Display cool, animated fly-out or fade box with related content.
Prioritized issue groups from the latest Plugin Check scan
Maintainability
31
7 issue groups
Security
23
6 issue groups
Performance
2
1 issue group
I18n
1
1 issue group
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "$filter_name . '_content'".
Sample message
All output should be run through an escaping function (like echo esc_html_x() or echo esc_attr_x()), found '_ex'.
Sample message
Processing form data without nonce verification.
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$base".
Sample message
strip_tags() is discouraged. Use the more comprehensive wp_strip_all_tags() instead.
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$content'.
Sample message
Detected usage of a non-sanitized input variable: $_GET['p']
Sample message
$_GET['p'] not unslashed before sanitization. Use wp_unslash() or similar
Sample message
In footer ($in_footer) is not set explicitly wp_register_script; It is recommended to load scripts in the footer. Please set this value to `true` to load it in the footer, or explicitly `false` if it should be loaded in the header.
Sample message
Using exclusionary parameters, like post__not_in, in calls to get_posts() should be done with caution, see https://wpvip.com/documentation/performance-improvements-by-removing-usage-of-post__not_in/ for more information.
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
Sample message
Detected usage of a possibly undefined superglobal array index: $_REQUEST[$nonce_value]. Check that the array index exists before using it.
Sample message
mt_rand() is discouraged. Use the far less predictable wp_rand() instead.
Sample message
rand() is discouraged. Use the far less predictable wp_rand() instead.
Sample message
Mismatched text domain. Expected 'upprev' but got 'yarpp'.
Potential connections found in static code analysis.
Outbound calls
264
External assets
0
Incoming endpoints
3
No external asset domains detected.
wp_ajax
wp_ajax
wp_ajax
2 score snapshots
v4.1.3
46
Latest
v4.1.2
39
Score
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 46 | 57 | 22 | 35 | v4.1.3 | 2.0.0 |
| 39 | 71 | 35 | 36 | v4.1.2 | 2.0.0 |
Author, categories, issues, domains, and nearby plugins.