Speed up your website. Optimize your JPEG, PNG, and WebP images automatically with TinyPNG.
72
Score
40
Errors
73
Warnings
+34
Change
Category Scores
Security62
Repo100
Performance100
Maintainability64
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Maintainability
104
9 issue groups
Security
9
2 issue groups
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$active".67
- Category
- Maintainability
- Occurrences
- 67
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$active".
ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;22
- Category
- Maintainability
- Occurrences
- 22
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
ERRORSecuritySetting is missing a sanitization callbackSanitization missing for register_setting().8
- Category
- Security
- Occurrences
- 8
- Severity
- error
Sample message
Sanitization missing for register_setting().
ERRORMaintainabilitywp function not compatible with requires wpFunction "mb_strlen()" requires WordPress 4.2.0, but your plugin minimum supported version is WordPress 4.0.0.5
- Category
- Maintainability
- Occurrences
- 5
- Severity
- error
Sample message
Function "mb_strlen()" requires WordPress 4.2.0, but your plugin minimum supported version is WordPress 4.0.0.
WARNINGMaintainabilityNon-prefixed hook nameHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "'wp_ajax_' . $action".3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "'wp_ajax_' . $action".
ERRORMaintainabilityfile system operations fopenFile operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fopen().2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fopen().
ERRORMaintainabilityfile system operations is writableFile operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: is_writable().2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: is_writable().
WARNINGSecurityDatabase parameter is not escapedUnescaped parameter $query used in $wpdb->get_results()\n$query assigned unsafely at line 70.1
- Category
- Security
- Occurrences
- 1
- Severity
- warning
Sample message
Unescaped parameter $query used in $wpdb->get_results()\n$query assigned unsafely at line 70.
WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
Show 1 moreShow less
ERRORMaintainabilityfile system operations fclose1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fclose().
External Connections
Potential connections found in static code analysis.
Outbound calls
19
External assets
0
Incoming endpoints
11
Notable Domains
tinypng.com8 · outbound
api.tinify.com3 · outbound
bugs.jquery.com1 · outbound
gist.github.com1 · outbound
php.net1 · outbound
Platform / Reference Domains
developer.wordpress.org2 · platform/reference
wordpress.org2 · platform/reference
codex.wordpress.org1 · platform/reference
External Asset Domains
No external asset domains detected.
Incoming Endpoints
No public endpoints detected.
Admin AJAX endpoints11
wp_ajax_tiny_account_statusauthenticated
wp_ajax
wp_ajax_tiny_compress_image_for_bulkauthenticated
wp_ajax
wp_ajax_tiny_compress_image_from_libraryauthenticated
wp_ajax
wp_ajax_tiny_dismiss_noticeauthenticated
wp_ajax
wp_ajax_tiny_download_diagnosticsauthenticated
wp_ajax
wp_ajax_tiny_get_compression_statusauthenticated
wp_ajax
wp_ajax_tiny_get_optimization_statisticsauthenticated
wp_ajax
wp_ajax_tiny_image_sizes_noticeauthenticated
wp_ajax
wp_ajax_tiny_mark_image_as_compressedauthenticated
wp_ajax
wp_ajax_tiny_settings_create_api_keyauthenticated
wp_ajax
wp_ajax_tiny_settings_update_api_keyauthenticated
wp_ajax
Score History
2 score snapshots
v3.7.0
72
Latest
- Findings
- 113
- Errors
- 40
- Warnings
- 73
- Check
- 2.0.0
v3.6.14
38
Score
- Findings
- 337
- Errors
- 196
- Warnings
- 141
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 72 | 113 | 40 | 73 | v3.7.0 | 2.0.0 |
| 38 | 337 | 196 | 141 | v3.6.14 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Author
Category
Issue
Non-prefixed global variable67 findingsMissing direct file access protection22 findingsSetting is missing a sanitization callback8 findingswp function not compatible with requires wp5 findingsNon-prefixed hook name3 findingsfile system operations fopen2 findingsfile system operations is writable2 findingsDatabase parameter is not escaped1 finding
Domain
Related
Contact Form 769 scoreElementor Website Builder – more than just a page builder39 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreLiteSpeed Cache35 scoreWooCommerce21 scoreAkismet Anti-spam: Spam Protection35 scoreImagify Image Optimization: Optimize Images | Compress & Convert to WebP/AVIF21 scoreSmush – Image Optimization, Compression, Lazy Load, WebP & CDN25 scoreConverter for Media – Optimize images | Convert WebP & AVIF35 scoreShortPixel Image Optimizer – Optimize Images, Convert WebP & AVIF22 scoreOptimole – Optimize Images | Convert WebP & AVIF | CDN & Lazy Load | Image Optimization29 scoreAsset CleanUp: Page Speed Booster22 scoreLeverage Browser Caching100 scoreWP Remove Query Strings From Static Resources99 score
Author
Category
Issue
Non-prefixed global variable67 findingsMissing direct file access protection22 findingsSetting is missing a sanitization callback8 findingswp function not compatible with requires wp5 findingsNon-prefixed hook name3 findingsfile system operations fopen2 findingsfile system operations is writable2 findingsDatabase parameter is not escaped1 finding
Domain
Related
Contact Form 769 scoreElementor Website Builder – more than just a page builder39 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreLiteSpeed Cache35 scoreWooCommerce21 scoreAkismet Anti-spam: Spam Protection35 scoreImagify Image Optimization: Optimize Images | Compress & Convert to WebP/AVIF21 scoreSmush – Image Optimization, Compression, Lazy Load, WebP & CDN25 scoreConverter for Media – Optimize images | Convert WebP & AVIF35 scoreShortPixel Image Optimizer – Optimize Images, Convert WebP & AVIF22 scoreOptimole – Optimize Images | Convert WebP & AVIF | CDN & Lazy Load | Image Optimization29 scoreAsset CleanUp: Page Speed Booster22 scoreLeverage Browser Caching100 scoreWP Remove Query Strings From Static Resources99 score
Related Plugins
Leverage Browser Caching
10k+ active installs
100
Speed Up – JavaScript To Footer
1k+ active installs
100
Speed Up – Optimize CSS Delivery
600 active installs
100
WP Remove Query Strings From Static Resources
3k+ active installs
99
Lazy Load for Comments
2k+ active installs
99
Disable JPEG Compression
1k+ active installs
98