Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Security
33
6 issue groups
I18n
13
4 issue groups
Maintainability
10
6 issue groups
Repo Compliance
2
2 issue groups
WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.15
- Category
- Security
- Occurrences
- 15
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGSecurityRequest data is not unslashed$_GET[$name] not unslashed before sanitization. Use wp_unslash() or similar6
- Category
- Security
- Occurrences
- 6
- Severity
- warning
Sample message
$_GET[$name] not unslashed before sanitization. Use wp_unslash() or similar
ERRORI18nText Domain MismatchMismatched text domain. Expected 'taxonomy-switcher' but got 'wds'.6
- Category
- I18n
- Occurrences
- 6
- Severity
- error
Sample message
Mismatched text domain. Expected 'taxonomy-switcher' but got 'wds'.
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_GET[$name]5
- Category
- Security
- Occurrences
- 5
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_GET[$name]
ERRORI18nMissing Translators CommentA function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.5
- Category
- I18n
- Occurrences
- 5
- Severity
- error
Sample message
A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.
WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGSecurityInterpolated SQL is not preparedUse placeholders and $wpdb->prepare(); found interpolated variable {$term_ids} at "SELECT post_id FROM $wpdb->postmeta WHERE meta_key = '_menu_item_object_id' AND meta_value IN ( {$term_ids} );"3
- Category
- Security
- Occurrences
- 3
- Severity
- warning
Sample message
Use placeholders and $wpdb->prepare(); found interpolated variable {$term_ids} at "SELECT post_id FROM $wpdb->postmeta WHERE meta_key = '_menu_item_object_id' AND meta_value IN ( {$term_ids} );"
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$notice'.3
- Category
- Security
- Occurrences
- 3
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$notice'.
WARNINGMaintainabilityDiscouraged PHP functionThe use of function set_time_limit() is discouraged2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
The use of function set_time_limit() is discouraged
ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
Show 8 moreShow less
WARNINGMaintainabilityNo Caching1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
WARNINGSecuritywp redirect wp redirect1
- Category
- Security
- Occurrences
- 1
- Severity
- warning
Sample message
wp_redirect() found. Using wp_safe_redirect(), along with the "allowed_redirect_hosts" filter if needed, can help avoid any chances of malicious redirects within code. It is also important to remember to call exit() after a redirect so that no other unwanted code is executed.
ERRORMaintainabilityDeprecated parameter: add_option parameter 31
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
The parameter "null" at position #3 of add_option() has been deprecated since WordPress version 2.3.0. Use "" instead.
ERRORMaintainabilityDeprecated parameter: get_terms parameter 21
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
The parameter "$args" at position #2 of get_terms() has been deprecated since WordPress version 4.5.0. Instead do not pass the parameter.
ERRORI18nMissing Singular Placeholder1
- Category
- I18n
- Occurrences
- 1
- Severity
- error
Sample message
Missing singular placeholder, needed for some languages. See https://codex.wordpress.org/I18n_for_WordPress_Developers#Plurals
ERRORI18nUnordered Placeholders Text1
- Category
- I18n
- Occurrences
- 1
- Severity
- error
Sample message
Multiple placeholders in translatable strings should be ordered. Expected "%1$s, %2$s, %3$s", but got "%s, %s, %s" in 'Switching %s with the taxonomy \'%s\' to the taxonomy \'%s\''.
ERRORRepo Complianceinvalid license1
- Category
- Repo Compliance
- Occurrences
- 1
- Severity
- error
Sample message
Your plugin has an invalid license declared. Please update your readme with a valid SPDX license identifier.
ERRORRepo Complianceplugin header no license1
- Category
- Repo Compliance
- Occurrences
- 1
- Severity
- error
Sample message
Missing "License" in Plugin Header. Please update your Plugin Header with a valid GPLv2 (or later) compatible license.
External Connections
Potential connections found in static code analysis.
Outbound calls
2
External assets
0
Incoming endpoints
1
Notable Domains
webdevstudios.com1 · outbound
Platform / Reference Domains
github.com1 · platform/reference
External Asset Domains
No external asset domains detected.
Incoming Endpoints
No public endpoints detected.
Admin AJAX endpoints1
wp_ajax_taxonomy_switcher_search_term_handlerauthenticated
wp_ajax
Score History
2 score snapshots
v1.1.1
48
Latest
- Findings
- 58
- Errors
- 22
- Warnings
- 36
- Check
- 2.0.0
v1.1.0
47
Score
- Findings
- 59
- Errors
- 23
- Warnings
- 36
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 48 | 58 | 22 | 36 | v1.1.1 | 2.0.0 |
| 47 | 59 | 23 | 36 | v1.1.0 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Author
Issue
Related
Custom Post Type UI51 scorePages with category and tag100 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce21 scoreAll-in-One WP Migration and Backup34 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder39 scoreClassic Editor63 scoreAkismet Anti-spam: Spam Protection35 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreManage Notification E-mails36 scoreRemove Category URL – Remove 'category' base from category permalinks78 scoreSearch & Filter69 score
Author
Issue
Related
Custom Post Type UI51 scorePages with category and tag100 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce21 scoreAll-in-One WP Migration and Backup34 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder39 scoreClassic Editor63 scoreAkismet Anti-spam: Spam Protection35 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreManage Notification E-mails36 scoreRemove Category URL – Remove 'category' base from category permalinks78 scoreSearch & Filter69 score
Related Plugins
Pages with category and tag
50k+ active installs
100
Essential Content Types
20k+ active installs
100
Category Icon
2k+ active installs
100
Order Limit For WooCommerce ( Free Version )
800 active installs
100
Term Description: Rich Text Editor (Powered by TinyMCE) for WooCommerce
700 active installs
100
Category Description for WooCommerce
700 active installs
100