Lightweight traffic logger for WordPress analytics. View, filter, and export page request data; monitor caching; detect bots; and spot click fraud.
39
Score
7
Errors
143
Warnings
+0
Change
Category Scores
Security0
Repo100
Performance100
Maintainability71
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Maintainability
117
9 issue groups
Security
33
8 issue groups
WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.51
- Category
- Maintainability
- Occurrences
- 51
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().50
- Category
- Maintainability
- Occurrences
- 50
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
WARNINGSecurityMissing nonce verificationProcessing form data without nonce verification.14
- Category
- Security
- Occurrences
- 14
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.8
- Category
- Security
- Occurrences
- 8
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGMaintainabilityerror log error logerror_log() found. Debug code should not normally be used in production.6
- Category
- Maintainability
- Occurrences
- 6
- Severity
- warning
Sample message
error_log() found. Debug code should not normally be used in production.
WARNINGMaintainabilitySchema ChangeAttempting a database schema change is discouraged.4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- warning
Sample message
Attempting a database schema change is discouraged.
ERRORSecurityDatabase parameter is not escapedUnescaped parameter $placeholders used in $wpdb->query()\n$placeholders assigned unsafely at line 1076.3
- Category
- Security
- Occurrences
- 3
- Severity
- error
Sample message
Unescaped parameter $placeholders used in $wpdb->query()\n$placeholders assigned unsafely at line 1076.
WARNINGSecurityInterpolated SQL is not preparedUse placeholders and $wpdb->prepare(); found interpolated variable $placeholders at "DELETE FROM %i WHERE id IN ( $placeholders )"3
- Category
- Security
- Occurrences
- 3
- Severity
- warning
Sample message
Use placeholders and $wpdb->prepare(); found interpolated variable $placeholders at "DELETE FROM %i WHERE id IN ( $placeholders )"
ERRORSecuritySQL query is not preparedUse placeholders and $wpdb->prepare(); found $sql2
- Category
- Security
- Occurrences
- 2
- Severity
- error
Sample message
Use placeholders and $wpdb->prepare(); found $sql
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$cache_check_nonce".2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$cache_check_nonce".
Show 7 moreShow less
WARNINGSecurityReplacements Wrong Number1
- Category
- Security
- Occurrences
- 1
- Severity
- warning
Sample message
Incorrect number of replacements passed to $wpdb->prepare(). Found 1 replacement parameters, expected 6.
WARNINGMaintainabilityNon-prefixed constant1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "TRAFFIC_MONITOR_VERSION".
WARNINGMaintainabilityNon-prefixed hook name1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "default_hidden_columns".
WARNINGSecurityInput is not sanitized1
- Category
- Security
- Occurrences
- 1
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_SERVER['HTTP_USER_AGENT']
WARNINGSecurityRequest data is not unslashed1
- Category
- Security
- Occurrences
- 1
- Severity
- warning
Sample message
$_SERVER['HTTP_USER_AGENT'] not unslashed before sanitization. Use wp_unslash() or similar
ERRORMaintainabilityfile system operations fclose1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fclose().
ERRORMaintainabilityfile system operations fopen1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fopen().
External Connections
Potential connections found in static code analysis.
Outbound calls
6
External assets
0
Incoming endpoints
6
Notable Domains
linkedin.com1 · outbound
Platform / Reference Domains
External Asset Domains
No external asset domains detected.
Incoming Endpoints
wp_ajax_nopriv_tfcm_get_ippublic
wp_ajax
wp_ajax_nopriv_tfcm_log_ajax_requestpublic
wp_ajax
Admin AJAX endpoints4
wp_ajax_tfcm_dismiss_export_noticeauthenticated
wp_ajax
wp_ajax_tfcm_get_ipauthenticated
wp_ajax
wp_ajax_tfcm_handle_bulk_actionauthenticated
wp_ajax
wp_ajax_tfcm_log_ajax_requestauthenticated
wp_ajax
Score History
2 score snapshots
v3.2.8
39
Latest
- Findings
- 150
- Errors
- 7
- Warnings
- 143
- Check
- 2.1.0
v3.2.7
39
Score
- Findings
- 149
- Errors
- 6
- Warnings
- 143
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 39 | 150 | 7 | 143 | v3.2.8 | 2.1.0 |
| 39 | 149 | 6 | 143 | v3.2.7 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Plugin
Author
Issue
Domain
Related
Contact Form 769 scoreElementor Website Builder – more than just a page builder38 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce22 scoreAkismet Anti-spam: Spam Protection35 scoreLiteSpeed Cache35 scoreAll-in-One WP Migration and Backup34 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreMonsterInsights – Google Analytics Dashboard for WordPress (Website Stats Made Easy)25 scoreWP Statistics – Simple, privacy-friendly Google Analytics alternative25 scoreGA Google Analytics – Connect Google Analytics to WordPress42 scoreExactMetrics – Google Analytics Dashboard for WordPress (Website Stats Plugin)24 scoreBurst Statistics – Simple WordPress Analytics (Google Analytics Alternative)48 scoreWeb Worker Offloading99 score
Plugin
Author
Issue
Domain
Related
Contact Form 769 scoreElementor Website Builder – more than just a page builder38 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce22 scoreAkismet Anti-spam: Spam Protection35 scoreLiteSpeed Cache35 scoreAll-in-One WP Migration and Backup34 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreMonsterInsights – Google Analytics Dashboard for WordPress (Website Stats Made Easy)25 scoreWP Statistics – Simple, privacy-friendly Google Analytics alternative25 scoreGA Google Analytics – Connect Google Analytics to WordPress42 scoreExactMetrics – Google Analytics Dashboard for WordPress (Website Stats Plugin)24 scoreBurst Statistics – Simple WordPress Analytics (Google Analytics Alternative)48 scoreWeb Worker Offloading99 score
Related Plugins
WP Client Reports
6k+ active installs
100
VigIA – AI Visibility, Analytics & Control
1k+ active installs
100
Lightweight Google Analytics
400 active installs
100
PufferSights – AI Crawler Insights
10 active installs
100
Web Worker Offloading
10k+ active installs
99
Machete
6k+ active installs
99