Export html page from Tilda.cc for import to your WordPress site into post or page.
29
Score
219
Errors
78
Warnings
+0
Change
Category Scores
Security0
Repo94
Performance100
Maintainability26
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Security
142
5 issue groups
I18n
83
4 issue groups
Maintainability
63
16 issue groups
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"Cannot create writable directory [$upload_dir]"'.79
- Category
- Security
- Occurrences
- 79
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"Cannot create writable directory [$upload_dir]"'.
ERRORI18nText Domain MismatchMismatched text domain. Expected 'tilda-publishing' but got 'tilda'.49
- Category
- I18n
- Occurrences
- 49
- Severity
- error
Sample message
Mismatched text domain. Expected 'tilda-publishing' but got 'tilda'.
ERRORI18nMissing Arg DomainMissing $domain parameter in function call to __().31
- Category
- I18n
- Occurrences
- 31
- Severity
- error
Sample message
Missing $domain parameter in function call to __().
ERRORMaintainabilitywp function not compatible with requires wpFunction "get_current_screen()" requires WordPress 3.1.0, but your plugin minimum supported version is WordPress 3.0.1.22
- Category
- Maintainability
- Occurrences
- 22
- Severity
- error
Sample message
Function "get_current_screen()" requires WordPress 3.1.0, but your plugin minimum supported version is WordPress 3.0.1.
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_GET['t_nonce']20
- Category
- Security
- Occurrences
- 20
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_GET['t_nonce']
WARNINGSecurityInput is not validatedDetected usage of a possibly undefined superglobal array index: $_GET['t_nonce']. Check that the array index exists before using it.15
- Category
- Security
- Occurrences
- 15
- Severity
- warning
Sample message
Detected usage of a possibly undefined superglobal array index: $_GET['t_nonce']. Check that the array index exists before using it.
WARNINGSecurityRequest data is not unslashed$_GET['t_nonce'] not unslashed before sanitization. Use wp_unslash() or similar15
- Category
- Security
- Occurrences
- 15
- Severity
- warning
Sample message
$_GET['t_nonce'] not unslashed before sanitization. Use wp_unslash() or similar
WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.13
- Category
- Security
- Occurrences
- 13
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$data".10
- Category
- Maintainability
- Occurrences
- 10
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$data".
ERRORMaintainabilitycurl curl setoptUsing cURL functions is highly discouraged. Use wp_remote_get() instead.7
- Category
- Maintainability
- Occurrences
- 7
- Severity
- error
Sample message
Using cURL functions is highly discouraged. Use wp_remote_get() instead.
Show 15 moreShow less
ERRORMaintainabilityMissing direct file access protection4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
ERRORMaintainabilityparse url parse url3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- error
Sample message
parse_url() is discouraged because of inconsistency in the output across PHP versions; use wp_parse_url() instead.
ERRORMaintainabilityOffloaded Content2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
Offloading images, js, css, and other scripts to your servers or any remote service is disallowed.
ERRORMaintainabilitydate date2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.
ERRORMaintainabilitycurl curl close2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
Using cURL functions is highly discouraged. Use wp_remote_get() instead.
ERRORMaintainabilitycurl curl exec2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
Using cURL functions is highly discouraged. Use wp_remote_get() instead.
ERRORMaintainabilitycurl curl init2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
Using cURL functions is highly discouraged. Use wp_remote_get() instead.
ERRORMaintainabilityNon Enqueued Script2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
Scripts must be registered/enqueued via wp_enqueue_script()
ERRORI18nNon Singular String Literal Text2
- Category
- I18n
- Occurrences
- 2
- Severity
- error
Sample message
The $text parameter must be a single text string literal. Found: $out
WARNINGI18nDiscouraged text-domain loading1
- Category
- I18n
- Occurrences
- 1
- Severity
- warning
Sample message
load_plugin_textdomain() has been discouraged since WordPress version 4.6. When your plugin is hosted on WordPress.org, you no longer need to manually include this function call for translations under your plugin slug. WordPress will automatically load the translations for you as needed.
WARNINGMaintainabilityerror log var dump1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
var_dump() found. Debug code should not normally be used in production.
ERRORMaintainabilityfile system operations fclose1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fclose().
ERRORMaintainabilityfile system operations fopen1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fopen().
ERRORMaintainabilityfile system operations fwrite1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fwrite().
ERRORMaintainabilityfile system operations mkdir1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: mkdir().
External Connections
Potential connections found in static code analysis.
Outbound calls
8
External assets
2
Incoming endpoints
13
Notable Domains
tilda.cc2 · outbound
api.tildacdn.info1 · outbound
jqueryui.com1 · outbound
static.tildacdn.com1 · outbound
External Asset Domains
front.tildacdn.com5 · asset + outbound
Incoming Endpoints
wp_ajax_nopriv_tilda_sync_eventpublic
wp_ajax
Admin AJAX endpoints12
wp_ajax_add_new_keyauthenticated
wp_ajax
wp_ajax_delete_keyauthenticated
wp_ajax
wp_ajax_get_keysauthenticated
wp_ajax
wp_ajax_get_projectsauthenticated
wp_ajax
wp_ajax_refresh_keyauthenticated
wp_ajax
wp_ajax_tilda_admin_export_fileauthenticated
wp_ajax
wp_ajax_tilda_admin_switcher_statusauthenticated
wp_ajax
wp_ajax_tilda_admin_syncauthenticated
wp_ajax
wp_ajax_tilda_admin_update_common_settingsauthenticated
wp_ajax
wp_ajax_tilda_sync_eventauthenticated
wp_ajax
wp_ajax_update_keyauthenticated
wp_ajax
wp_ajax_update_projectauthenticated
wp_ajax
Score History
First score snapshot
v0.3.27
29
Latest
- Findings
- 297
- Errors
- 219
- Warnings
- 78
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 29 | 297 | 219 | 78 | v0.3.27 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Plugin
Author
Issue
Related
Yoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreClassic Editor63 scoreWooCommerce22 scoreLiteSpeed Cache35 scoreAkismet Anti-spam: Spam Protection35 scoreAll-in-One WP Migration and Backup34 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreJetpack – WP Security, Backup, Speed, & Growth22 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreSiteOrigin Widgets Bundle24 scoreHeader and Footer Scripts99 scorePost Duplicator60 scorePost Type Switcher75 score
Plugin
Author
Issue
Related
Yoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreClassic Editor63 scoreWooCommerce22 scoreLiteSpeed Cache35 scoreAkismet Anti-spam: Spam Protection35 scoreAll-in-One WP Migration and Backup34 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreJetpack – WP Security, Backup, Speed, & Growth22 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreSiteOrigin Widgets Bundle24 scoreHeader and Footer Scripts99 scorePost Duplicator60 scorePost Type Switcher75 score
Related Plugins
Display Remote Posts Block
800 active installs
100
Export Media as ZIP
1k+ active installs
100
Export Media URLs
7k+ active installs
100
BjornTech Accounting Report for WooCommerce
900 active installs
99
Classic Blog Grid
4k+ active installs
99
Custom Post Exporter
3k+ active installs
99