The ultimate login branding solution! Theme My Login offers matchless customization of your WordPress user experience!
37
Score
18
Errors
407
Warnings
+0
Change
Category Scores
Security0
Repo100
Performance100
Maintainability59
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Maintainability
283
7 issue groups
Security
142
3 issue groups
WARNINGMaintainabilityNon-prefixed functionFunctions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "tml_action_exists".165
- Category
- Maintainability
- Occurrences
- 165
- Severity
- warning
Sample message
Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "tml_action_exists".
WARNINGMaintainabilityNon-prefixed hook nameHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "'login_form_' . tml_get_action()->get_name()".97
- Category
- Maintainability
- Occurrences
- 97
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "'login_form_' . tml_get_action()->get_name()".
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_COOKIE[$rp_cookie]56
- Category
- Security
- Occurrences
- 56
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_COOKIE[$rp_cookie]
WARNINGSecurityRequest data is not unslashed$_COOKIE[$rp_cookie] not unslashed before sanitization. Use wp_unslash() or similar56
- Category
- Security
- Occurrences
- 56
- Severity
- warning
Sample message
$_COOKIE[$rp_cookie] not unslashed before sanitization. Use wp_unslash() or similar
WARNINGSecurityInput is not validatedDetected usage of a possibly undefined superglobal array index: $_POST['blog_public']. Check that the array index exists before using it.30
- Category
- Security
- Occurrences
- 30
- Severity
- warning
Sample message
Detected usage of a possibly undefined superglobal array index: $_POST['blog_public']. Check that the array index exists before using it.
ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;16
- Category
- Maintainability
- Occurrences
- 16
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
WARNINGMaintainabilityupdate modification detectedPlugin Updater detected. Detected code which may be altering WordPress update routines. Detected: _site_transient_update_plugins2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
Plugin Updater detected. Detected code which may be altering WordPress update routines. Detected: _site_transient_update_plugins
WARNINGMaintainabilityNon-prefixed constantGlobal constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "WP_INSTALLING".1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "WP_INSTALLING".
ERRORMaintainabilityplugin updater detectedPlugin Updater detected. These are not permitted in WordPress.org hosted plugins. Detected: site_transient_update_plugins1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
Plugin Updater detected. These are not permitted in WordPress.org hosted plugins. Detected: site_transient_update_plugins
ERRORMaintainabilitytrunk stable tagIncorrect Stable Tag. It's recommended not to use "Stable Tag: trunk". Your Stable Tag is meant to be the stable version of your plugin and it needs to be exactly the same with the Version in your main plugin file's header. Any mismatch can prevent users from downloading the correct plugin files from WordPress.org.1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
Incorrect Stable Tag. It's recommended not to use "Stable Tag: trunk". Your Stable Tag is meant to be the stable version of your plugin and it needs to be exactly the same with the Version in your main plugin file's header. Any mismatch can prevent users from downloading the correct plugin files from WordPress.org.
External Connections
Potential connections found in static code analysis.
Outbound calls
19
External assets
0
Incoming endpoints
3
Notable Domains
thememylogin.com8 · outbound
docs.thememylogin.com3 · outbound
Platform / Reference Domains
wordpress.org3 · platform/reference
core.trac.wordpress.org2 · platform/reference
developer.wordpress.org2 · platform/reference
gnu.org1 · platform/reference
External Asset Domains
No external asset domains detected.
Incoming Endpoints
No public endpoints detected.
Admin AJAX endpoints3
wp_ajax_tml-activate-extension-licenseauthenticated
wp_ajax
wp_ajax_tml-deactivate-extension-licenseauthenticated
wp_ajax
wp_ajax_tml-dismiss-noticeauthenticated
wp_ajax
Score History
5 score snapshots
v7.2.2
37
Latest
- Findings
- 425
- Errors
- 18
- Warnings
- 407
- Check
- 2.1.0
v7.2.1
37
Score
- Findings
- 427
- Errors
- 18
- Warnings
- 409
- Check
- 2.1.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 37 | 425 | 18 | 407 | v7.2.2 | 2.1.0 |
| 37 | 427 | 18 | 409 | v7.2.1 | 2.1.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Plugin
Author
Issue
Related
Elementor Website Builder – more than just a page builder39 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreLiteSpeed Cache35 scoreWooCommerce22 scoreAkismet Anti-spam: Spam Protection35 scoreContact Form 769 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWPS Hide Login42 scoreLoginizer25 scoreSecurity Optimizer – The All-In-One Protection Plugin35 scoreLimit Login Attempts40 scoreLoginPress | wp-login Custom Login Page Customizer55 scoreWhite Label CMS33 scoreLogin as User: See the Site as Any User100 score
Plugin
Author
Issue
Related
Elementor Website Builder – more than just a page builder39 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreLiteSpeed Cache35 scoreWooCommerce22 scoreAkismet Anti-spam: Spam Protection35 scoreContact Form 769 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWPS Hide Login42 scoreLoginizer25 scoreSecurity Optimizer – The All-In-One Protection Plugin35 scoreLimit Login Attempts40 scoreLoginPress | wp-login Custom Login Page Customizer55 scoreWhite Label CMS33 scoreLogin as User: See the Site as Any User100 score
Related Plugins
Login as User: See the Site as Any User
30k+ active installs
100
Remove "Powered by WordPress"
20k+ active installs
100
Teydea Login Customizer – Custom Login Page, Branding & Styling
10k+ active installs
100
Login Security Captcha
10k+ active installs
100
Options for Twenty Twenty-One
6k+ active installs
100
Simple Login Log
5k+ active installs
100