Gutenberg on Steroids! Extend your editor with powerful, flexible, and modular blocks to unlock limitless design possibilities.
32
Score
59
Errors
394
Warnings
+0
Change
Category Scores
Security0
Repo94
Performance93
Maintainability42
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Maintainability
363
13 issue groups
Security
75
6 issue groups
I18n
6
3 issue groups
Performance
5
2 issue groups
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$_query".328
- Category
- Maintainability
- Occurrences
- 328
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$_query".
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"<style>\n{$styles}\n</style>\n"'.37
- Category
- Security
- Occurrences
- 37
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"<style>\n{$styles}\n</style>\n"'.
WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.27
- Category
- Security
- Occurrences
- 27
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_GET['rest_route']7
- Category
- Security
- Occurrences
- 7
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_GET['rest_route']
WARNINGMaintainabilityMissing VersionResource version not set in call to wp_enqueue_style(). This means new versions of the style may not always be loaded due to browser caching.7
- Category
- Maintainability
- Occurrences
- 7
- Severity
- warning
Sample message
Resource version not set in call to wp_enqueue_style(). This means new versions of the style may not always be loaded due to browser caching.
WARNINGMaintainabilityNon-prefixed hook nameHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "the_content".4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "the_content".
WARNINGMaintainabilityerror log error logerror_log() found. Debug code should not normally be used in production.4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- warning
Sample message
error_log() found. Debug code should not normally be used in production.
WARNINGMaintainabilityslow db query meta queryDetected usage of meta_query, possible slow query.3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
Detected usage of meta_query, possible slow query.
WARNINGMaintainabilityslow db query tax queryDetected usage of tax_query, possible slow query.3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
Detected usage of tax_query, possible slow query.
ERRORMaintainabilityparse url parse urlparse_url() is discouraged because of inconsistency in the output across PHP versions; use wp_parse_url() instead.3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- error
Sample message
parse_url() is discouraged because of inconsistency in the output across PHP versions; use wp_parse_url() instead.
Show 15 moreShow less
ERRORMaintainabilityunlink unlink3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- error
Sample message
unlink() is discouraged. Use wp_delete_file() to delete a file.
ERRORI18nMissing Translators Comment3
- Category
- I18n
- Occurrences
- 3
- Severity
- error
Sample message
A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.
WARNINGPerformancePost Not In post not in3
- Category
- Performance
- Occurrences
- 3
- Severity
- warning
Sample message
Using exclusionary parameters, like post__not_in, in calls to get_posts() should be done with caution, see https://wpvip.com/documentation/performance-improvements-by-removing-usage-of-post__not_in/ for more information.
WARNINGSecurityRequest data is not unslashed2
- Category
- Security
- Occurrences
- 2
- Severity
- warning
Sample message
$_GET['rest_route'] not unslashed before sanitization. Use wp_unslash() or similar
ERRORMaintainabilitystrip tags strip tags2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
strip_tags() is discouraged. Use the more comprehensive wp_strip_all_tags() instead.
ERRORMaintainabilityNon Enqueued Stylesheet2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
Stylesheets must be registered/enqueued via wp_enqueue_style()
ERRORI18nText Domain Mismatch2
- Category
- I18n
- Occurrences
- 2
- Severity
- error
Sample message
Mismatched text domain. Expected 'uicore-blocks' but got 'uicore-pro'.
WARNINGPerformancePost Not In exclude2
- Category
- Performance
- Occurrences
- 2
- Severity
- warning
Sample message
Using exclusionary parameters, like exclude, in calls to get_posts() should be done with caution, see https://wpvip.com/documentation/performance-improvements-by-removing-usage-of-post__not_in/ for more information.
