Taboola

Use the Taboola plugin to generate revenue from native ads and drive engagement with editorial content.

v3.0.2TaboolaUpdated Added 1k+ installs0% rating
30
Score
89
Errors
147
Warnings
+0
Change

Category Scores

Security0
Repo86
Performance100
Maintainability36

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

236 findings

Security

142

8 issue groups

Maintainability

79

15 issue groups

I18n

5

2 issue groups

ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"[$k]=>\""'.36
Category
Security
Occurrences
36
Severity
error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"[$k]=>\""'.

WARNINGSecurityRequest data is not unslashed$_POST['category_location_string'] not unslashed before sanitization. Use wp_unslash() or similar28
Category
Security
Occurrences
28
Severity
warning

Sample message

$_POST['category_location_string'] not unslashed before sanitization. Use wp_unslash() or similar

WARNINGSecurityMissing nonce verificationProcessing form data without nonce verification.27
Category
Security
Occurrences
27
Severity
warning

Sample message

Processing form data without nonce verification.

WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_POST['category_location_string']26
Category
Security
Occurrences
26
Severity
warning

Sample message

Detected usage of a non-sanitized input variable: $_POST['category_location_string']

ERRORMaintainabilitystrip tags strip tagsstrip_tags() is discouraged. Use the more comprehensive wp_strip_all_tags() instead.21
Category
Maintainability
Occurrences
21
Severity
error

Sample message

strip_tags() is discouraged. Use the more comprehensive wp_strip_all_tags() instead.

WARNINGSecurityInput is not validatedDetected usage of a possibly undefined superglobal array index: $_POST['category_placement']. Check that the array index exists before using it.16
Category
Security
Occurrences
16
Severity
warning

Sample message

Detected usage of a possibly undefined superglobal array index: $_POST['category_placement']. Check that the array index exists before using it.

WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$detailsString".9
Category
Maintainability
Occurrences
9
Severity
warning

Sample message

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$detailsString".

WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.7
Category
Maintainability
Occurrences
7
Severity
warning

Sample message

Use of a direct database call is discouraged.

WARNINGMaintainabilityNon-prefixed functionFunctions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "dump_html_tree".7
Category
Maintainability
Occurrences
7
Severity
warning

Sample message

Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "dump_html_tree".

WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().6
Category
Maintainability
Occurrences
6
Severity
warning

Sample message

Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().

Show 15 more
ERRORMaintainabilityShort PHP open tag found4
Category
Maintainability
Occurrences
4
Severity
error

Sample message

Short PHP opening tag used with echo; expected "<?php echo $logPublisher ..." but found "<?= $logPublisher ..."

ERRORMaintainabilityOffloaded Content4
Category
Maintainability
Occurrences
4
Severity
error

Sample message

Offloading images, js, css, and other scripts to your servers or any remote service is disallowed.

WARNINGSecurityInterpolated SQL is not prepared4
Category
Security
Occurrences
4
Severity
warning

Sample message

Use placeholders and $wpdb-&gt;prepare(); found interpolated variable $column_name at &quot;SHOW COLUMNS FROM $table_name LIKE &#039;$column_name&#039;&quot;

WARNINGMaintainabilityNon-prefixed class4
Category
Maintainability
Occurrences
4
Severity
warning

Sample message

Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: &quot;JavaScriptWrapper&quot;.

WARNINGMaintainabilityNon-prefixed constant4
Category
Maintainability
Occurrences
4
Severity
warning

Sample message

Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: &quot;DEFAULT_BR_TEXT&quot;.

ERRORMaintainabilityMissing direct file access protection4
Category
Maintainability
Occurrences
4
Severity
error

Sample message

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

WARNINGSecurityDatabase parameter is not escaped3
Category
Security
Occurrences
3
Severity
warning

Sample message

Unescaped parameter $table_name used in $wpdb-&gt;get_var()\n$table_name assigned unsafely at line 818.

ERRORI18nMissing Arg Domain3
Category
I18n
Occurrences
3
Severity
error

Sample message

Missing $domain parameter in function call to __().

WARNINGSecurityInput is not validated or sanitized2
Category
Security
Occurrences
2
Severity
warning

Sample message

Detected usage of a non-sanitized, non-validated input variable _SERVER: &quot;//{$_SERVER[&#039;HTTP_HOST&#039;]}{$_SERVER[&#039;REQUEST_URI&#039;]}&quot;

ERRORMaintainabilityfile system operations is writable2
Category
Maintainability
Occurrences
2
Severity
error

Sample message

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: is_writable().

ERRORMaintainabilityNon Enqueued Script2
Category
Maintainability
Occurrences
2
Severity
error

Sample message

Scripts must be registered/enqueued via wp_enqueue_script()

ERRORMaintainabilityNon Enqueued Stylesheet2
Category
Maintainability
Occurrences
2
Severity
error

Sample message

Stylesheets must be registered/enqueued via wp_enqueue_style()

ERRORI18nText Domain Mismatch2
Category
I18n
Occurrences
2
Severity
error

Sample message

Mismatched text domain. Expected 'taboola' but got 'taboola_widget'.

ERRORMaintainabilitywp function not compatible with requires wp2
Category
Maintainability
Occurrences
2
Severity
error

Sample message

Function "wp_get_environment_type()" requires WordPress 5.5.0, but your plugin minimum supported version is WordPress 5.2.0.

ERRORMaintainabilityNot Allowed1
Category
Maintainability
Occurrences
1
Severity
error

Sample message

Use of heredoc syntax (<<<) is not allowed; use standard strings or inline HTML instead

Score History

First score snapshot

v3.0.2

30

Latest

Findings
236
Errors
89
Warnings
147
Check
2.0.0

Related Plugins

HBAgency

9k+ active installs

98
Snapchat for WooCommerce

60k+ active installs

98
WebFinger

1k+ active installs

98