Supercharge your WordPress themes and plugins with powerful features that are easy to create.
39
Score
149
Errors
49
Warnings
+0
Change
Category Scores
Security0
Repo86
Performance100
Maintainability79
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Security
173
7 issue groups
Maintainability
18
13 issue groups
I18n
4
1 issue group
Repo Compliance
3
3 issue groups
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$button_value'.137
- Category
- Security
- Occurrences
- 137
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$button_value'.
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_REQUEST[$id .'_id']16
- Category
- Security
- Occurrences
- 16
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_REQUEST[$id .'_id']
WARNINGSecurityRequest data is not unslashed$_REQUEST[$id .'_id'] not unslashed before sanitization. Use wp_unslash() or similar16
- Category
- Security
- Occurrences
- 16
- Severity
- warning
Sample message
$_REQUEST[$id .'_id'] not unslashed before sanitization. Use wp_unslash() or similar
ERRORI18nMissing Arg DomainMissing $domain parameter in function call to __().4
- Category
- I18n
- Occurrences
- 4
- Severity
- error
Sample message
Missing $domain parameter in function call to __().
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$_registered_style_options".2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$_registered_style_options".
WARNINGMaintainabilityNot In FooterIn footer ($in_footer) is not set explicitly wp_enqueue_script; It is recommended to load scripts in the footer. Please set this value to `true` to load it in the footer, or explicitly `false` if it should be loaded in the header.2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
In footer ($in_footer) is not set explicitly wp_enqueue_script; It is recommended to load scripts in the footer. Please set this value to `true` to load it in the footer, or explicitly `false` if it should be loaded in the header.
ERRORMaintainabilityNon Enqueued StylesheetStylesheets must be registered/enqueued via wp_enqueue_style()2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
Stylesheets must be registered/enqueued via wp_enqueue_style()
ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
WARNINGMaintainabilitytrademarked termThe plugin name includes a restricted term. Your chosen plugin name - "ThemeKit For WordPress" - contains the restricted term "wordpress" which cannot be used at all in your plugin name.2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
The plugin name includes a restricted term. Your chosen plugin name - "ThemeKit For WordPress" - contains the restricted term "wordpress" which cannot be used at all in your plugin name.
ERRORSecurityDatabase parameter is not escapedUnescaped parameter $query used in $wpdb->get_row()\n$query assigned unsafely at line 684.1
- Category
- Security
- Occurrences
- 1
- Severity
- error
Sample message
Unescaped parameter $query used in $wpdb->get_row()\n$query assigned unsafely at line 684.
Show 14 moreShow less
WARNINGMaintainabilityDirect Query1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGMaintainabilityNo Caching1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
ERRORSecuritySQL query is not prepared1
- Category
- Security
- Occurrences
- 1
- Severity
- error
Sample message
Use placeholders and $wpdb->prepare(); found $query
WARNINGMaintainabilityDynamic hook name1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "$this->get_option_name()".
WARNINGMaintainabilityNon-prefixed class1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "widget_styler_class".
WARNINGMaintainabilityNon-prefixed function1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "tk_register_sidebar_style".
WARNINGMaintainabilityerror log print r1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
print_r() found. Debug code should not normally be used in production.
WARNINGSecurityMissing nonce verification1
- Category
- Security
- Occurrences
- 1
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGSecurityInput is not validated1
- Category
- Security
- Occurrences
- 1
- Severity
- warning
Sample message
Detected usage of a possibly undefined superglobal array index: $_POST['post_id']. Check that the array index exists before using it.
WARNINGMaintainabilityDeprecated function: add_contextual_help1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
add_contextual_help() has been deprecated since WordPress version 3.3.0. Use get_current_screen()->add_help_tab() instead.
WARNINGMaintainabilityDeprecated function: get_current_theme1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
get_current_theme() has been deprecated since WordPress version 3.4.0. Use wp_get_theme() instead.
ERRORRepo Complianceno license1
- Category
- Repo Compliance
- Occurrences
- 1
- Severity
- error
Sample message
Missing "License". Please update your readme with a valid GPLv2 (or later) compatible license.
ERRORRepo Complianceoutdated tested upto header1
- Category
- Repo Compliance
- Occurrences
- 1
- Severity
- error
Sample message
Tested up to: 3.1 < 7.0. The "Tested up to" value in your plugin is not set to the current version of WordPress. This means your plugin will not show up in searches, as we require plugins to be compatible and documented as tested up to the most recent version of WordPress.
WARNINGRepo Complianceplugin header nonexistent domain path1
- Category
- Repo Compliance
- Occurrences
- 1
- Severity
- warning
Sample message
The "Domain Path" header in the plugin file must point to an existing folder. Found: "languages"
External Connections
Potential connections found in static code analysis.
Outbound calls
3
External assets
1
Incoming endpoints
2
Notable Domains
themekitwp.com1 · outbound
Platform / Reference Domains
wordpress.org1 · platform/reference
External Asset Domains
fonts.googleapis.com2 · asset + outbound
Incoming Endpoints
No public endpoints detected.
Admin AJAX endpoints2
wp_ajax_tk_get_upload_image_htmlauthenticated
wp_ajax
wp_ajax_tk_handle_ajax_archiveauthenticated
wp_ajax
Score History
First score snapshot
v0.5.2
39
Latest
- Findings
- 198
- Errors
- 149
- Warnings
- 49
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 39 | 198 | 149 | 49 | v0.5.2 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Author
Issue
Domain
Related
Redux Framework100 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce22 scoreAll-in-One WP Migration and Backup34 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreContact Form 769 scoreClassic Editor63 scoreAkismet Anti-spam: Spam Protection35 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreOne Click Demo Import38 scoreCMB236 scoreImport / Export Customizer Settings79 scoreOptionTree93 scoreCornerstone34 score
Author
Issue
Domain
Related
Redux Framework100 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce22 scoreAll-in-One WP Migration and Backup34 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreContact Form 769 scoreClassic Editor63 scoreAkismet Anti-spam: Spam Protection35 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreOne Click Demo Import38 scoreCMB236 scoreImport / Export Customizer Settings79 scoreOptionTree93 scoreCornerstone34 score
Related Plugins
Redux Framework
900k+ active installs
100
Glow: maintenance & support management for agencies
600 active installs
99
Holiday Mode for WooCommerce
700 active installs
99
Catch Themes Demo Import
5k+ active installs
96
Transient Cleaner
1k+ active installs
96
WP Options Importer
6k+ active installs
96