This plugin lets you list posts by category, author, tags, and more, using a shortcode on posts, pages, or widgets with plenty of customization option …
33
Score
442
Errors
241
Warnings
+0
Change
Category Scores
Security0
Repo91
Performance100
Maintainability46
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Security
517
8 issue groups
Maintainability
162
14 issue groups
I18n
2
1 issue group
Repo Compliance
2
2 issue groups
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$_wpucv_authors'.382
- Category
- Security
- Occurrences
- 382
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$_wpucv_authors'.
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$_wpucv_grid_columns_num".82
- Category
- Maintainability
- Occurrences
- 82
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$_wpucv_grid_columns_num".
WARNINGSecurityMissing nonce verificationProcessing form data without nonce verification.60
- Category
- Security
- Occurrences
- 60
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_GET['real']32
- Category
- Security
- Occurrences
- 32
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_GET['real']
WARNINGSecurityRequest data is not unslashed$_GET['real'] not unslashed before sanitization. Use wp_unslash() or similar31
- Category
- Security
- Occurrences
- 31
- Severity
- warning
Sample message
$_GET['real'] not unslashed before sanitization. Use wp_unslash() or similar
ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;24
- Category
- Maintainability
- Occurrences
- 24
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
ERRORMaintainabilitywp function not compatible with requires wpFunction "get_the_author_posts_link()" requires WordPress 4.4.0, but your plugin minimum supported version is WordPress 3.5.0.21
- Category
- Maintainability
- Occurrences
- 21
- Severity
- error
Sample message
Function "get_the_author_posts_link()" requires WordPress 4.4.0, but your plugin minimum supported version is WordPress 3.5.0.
WARNINGMaintainabilityMissing VersionResource version not set in call to wp_enqueue_script(). This means new versions of the script may not always be loaded due to browser caching.16
- Category
- Maintainability
- Occurrences
- 16
- Severity
- warning
Sample message
Resource version not set in call to wp_enqueue_script(). This means new versions of the script may not always be loaded due to browser caching.
WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.6
- Category
- Security
- Occurrences
- 6
- Severity
- warning
Sample message
Processing form data without nonce verification.
ERRORMaintainabilityNo Explicit VersionVersion parameter is not explicitly set or has been set to an equivalent of "false" for wp_enqueue_script; This means that the WordPress core version will be used which is not recommended for plugin or theme development.6
- Category
- Maintainability
- Occurrences
- 6
- Severity
- error
Sample message
Version parameter is not explicitly set or has been set to an equivalent of "false" for wp_enqueue_script; This means that the WordPress core version will be used which is not recommended for plugin or theme development.
Show 15 moreShow less
WARNINGMaintainabilityNot In Footer3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
In footer ($in_footer) is not set explicitly wp_enqueue_script; It is recommended to load scripts in the footer. Please set this value to `true` to load it in the footer, or explicitly `false` if it should be loaded in the header.
ERRORSecurityDatabase parameter is not escaped2
- Category
- Security
- Occurrences
- 2
- Severity
- error
Sample message
Unescaped parameter $sql used in $wpdb->get_col()\n$sql assigned unsafely at line 1428.
WARNINGMaintainabilityDirect Query2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGMaintainabilityNo Caching2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
ERRORSecuritySQL query is not prepared2
- Category
- Security
- Occurrences
- 2
- Severity
- error
Sample message
Use placeholders and $wpdb->prepare(); found $sql
WARNINGSecurityInput is not validated2
- Category
- Security
- Occurrences
- 2
- Severity
- warning
Sample message
Detected usage of a possibly undefined superglobal array index: $_SESSION[$id]['list_options']. Check that the array index exists before using it.
ERRORI18nText Domain Mismatch2
- Category
- I18n
- Occurrences
- 2
- Severity
- error
Sample message
Mismatched text domain. Expected 'ultimate-content-views' but got 'pluginrows'.
WARNINGMaintainabilityslow db query tax query1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Detected usage of tax_query, possible slow query.
WARNINGMaintainabilityNon-prefixed function1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "WPLCPPRO_deactivate_pro_plugin".
