User Role Editor WordPress plugin makes user roles and capabilities changing easy. Edit/add/delete WordPress user roles and capabilities.
Category Scores
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Security
243
10 issue groups
Maintainability
19
4 issue groups
ERRORSecurityOutput Not EscapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$button_number'.100
- Category
- Security
- Occurrences
- 100
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$button_number'.
WARNINGSecurityMissingProcessing form data without nonce verification.46
- Category
- Security
- Occurrences
- 46
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGSecurityRecommendedProcessing form data without nonce verification.28
- Category
- Security
- Occurrences
- 28
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGSecurityMissing Unslash$_GET[$var_name] not unslashed before sanitization. Use wp_unslash() or similar27
- Category
- Security
- Occurrences
- 27
- Severity
- warning
Sample message
$_GET[$var_name] not unslashed before sanitization. Use wp_unslash() or similar
WARNINGSecurityInput Not SanitizedDetected usage of a non-sanitized input variable: $_GET[$var_name]22
- Category
- Security
- Occurrences
- 22
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_GET[$var_name]
WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.8
- Category
- Maintainability
- Occurrences
- 8
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().8
- Category
- Maintainability
- Occurrences
- 8
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
ERRORSecurityNot PreparedUse placeholders and $wpdb->prepare(); found $query8
- Category
- Security
- Occurrences
- 8
- Severity
- error
Sample message
Use placeholders and $wpdb->prepare(); found $query
ERRORSecurityUnescaped DBParameterUnescaped parameter $query used in $wpdb->get_col()\n$query assigned unsafely at line 148.4
- Category
- Security
- Occurrences
- 4
- Severity
- error
Sample message
Unescaped parameter $query used in $wpdb->get_col()\n$query assigned unsafely at line 148.
ERRORSecurityQuoted Simple PlaceholderSimple placeholders should not be quoted in the query string in $wpdb->prepare(). Found: '%s'.3
- Category
- Security
- Occurrences
- 3
- Severity
- error
Sample message
Simple placeholders should not be quoted in the query string in $wpdb->prepare(). Found: '%s'.
Show 4 moreShow less
WARNINGSecurityInput Not Validated3
- Category
- Security
- Occurrences
- 3
- Severity
- warning
Sample message
Detected usage of a possibly undefined superglobal array index: $_POST['_wpnonce']. Check that the array index exists before using it.
ERRORSecurityUnsupported Identifier Placeholder2
- Category
- Security
- Occurrences
- 2
- Severity
- error
Sample message
The %i modifier is only supported in WP 6.2 or higher. Found: "%i".
WARNINGMaintainabilityerror log error log2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
error_log() found. Debug code should not normally be used in production.
WARNINGMaintainabilityupgrade notice limit1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
The upgrade notice for "[4.65] 21.05.2026" exceeds the limit of 300 characters.
Score History
First score snapshot
v4.65
43
Latest
- Findings
- 262
- Errors
- 117
- Warnings
- 145
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 43 | 262 | 117 | 145 | v4.65 | 2.0.0 |
Related Plugins
10k+ active installs
6k+ active installs
2k+ active installs
3k+ active installs
3k+ active installs
2k+ active installs