UiCore Blocks – Free WordPress Gutenberg Blocks

Gutenberg on Steroids! Extend your editor with powerful, flexible, and modular blocks to unlock limitless design possibilities.

v1.0.15uicoreUpdated Added 500 installs74% rating
32
Score
59
Errors
394
Warnings
+0
Change

Category Scores

Security0
Repo94
Performance93
Maintainability42

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

453 findings

Maintainability

363

13 issue groups

Security

75

6 issue groups

I18n

6

3 issue groups

Performance

5

2 issue groups

WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$_query".328
Category
Maintainability
Occurrences
328
Severity
warning

Sample message

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$_query".

ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"<style>\n{$styles}\n</style>\n"'.37
Category
Security
Occurrences
37
Severity
error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"<style>\n{$styles}\n</style>\n"'.

WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.27
Category
Security
Occurrences
27
Severity
warning

Sample message

Processing form data without nonce verification.

WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_GET[&#039;rest_route&#039;]7
Category
Security
Occurrences
7
Severity
warning

Sample message

Detected usage of a non-sanitized input variable: $_GET[&#039;rest_route&#039;]

WARNINGMaintainabilityMissing VersionResource version not set in call to wp_enqueue_style(). This means new versions of the style may not always be loaded due to browser caching.7
Category
Maintainability
Occurrences
7
Severity
warning

Sample message

Resource version not set in call to wp_enqueue_style(). This means new versions of the style may not always be loaded due to browser caching.

WARNINGMaintainabilityNon-prefixed hook nameHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: &quot;the_content&quot;.4
Category
Maintainability
Occurrences
4
Severity
warning

Sample message

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: &quot;the_content&quot;.

WARNINGMaintainabilityerror log error logerror_log() found. Debug code should not normally be used in production.4
Category
Maintainability
Occurrences
4
Severity
warning

Sample message

error_log() found. Debug code should not normally be used in production.

WARNINGMaintainabilityslow db query meta queryDetected usage of meta_query, possible slow query.3
Category
Maintainability
Occurrences
3
Severity
warning

Sample message

Detected usage of meta_query, possible slow query.

WARNINGMaintainabilityslow db query tax queryDetected usage of tax_query, possible slow query.3
Category
Maintainability
Occurrences
3
Severity
warning

Sample message

Detected usage of tax_query, possible slow query.

ERRORMaintainabilityparse url parse urlparse_url() is discouraged because of inconsistency in the output across PHP versions; use wp_parse_url() instead.3
Category
Maintainability
Occurrences
3
Severity
error

Sample message

parse_url() is discouraged because of inconsistency in the output across PHP versions; use wp_parse_url() instead.

Show 15 more
ERRORMaintainabilityunlink unlink3
Category
Maintainability
Occurrences
3
Severity
error

Sample message

unlink() is discouraged. Use wp_delete_file() to delete a file.

ERRORI18nMissing Translators Comment3
Category
I18n
Occurrences
3
Severity
error

Sample message

A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.

WARNINGPerformancePost Not In post not in3
Category
Performance
Occurrences
3
Severity
warning

Sample message

Using exclusionary parameters, like post__not_in, in calls to get_posts() should be done with caution, see https://wpvip.com/documentation/performance-improvements-by-removing-usage-of-post__not_in/ for more information.

WARNINGSecurityRequest data is not unslashed2
Category
Security
Occurrences
2
Severity
warning

Sample message

$_GET[&#039;rest_route&#039;] not unslashed before sanitization. Use wp_unslash() or similar

ERRORMaintainabilitystrip tags strip tags2
Category
Maintainability
Occurrences
2
Severity
error

Sample message

strip_tags() is discouraged. Use the more comprehensive wp_strip_all_tags() instead.

ERRORMaintainabilityNon Enqueued Stylesheet2
Category
Maintainability
Occurrences
2
Severity
error

Sample message

Stylesheets must be registered/enqueued via wp_enqueue_style()

ERRORI18nText Domain Mismatch2
Category
I18n
Occurrences
2
Severity
error

Sample message

Mismatched text domain. Expected 'uicore-blocks' but got 'uicore-pro'.

WARNINGPerformancePost Not In exclude2
Category
Performance
Occurrences
2
Severity
warning

Sample message

Using exclusionary parameters, like exclude, in calls to get_posts() should be done with caution, see https://wpvip.com/documentation/performance-improvements-by-removing-usage-of-post__not_in/ for more information.

ERRORMaintainabilityMissing direct file access protection2
Category
Maintainability
Occurrences
2
Severity
error

Sample message

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

ERRORMaintainabilityForbidden PHP function found1
Category
Maintainability
Occurrences
1
Severity
error

Sample message

The use of function wp_get_sidebars_widgets() is forbidden

ERRORSecuritySQL query is not prepared1
Category
Security
Occurrences
1
Severity
error

Sample message

Use placeholders and $wpdb->prepare(); found $clauses

WARNINGSecurityUnfinished Prepare1
Category
Security
Occurrences
1
Severity
warning

Sample message

Replacement variables found, but no valid placeholders found in the query.

WARNINGMaintainabilityDiscouraged PHP function1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

wp_reset_query() is discouraged. Use wp_reset_postdata() instead.

ERRORI18nMissing Arg Domain1
Category
I18n
Occurrences
1
Severity
error

Sample message

Missing $domain parameter in function call to _n().

ERRORRepo Compliancelicense mismatch1
Category
Repo Compliance
Occurrences
1
Severity
error

Sample message

Your plugin has a different license declared in the readme file and plugin header. Please update your readme with a valid GPL license identifier.

External Connections

Potential connections found in static code analysis.

22 domains

Outbound calls

158

External assets

5

Incoming endpoints

12

Notable Domains

facebook.com5 · outbound
instagram.com5 · outbound
placehold.co5 · outbound
twitter.com5 · outbound
google.com4 · outbound

Platform / Reference Domains

w3.org69 · platform/reference
developer.wordpress.org24 · platform/reference
github.com22 · platform/reference

External Asset Domains

fonts.googleapis.com6 · asset + outbound
use.typekit.net2 · asset + outbound

Incoming Endpoints

/wp-json/uicore-blocks/v1/globalsREST

register_rest_route

/wp-json/uicore-blocks/v1/quick-actionsREST

register_rest_route

/wp-json/uicore-blocks/v1/form-submissionREST

register_rest_route

/wp-json/uicore-blocks/v1/get-editor-fontsREST

register_rest_route

/wp-json/uicore-blocks/v1/import-imagesREST

register_rest_route

/wp-json/uicore-blocks/v1/post-no-commentsREST

register_rest_route

Score History

2 score snapshots

+0
1007550250Jun 25, 2026, 05:45 PM UTC Score 32/100 Plugin v1.0.14 Plugin Check 2.0.0 59 errors, 387 warningsJul 1, 2026, 02:47 PM UTC Score 32/100 Plugin v1.0.15 Plugin Check 2.0.0 59 errors, 394 warningsJun 25, 2026Jul 1, 2026

v1.0.15

32

Latest

Findings
453
Errors
59
Warnings
394
Check
2.0.0

v1.0.14

32

Score

Findings
446
Errors
59
Warnings
387
Check
2.0.0

Relationship Map

Author, categories, issues, domains, and nearby plugins.

35 nodes

Related Plugins