WARNINGMaintainabilityNon-prefixed hook name1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "run_css_previewcss".
ERRORMaintainabilityfile system operations mkdir1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: mkdir().
WARNINGMaintainabilityDiscouraged PHP function1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
wp_reset_query() is discouraged. Use wp_reset_postdata() instead.
ERRORMaintainabilityfive star reviews detected1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
Linking directly to 5 stars reviews is not allowed.
ERRORRepo Complianceoutdated tested upto header1
- Category
- Repo Compliance
- Occurrences
- 1
- Severity
- error
Sample message
Tested up to: 6.8 < 7.0. The "Tested up to" value in your plugin is not set to the current version of WordPress. This means your plugin will not show up in searches, as we require plugins to be compatible and documented as tested up to the most recent version of WordPress.
WARNINGRepo Compliancereadme parser warnings trimmed short description1
- Category
- Repo Compliance
- Occurrences
- 1
- Severity
- warning
Sample message
The "Short Description" section is too long and was truncated. A maximum of 150 characters is supported.
External Connections
Potential connections found in static code analysis.
Outbound calls
117
External assets
0
Incoming endpoints
6
Notable Domains
fontawesome.io4 · outbound
getbootstrap.com4 · outbound
jqueryui.com2 · outbound
wp-buy.com2 · outbound
ansciath.tumblr.com1 · outbound
bgrins.github.io1 · outbound
Platform / Reference Domains
github.com73 · platform/reference
schema.org12 · platform/reference
w3.org8 · platform/reference
wordpress.org4 · platform/reference
External Asset Domains
No external asset domains detected.
Incoming Endpoints
wp_ajax_nopriv_wpucv_get_list_pagepublic
wp_ajax
Admin AJAX endpoints5
wp_ajax_wpucv_destroy_preview_sessionauthenticated
wp_ajax
wp_ajax_wpucv_get_list_pageauthenticated
wp_ajax
wp_ajax_wpucv_img_id_from_urlauthenticated
wp_ajax
wp_ajax_wpucv_list_edit_pageauthenticated
wp_ajax
wp_ajax_wpucv_prepare_for_previewauthenticated
wp_ajax
Score History
First score snapshot
v4.4
33
Latest
- Findings
- 683
- Errors
- 442
- Warnings
- 241
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 33 | 683 | 442 | 241 | v4.4 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Author
Issue
Output is not escaped382 findingsNon-prefixed global variable82 findingsMissing nonce verification60 findingsInput is not sanitized32 findingsRequest data is not unslashed31 findingsMissing direct file access protection24 findingswp function not compatible with requires wp21 findingsMissing Version16 findings
Domain
Related
Yoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce22 scoreAkismet Anti-spam: Spam Protection35 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder35 scoreClassic Editor63 scoreLiteSpeed Cache35 scoreAll-in-One WP Migration and Backup34 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreGenerateBlocks97 scorePost Duplicator60 scoreAll 404 Redirect to Homepage25 scorePublic Post Preview57 scoreWP Popular Posts29 score
Author
Issue
Output is not escaped382 findingsNon-prefixed global variable82 findingsMissing nonce verification60 findingsInput is not sanitized32 findingsRequest data is not unslashed31 findingsMissing direct file access protection24 findingswp function not compatible with requires wp21 findingsMissing Version16 findings
Domain
Related
Yoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce22 scoreAkismet Anti-spam: Spam Protection35 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder35 scoreClassic Editor63 scoreLiteSpeed Cache35 scoreAll-in-One WP Migration and Backup34 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreGenerateBlocks97 scorePost Duplicator60 scoreAll 404 Redirect to Homepage25 scorePublic Post Preview57 scoreWP Popular Posts29 score
Related Plugins
Default Post Author
1k+ active installs
99
Essential Widgets
10k+ active installs
99
List all posts by Authors, nested Categories and Titles
700 active installs
99
WP Sitemap Pages and Posts
1k+ active installs
99
Advanced Posts Listing – Show Post List Easily
3k+ active installs
98
Auto Tag Creator
1k+ active installs
98