ERRORMaintainabilityMissing direct file access protection2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
ERRORMaintainabilityForbidden PHP function found1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
The use of function wp_get_sidebars_widgets() is forbidden
ERRORSecuritySQL query is not prepared1
- Category
- Security
- Occurrences
- 1
- Severity
- error
Sample message
Use placeholders and $wpdb->prepare(); found $clauses
WARNINGSecurityUnfinished Prepare1
- Category
- Security
- Occurrences
- 1
- Severity
- warning
Sample message
Replacement variables found, but no valid placeholders found in the query.
WARNINGMaintainabilityDiscouraged PHP function1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
wp_reset_query() is discouraged. Use wp_reset_postdata() instead.
ERRORI18nMissing Arg Domain1
- Category
- I18n
- Occurrences
- 1
- Severity
- error
Sample message
Missing $domain parameter in function call to _n().
ERRORRepo Compliancelicense mismatch1
- Category
- Repo Compliance
- Occurrences
- 1
- Severity
- error
Sample message
Your plugin has a different license declared in the readme file and plugin header. Please update your readme with a valid GPL license identifier.
External Connections
Potential connections found in static code analysis.
Outbound calls
158
External assets
5
Incoming endpoints
12
Notable Domains
facebook.com5 · outbound
instagram.com5 · outbound
placehold.co5 · outbound
twitter.com5 · outbound
google.com4 · outbound
ai-designer-api.uicore.co2 · outbound
Platform / Reference Domains
w3.org69 · platform/reference
developer.wordpress.org24 · platform/reference
github.com22 · platform/reference
External Asset Domains
fonts.googleapis.com6 · asset + outbound
use.typekit.net2 · asset + outbound
Incoming Endpoints
/wp-json/uicore-blocks/v1/globalsREST
register_rest_route
/wp-json/uicore-blocks/v1/quick-actionsREST
register_rest_route
/wp-json/uicore-blocks/v1/form-submissionREST
register_rest_route
/wp-json/uicore-blocks/v1/get-editor-fontsREST
register_rest_route
/wp-json/uicore-blocks/v1/import-imagesREST
register_rest_route
/wp-json/uicore-blocks/v1/post-no-commentsREST
register_rest_route
Score History
2 score snapshots
v1.0.15
32
Latest
- Findings
- 453
- Errors
- 59
- Warnings
- 394
- Check
- 2.0.0
v1.0.14
32
Score
- Findings
- 446
- Errors
- 59
- Warnings
- 387
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 32 | 453 | 59 | 394 | v1.0.15 | 2.0.0 |
| 32 | 446 | 59 | 387 | v1.0.14 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Author
Issue
Domain
Related
Elementor Website Builder – more than just a page builder39 scoreClassic Editor63 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce22 scoreAkismet Anti-spam: Spam Protection35 scoreContact Form 769 scoreLiteSpeed Cache35 scoreAll-in-One WP Migration and Backup34 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreClassic Widgets97 scoreAdvanced Editor Tools41 scoreSpectra Legacy – Gutenberg Blocks25 scoreUser Role Editor43 scoreBlocks Animation: CSS Animations for Gutenberg Blocks99 score
Author
Issue
Domain
Related
Elementor Website Builder – more than just a page builder39 scoreClassic Editor63 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce22 scoreAkismet Anti-spam: Spam Protection35 scoreContact Form 769 scoreLiteSpeed Cache35 scoreAll-in-One WP Migration and Backup34 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreClassic Widgets97 scoreAdvanced Editor Tools41 scoreSpectra Legacy – Gutenberg Blocks25 scoreUser Role Editor43 scoreBlocks Animation: CSS Animations for Gutenberg Blocks99 score
Related Plugins
100
No Gutenberg? – Choose Where to Use the Block Editor or the Classic Editor
9k+ active installs
100
Extend Link
1k+ active installs
100
Term Description: Rich Text Editor (Powered by TinyMCE) for WooCommerce
700 active installs
100
Cards Layout – showcase content in responsive card grids
400 active installs
100
Blocks Animation: CSS Animations for Gutenberg Blocks
90k+ active installs
99