A powerful and flexible open-source repository platform that brings digital collection management to WordPress.
24
Score
138
Errors
592
Warnings
+0
Change
Category Scores
Security0
Repo100
Performance89
Maintainability0
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Maintainability
503
16 issue groups
Security
190
7 issue groups
Performance
12
2 issue groups
WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.160
- Category
- Maintainability
- Occurrences
- 160
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().157
- Category
- Maintainability
- Occurrences
- 157
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
WARNINGSecurityInterpolated SQL is not preparedUse placeholders and $wpdb->prepare(); found interpolated variable $childrens_in at \t\t\t\t\t\t\t\t\t\tmeta_id IN ($childrens_in)"71
- Category
- Security
- Occurrences
- 71
- Severity
- warning
Sample message
Use placeholders and $wpdb->prepare(); found interpolated variable $childrens_in at \t\t\t\t\t\t\t\t\t\tmeta_id IN ($childrens_in)"
WARNINGMaintainabilityslow db query meta valueDetected usage of meta_value, possible slow query.52
- Category
- Maintainability
- Occurrences
- 52
- Severity
- warning
Sample message
Detected usage of meta_value, possible slow query.
ERRORSecuritySQL query is not preparedUse placeholders and $wpdb->prepare(); found $base_query48
- Category
- Security
- Occurrences
- 48
- Severity
- error
Sample message
Use placeholders and $wpdb->prepare(); found $base_query
WARNINGMaintainabilityslow db query meta queryDetected usage of meta_query, possible slow query.35
- Category
- Maintainability
- Occurrences
- 35
- Severity
- warning
Sample message
Detected usage of meta_query, possible slow query.
ERRORSecurityDatabase parameter is not escapedUnescaped parameter $base_query used in $wpdb->get_results()\n$base_query assigned unsafely at line 1327.30
- Category
- Security
- Occurrences
- 30
- Severity
- error
Sample message
Unescaped parameter $base_query used in $wpdb->get_results()\n$base_query assigned unsafely at line 1327.
WARNINGSecurityUnfinished PrepareReplacement variables found, but no valid placeholders found in the query.17
- Category
- Security
- Occurrences
- 17
- Severity
- warning
Sample message
Replacement variables found, but no valid placeholders found in the query.
WARNINGSecurityDatabase parameter is not escapedUnescaped parameter $sql used in $wpdb->get_var()\n$sql assigned unsafely at line 306.16
- Category
- Security
- Occurrences
- 16
- Severity
- warning
Sample message
Unescaped parameter $sql used in $wpdb->get_var()\n$sql assigned unsafely at line 306.
ERRORMaintainabilitydate datedate() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.16
- Category
- Maintainability
- Occurrences
- 16
- Severity
- error
Sample message
date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.
Show 15 moreShow less
WARNINGMaintainabilityslow db query meta key14
- Category
- Maintainability
- Occurrences
- 14
- Severity
- warning
Sample message
Detected usage of meta_key, possible slow query.
ERRORMaintainabilityfile system operations fopen14
- Category
- Maintainability
- Occurrences
- 14
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fopen().
WARNINGMaintainabilityerror log error log10
- Category
- Maintainability
- Occurrences
- 10
- Severity
- warning
Sample message
error_log() found. Debug code should not normally be used in production.
WARNINGMaintainabilityNon-prefixed hook name9
- Category
- Maintainability
- Occurrences
- 9
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "comments_open".
WARNINGMaintainabilityDynamic hook name8
- Category
- Maintainability
- Occurrences
- 8
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "$filter_name".
WARNINGPerformancePost Not In post not in7
- Category
- Performance
- Occurrences
- 7
- Severity
- warning
Sample message
Using exclusionary parameters, like post__not_in, in calls to get_posts() should be done with caution, see https://wpvip.com/documentation/performance-improvements-by-removing-usage-of-post__not_in/ for more information.
