Set a custom profile image for a user using the standard WordPress media upload tool.
Category Scores
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Security
9
6 issue groups
Maintainability
3
3 issue groups
Repo Compliance
3
3 issue groups
I18n
2
2 issue groups
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$Profile'.2
- Category
- Security
- Occurrences
- 2
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$Profile'.
WARNINGSecurityMissing nonce verificationProcessing form data without nonce verification.2
- Category
- Security
- Occurrences
- 2
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.2
- Category
- Security
- Occurrences
- 2
- Severity
- warning
Sample message
Processing form data without nonce verification.
ERRORSecurityUnsafe printing functionAll output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.1
- Category
- Security
- Occurrences
- 1
- Severity
- error
Sample message
All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_POST['dew_image_id']1
- Category
- Security
- Occurrences
- 1
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_POST['dew_image_id']
WARNINGSecurityRequest data is not unslashed$_POST['dew_image_id'] not unslashed before sanitization. Use wp_unslash() or similar1
- Category
- Security
- Occurrences
- 1
- Severity
- warning
Sample message
$_POST['dew_image_id'] not unslashed before sanitization. Use wp_unslash() or similar
ERRORMaintainabilityNo Explicit VersionVersion parameter is not explicitly set or has been set to an equivalent of "false" for wp_enqueue_script; This means that the WordPress core version will be used which is not recommended for plugin or theme development.1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
Version parameter is not explicitly set or has been set to an equivalent of "false" for wp_enqueue_script; This means that the WordPress core version will be used which is not recommended for plugin or theme development.
ERRORI18nText Domain MismatchMismatched text domain. Expected 'users-profile-picture' but got 'dew'.1
- Category
- I18n
- Occurrences
- 1
- Severity
- error
Sample message
Mismatched text domain. Expected 'users-profile-picture' but got 'dew'.
ERRORRepo Complianceinvalid licenseYour plugin has an invalid license declared. Please update your readme with a valid SPDX license identifier.1
- Category
- Repo Compliance
- Occurrences
- 1
- Severity
- error
Sample message
Your plugin has an invalid license declared. Please update your readme with a valid SPDX license identifier.
ERRORMaintainabilityinvalid tested upto minorTested up to: 7.0.0 The version number should only include major versions 7.0.1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
Tested up to: 7.0.0 The version number should only include major versions 7.0.
Show 4 moreShow less
ERRORMaintainabilityMissing direct file access protection1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
WARNINGRepo Complianceplugin header nonexistent domain path1
- Category
- Repo Compliance
- Occurrences
- 1
- Severity
- warning
Sample message
The "Domain Path" header in the plugin file must point to an existing folder. Found: "languages"
ERRORRepo Compliancereadme mismatched header requires1
- Category
- Repo Compliance
- Occurrences
- 1
- Severity
- error
Sample message
Mismatched Requires at least: 4.5.0 != 4.5. "Requires at least" needs to be exactly the same with that in your main plugin file's header.
WARNINGI18ntextdomain mismatch1
- Category
- I18n
- Occurrences
- 1
- Severity
- warning
Sample message
The "Text Domain" header in the plugin file does not match the slug. Found "dew-profile-picture", expected "users-profile-picture".
External Connections
Not analyzed yet.
Score History
First score snapshot
v1.0.6
66
Latest
- Findings
- 17
- Errors
- 9
- Warnings
- 8
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 66 | 17 | 9 | 8 | v1.0.6 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Relationship links
Author
Issue
Related
Author
Issue
Related
Related Plugins
1k+ active installs
1k+ active installs
700 active installs
5k+ active installs
800 active installs
600 active installs