PluginScore

UTM Event Tracker and Analytics, UTM Grabber

Easily capture UTM parameters, track button and link clicks, and analyze campaigns to improve your marketing ROI in WordPress.

v1.2.0CodiepressUpdated Added 900 installs100% rating100% support resolved
UTMutm analyticsutm grabberutm parametersutm tracking
76
Score
2
Errors
19
Warnings
+0
Change

Category Scores

Security59
Repo100
Performance100
Maintainability92

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

21 findings

Security

12

4 issue groups

Maintainability

9

5 issue groups

WARNINGSecurityInterpolated SQL is not preparedUse placeholders and $wpdb->prepare(); found interpolated variable $event_table at \t\t\tLEFT JOIN ($event_table) as events ON sessions.id = events.session_id\r\n9
Category
Security
Occurrences
9
Severity
warning

Sample message

Use placeholders and $wpdb->prepare(); found interpolated variable $event_table at \t\t\tLEFT JOIN ($event_table) as events ON sessions.id = events.session_id\r\n

WordPress.DB.PreparedSQL.InterpolatedNotPrepared
WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.3
Category
Maintainability
Occurrences
3
Severity
warning

Sample message

Use of a direct database call is discouraged.

WordPress.DB.DirectDatabaseQuery.DirectQuery
WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().3
Category
Maintainability
Occurrences
3
Severity
warning

Sample message

Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().

WordPress.DB.DirectDatabaseQuery.NoCaching
WARNINGSecurityDatabase parameter is not escapedUnescaped parameter $concated_sql used in $wpdb->get_col()\n$concated_sql assigned unsafely at line 170.1
Category
Security
Occurrences
1
Severity
warning

Sample message

Unescaped parameter $concated_sql used in $wpdb->get_col()\n$concated_sql assigned unsafely at line 170.

PluginCheck.Security.DirectDB.UnescapedDBParameter
ERRORSecuritySQL query is not preparedUse placeholders and $wpdb->prepare(); found $prepared_sql1
Category
Security
Occurrences
1
Severity
error

Sample message

Use placeholders and $wpdb->prepare(); found $prepared_sql

WordPress.DB.PreparedSQL.NotPrepared
WARNINGSecurityReplacements Wrong NumberIncorrect number of replacements passed to $wpdb->prepare(). Found 3 replacement parameters, expected 2.1
Category
Security
Occurrences
1
Severity
warning

Sample message

Incorrect number of replacements passed to $wpdb->prepare(). Found 3 replacement parameters, expected 2.

WordPress.DB.PreparedSQLPlaceholders.ReplacementsWrongNumber
WARNINGMaintainabilityMissing VersionResource version not set in call to wp_register_style(). This means new versions of the style may not always be loaded due to browser caching.1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

Resource version not set in call to wp_register_style(). This means new versions of the style may not always be loaded due to browser caching.

WordPress.WP.EnqueuedResourceParameters.MissingVersion
WARNINGMaintainabilitymismatched plugin namePlugin name "UTM Event Tracker and Analytics, UTM Grabber" is different from the name declared in plugin header "UTM Event Tracker and Analytics".1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

Plugin name "UTM Event Tracker and Analytics, UTM Grabber" is different from the name declared in plugin header "UTM Event Tracker and Analytics".

mismatched_plugin_nameReference
ERRORMaintainabilitywp function not compatible with requires wpFunction "array_find()" requires WordPress 6.8.0, but your plugin minimum supported version is WordPress 6.2.0.1
Category
Maintainability
Occurrences
1
Severity
error

Sample message

Function "array_find()" requires WordPress 6.8.0, but your plugin minimum supported version is WordPress 6.2.0.

wp_function_not_compatible_with_requires_wpReference

External Connections

Potential connections found in static code analysis.

14 domains

Outbound calls

33

External assets

0

Incoming endpoints

14

Notable Domains

codiepress.com7 · outbound
support.google.com3 · outbound
cli.vuejs.org2 · outbound
google-analytics.com2 · outbound
iconly.io2 · outbound
ipinfo.io2 · outbound

Platform / Reference Domains

w3.org6 · platform/reference
github.com2 · platform/reference
wordpress.org2 · platform/reference
gnu.org1 · platform/reference
ps.w.org1 · platform/reference

External Asset Domains

No external asset domains detected.

Incoming Endpoints

wp_ajax_nopriv_utm_event_tracker/capture_custom_eventpublic

wp_ajax

Admin AJAX endpoints13
wp_ajax_utm_event_tracker/capture_custom_eventauthenticated

wp_ajax

wp_ajax_utm_event_tracker/clear_current_sessionauthenticated

wp_ajax

wp_ajax_utm_event_tracker/dismiss_cache_noticeauthenticated

wp_ajax

wp_ajax_utm_event_tracker/get_date_reportauthenticated

wp_ajax

wp_ajax_utm_event_tracker/get_event_date_overview_dataauthenticated

wp_ajax

wp_ajax_utm_event_tracker/get_event_overview_queryauthenticated

wp_ajax

wp_ajax_utm_event_tracker/get_events_listauthenticated

wp_ajax

wp_ajax_utm_event_tracker/get_events_statsauthenticated

wp_ajax

wp_ajax_utm_event_tracker/get_keywords_reportauthenticated

wp_ajax

wp_ajax_utm_event_tracker/get_keywords_statsauthenticated

wp_ajax

wp_ajax_utm_event_tracker/get_sessionsauthenticated

wp_ajax

wp_ajax_utm_event_tracker/handle_preview_modeauthenticated

wp_ajax

1 more hidden

Score History

First score snapshot

v1.2.0

76

Latest

Findings
21
Errors
2
Warnings
19
Check
2.0.0

Relationship Map

Author, categories, issues, domains, and nearby plugins.

37 nodes

Related Plugins

Easy UTM Tracking with Contact Form 7

2k+ active installs

85
UTMs Carry Pages

400 active installs

84
UTM Leads Tracker – XLPlugins

400 active installs

40
HandL UTM Grabber / Tracker

10k+ active installs

37
UTM for Woocommerce

900 active installs

35