WARNINGMaintainabilitySchema Change5
- Category
- Maintainability
- Occurrences
- 5
- Severity
- warning
Sample message
Attempting a database schema change is discouraged.
ERRORMaintainabilityfile system operations fclose5
- Category
- Maintainability
- Occurrences
- 5
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fclose().
ERRORMaintainabilityrename rename5
- Category
- Maintainability
- Occurrences
- 5
- Severity
- error
Sample message
rename() is discouraged. Use WP_Filesystem::move() to rename a file.
ERRORMaintainabilityunlink unlink5
- Category
- Maintainability
- Occurrences
- 5
- Severity
- error
Sample message
unlink() is discouraged. Use wp_delete_file() to delete a file.
WARNINGPerformancePost Not In exclude5
- Category
- Performance
- Occurrences
- 5
- Severity
- warning
Sample message
Using exclusionary parameters, like exclude, in calls to get_posts() should be done with caution, see https://wpvip.com/documentation/performance-improvements-by-removing-usage-of-post__not_in/ for more information.
WARNINGMaintainabilityslow db query tax query4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- warning
Sample message
Detected usage of tax_query, possible slow query.
WARNINGMaintainabilityNon-prefixed global variable4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$view_mode_displayed_metadata".
WARNINGSecurityInput is not sanitized4
- Category
- Security
- Occurrences
- 4
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_REQUEST['post_id']
WARNINGSecurityRequest data is not unslashed4
- Category
- Security
- Occurrences
- 4
- Severity
- warning
Sample message
$_REQUEST['post_id'] not unslashed before sanitization. Use wp_unslash() or similar
External Connections
Potential connections found in static code analysis.
Outbound calls
299
External assets
0
Incoming endpoints
1
Notable Domains
json-schema.org25 · outbound
schemas.wp.org20 · outbound
openarchives.org9 · outbound
purl.org9 · outbound
php.net8 · outbound
googleapis.com6 · outbound
Platform / Reference Domains
w3.org51 · platform/reference
github.com47 · platform/reference
opensource.org22 · platform/reference
developer.wordpress.org20 · platform/reference
make.wordpress.org5 · platform/reference
core.trac.wordpress.org4 · platform/reference
gnu.org1 · platform/reference
schema.org1 · platform/reference
wordpress.org1 · platform/reference
External Asset Domains
No external asset domains detected.
Incoming Endpoints
wp_ajax_nopriv_public
wp_ajax
Score History
2 score snapshots
v1.2.0
24
Latest
- Findings
- 730
- Errors
- 138
- Warnings
- 592
- Check
- 2.0.0
v1.1.0
24
Score
- Findings
- 754
- Errors
- 156
- Warnings
- 598
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 24 | 730 | 138 | 592 | v1.2.0 | 2.0.0 |
| 24 | 754 | 156 | 598 | v1.1.0 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Plugin
Author
Issue
Domain
Related
Disable Author Archives96 scoreTainacan Extra View Modes98 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder39 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce21 scoreAkismet Anti-spam: Spam Protection35 scoreLiteSpeed Cache35 scoreAll-in-One WP Migration and Backup34 scoreSimple Yearly Archive35 scoreAdvanced Posts/Page91 scoreCollapsing Archives64 scoreExpanding Archives54 scoreSitekit35 score
Plugin
Author
Issue
Domain
Related
Disable Author Archives96 scoreTainacan Extra View Modes98 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder39 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce21 scoreAkismet Anti-spam: Spam Protection35 scoreLiteSpeed Cache35 scoreAll-in-One WP Migration and Backup34 scoreSimple Yearly Archive35 scoreAdvanced Posts/Page91 scoreCollapsing Archives64 scoreExpanding Archives54 scoreSitekit35 score
Related Plugins
Archive Page
700 active installs
100
Category Archives Block
900 active installs
98
Custom Query Blocks
800 active installs
98
Clean My Archives
800 active installs
98
Tainacan Extra View Modes
400 active installs
98
Disable Author Archives
10k+ active installs
96