Unreal FlipBook is PDF Viewer, allowing to browse images, PDFs, HTMLs as a flipping book. It attracts user attention and makes more impression on him.
36
Score
400
Errors
92
Warnings
+0
Change
Category Scores
Security0
Repo100
Performance100
Maintainability56
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
I18n
359
1 issue group
Security
79
11 issue groups
Maintainability
50
13 issue groups
ERRORI18nNon Singular String Literal DomainThe $domain parameter must be a single text string literal. Found: POST_ID359
- Category
- I18n
- Occurrences
- 359
- Severity
- error
Sample message
The $domain parameter must be a single text string literal. Found: POST_ID
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$fb3d".23
- Category
- Maintainability
- Occurrences
- 23
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$fb3d".
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$fb3d['question']['html']'.16
- Category
- Security
- Occurrences
- 16
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$fb3d['question']['html']'.
WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.11
- Category
- Security
- Occurrences
- 11
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGSecurityInput is not validatedDetected usage of a possibly undefined superglobal array index: $_GET['id']. Check that the array index exists before using it.10
- Category
- Security
- Occurrences
- 10
- Severity
- warning
Sample message
Detected usage of a possibly undefined superglobal array index: $_GET['id']. Check that the array index exists before using it.
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_GET['id']9
- Category
- Security
- Occurrences
- 9
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_GET['id']
WARNINGSecurityRequest data is not unslashed$_GET['id'] not unslashed before sanitization. Use wp_unslash() or similar9
- Category
- Security
- Occurrences
- 9
- Severity
- warning
Sample message
$_GET['id'] not unslashed before sanitization. Use wp_unslash() or similar
WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.6
- Category
- Maintainability
- Occurrences
- 6
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
ERRORSecuritySQL query is not preparedUse placeholders and $wpdb->prepare(); found $ids6
- Category
- Security
- Occurrences
- 6
- Severity
- error
Sample message
Use placeholders and $wpdb->prepare(); found $ids
ERRORSecurityUnsafe printing functionAll output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.6
- Category
- Security
- Occurrences
- 6
- Severity
- error
Sample message
All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.
Show 15 moreShow less
WARNINGSecurityMissing nonce verification6
- Category
- Security
- Occurrences
- 6
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGMaintainabilityNo Caching5
- Category
- Maintainability
- Occurrences
- 5
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
WARNINGSecurityInterpolated SQL is not prepared3
- Category
- Security
- Occurrences
- 3
- Severity
- warning
Sample message
Use placeholders and $wpdb->prepare(); found interpolated variable $table at DELETE FROM $table\r\n
ERRORSecurityDatabase parameter is not escaped2
- Category
- Security
- Occurrences
- 2
- Severity
- error
Sample message
Unescaped parameter a_to_sql_list($ids))) used in $wpdb->query()
WARNINGMaintainabilityslow db query tax query2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
Detected usage of tax_query, possible slow query.
WARNINGMaintainabilityNon-prefixed hook name2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "fb3d_post".
ERRORMaintainabilityfile system operations mkdir2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: mkdir().
ERRORMaintainabilityrand rand2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
rand() is discouraged. Use the far less predictable wp_rand() instead.
ERRORMaintainabilityNon Enqueued Script2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
Scripts must be registered/enqueued via wp_enqueue_script()
ERRORMaintainabilityMissing direct file access protection2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
WARNINGSecurityDatabase parameter is not escaped1
- Category
- Security
- Occurrences
- 1
- Severity
- warning
Sample message
Unescaped parameter $where used in $wpdb->get_results()
ERRORMaintainabilitydate date1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.
WARNINGMaintainabilityerror log var dump1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
var_dump() found. Debug code should not normally be used in production.
ERRORMaintainabilityunlink unlink1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
unlink() is discouraged. Use wp_delete_file() to delete a file.
WARNINGMaintainabilityDeprecated parameter: get_terms parameter 21
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
The parameter "array('hide_empty' => false)" at position #2 of get_terms() has been deprecated since WordPress version 4.5.0. Instead do not pass the parameter.
