed.2
Category
Security
Occurrences
2
Severity
warning

Sample message

wp_redirect() found. Using wp_safe_redirect(), along with the "allowed_redirect_hosts" filter if needed, can help avoid any chances of malicious redirects within code. It is also important to remember to call exit() after a redirect so that no other unwanted code is executed.

Show 8 more
WARNINGSecurityInput is not validated2
Category
Security
Occurrences
2
Severity
warning

Sample message

Detected usage of a possibly undefined superglobal array index: $_SERVER['REQUEST_METHOD']. Check that the array index exists before using it.

ERRORMaintainabilityNo Explicit Version2
Category
Maintainability
Occurrences
2
Severity
error

Sample message

Version parameter is not explicitly set or has been set to an equivalent of "false" for wp_enqueue_script; This means that the WordPress core version will be used which is not recommended for plugin or theme development.

ERRORMaintainabilityrand rand1
Category
Maintainability
Occurrences
1
Severity
error

Sample message

rand() is discouraged. Use the far less predictable wp_rand() instead.

ERRORI18nMissing Arg Domain1
Category
I18n
Occurrences
1
Severity
error

Sample message

Missing $domain parameter in function call to __().

WARNINGMaintainabilitymismatched plugin name1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

Plugin name "Super Testimonial – Testimonial & Customer Review Slider Plugin for WordPress" is different from the name declared in plugin header "Super Testimonial".

ERRORRepo Complianceoutdated tested upto header1
Category
Repo Compliance
Occurrences
1
Severity
error

Sample message

Tested up to: 6.9 < 7.0. The "Tested up to" value in your plugin is not set to the current version of WordPress. This means your plugin will not show up in searches, as we require plugins to be compatible and documented as tested up to the most recent version of WordPress.

WARNINGRepo Compliancereadme parser warnings trimmed short description1
Category
Repo Compliance
Occurrences
1
Severity
warning

Sample message

The "Short Description" section is too long and was truncated. A maximum of 150 characters is supported.

WARNINGMaintainabilitytrademarked term1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

The plugin name includes a restricted term. Your chosen plugin name - "Super Testimonial – Testimonial &amp; Customer Review Slider Plugin for WordPress" - contains the restricted term "plugin" which cannot be used at all in your plugin name.

Score History

First score snapshot

v5.0.0

40

Latest

Findings
195
Errors
28
Warnings
167
Check
2.0.0

Related Plugins