External Connections
Potential connections found in static code analysis.
Outbound calls
51
External assets
1
Incoming endpoints
25
Notable Domains
reactjs.org3 · outbound
apache.org2 · outbound
facebook.github.io2 · outbound
fb.me2 · outbound
fontawesome.io2 · outbound
youtube.com2 · outbound
Platform / Reference Domains
w3.org19 · platform/reference
External Asset Domains
3dflipbook.net11 · asset + outbound
Incoming Endpoints
wp_ajax_nopriv_fb3d_send_book_control_propspublic
wp_ajax
wp_ajax_nopriv_fb3d_send_media_imagepublic
wp_ajax
wp_ajax_nopriv_fb3d_send_postpublic
wp_ajax
wp_ajax_nopriv_fb3d_send_post_first_pagepublic
wp_ajax
wp_ajax_nopriv_fb3d_send_post_pagespublic
wp_ajax
wp_ajax_nopriv_fb3d_send_postspublic
wp_ajax
Admin AJAX endpoints15
wp_ajax_fb3d_receive_book_control_propsauthenticated
wp_ajax
wp_ajax_fb3d_receive_book_templateauthenticated
wp_ajax
wp_ajax_fb3d_receive_question_answerauthenticated
wp_ajax
wp_ajax_fb3d_send_book_control_propsauthenticated
wp_ajax
wp_ajax_fb3d_send_media_imageauthenticated
wp_ajax
wp_ajax_fb3d_send_postauthenticated
wp_ajax
wp_ajax_fb3d_send_post_first_pageauthenticated
wp_ajax
wp_ajax_fb3d_send_post_pagesauthenticated
wp_ajax
wp_ajax_fb3d_send_postsauthenticated
wp_ajax
wp_ajax_fb3d_send_posts_inauthenticated
wp_ajax
wp_ajax_fb3d_send_posts_in_first_pageauthenticated
wp_ajax
wp_ajax_fb3d_send_posts_in_pagesauthenticated
wp_ajax
3 more hidden
Score History
First score snapshot
v1.16.19
36
Latest
- Findings
- 492
- Errors
- 400
- Warnings
- 92
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 36 | 492 | 400 | 92 | v1.16.19 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Author
Category
Issue
Domain
Related
3D FlipBook – PDF Embedder, PDF Flipbook Viewer, Flipbook Image Gallery38 scorePDF Poster – let visitors read PDFs without leaving the page99 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder39 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreLiteSpeed Cache35 scoreWooCommerce22 scoreAkismet Anti-spam: Spam Protection35 scoreAdvanced Custom Fields (ACF®)23 scoreLimit Login Attempts Security – Login Security, 2FA, Firewall, Brute Force Prevention25 scoreManageWP Worker23 scoreBreadcrumb NavXT36 scoreThe Events Calendar23 scoreOMGF | GDPR/DSGVO Compliant, Faster Google Fonts. Easy.31 score
Author
Category
Issue
Domain
Related
3D FlipBook – PDF Embedder, PDF Flipbook Viewer, Flipbook Image Gallery38 scorePDF Poster – let visitors read PDFs without leaving the page99 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder39 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreLiteSpeed Cache35 scoreWooCommerce22 scoreAkismet Anti-spam: Spam Protection35 scoreAdvanced Custom Fields (ACF®)23 scoreLimit Login Attempts Security – Login Security, 2FA, Firewall, Brute Force Prevention25 scoreManageWP Worker23 scoreBreadcrumb NavXT36 scoreThe Events Calendar23 scoreOMGF | GDPR/DSGVO Compliant, Faster Google Fonts. Easy.31 score
Related Plugins
TNC FlipBook 3D – PDF Flipbook, 3D Flipbook, PDF Viewer, PDF Embedder
400 active installs
100
PDF Poster – let visitors read PDFs without leaving the page
20k+ active installs
99
Algori PDF Viewer
7k+ active installs
98
Yumpu E-Paper publishing
900 active installs
98
Simplebooklet PDF Viewer and Embedder
700 active installs
98
Free PDF to Flipbook
400 active installs
95