Vayu Blocks - Page Builder For Gutenberg blocks, Block editor & FSE Templates
25
Score
174
Errors
233
Warnings
+0
Change
Category Scores
Security0
Repo94
Performance97
Maintainability5
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Security
160
7 issue groups
Maintainability
126
15 issue groups
I18n
97
3 issue groups
ERRORI18nText Domain MismatchMismatched text domain. Expected 'vayu-blocks' but got 'example-block-interactive'.63
- Category
- I18n
- Occurrences
- 63
- Severity
- error
Sample message
Mismatched text domain. Expected 'vayu-blocks' but got 'example-block-interactive'.
WARNINGSecurityRequest data is not unslashed$_GET['template'] not unslashed before sanitization. Use wp_unslash() or similar45
- Category
- Security
- Occurrences
- 45
- Severity
- warning
Sample message
$_GET['template'] not unslashed before sanitization. Use wp_unslash() or similar
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_POST['attrs']44
- Category
- Security
- Occurrences
- 44
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_POST['attrs']
WARNINGMaintainabilityNon-prefixed hook nameHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "'activate_' . $plugin".42
- Category
- Maintainability
- Occurrences
- 42
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "'activate_' . $plugin".
ERRORI18nMissing Translators CommentA function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.31
- Category
- I18n
- Occurrences
- 31
- Severity
- error
Sample message
A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$class'.25
- Category
- Security
- Occurrences
- 25
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$class'.
WARNINGSecurityInput is not validatedDetected usage of a possibly undefined superglobal array index: $_REQUEST['xml_url']. Check that the array index exists before using it.21
- Category
- Security
- Occurrences
- 21
- Severity
- warning
Sample message
Detected usage of a possibly undefined superglobal array index: $_REQUEST['xml_url']. Check that the array index exists before using it.
ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;16
- Category
- Maintainability
- Occurrences
- 16
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.14
- Category
- Security
- Occurrences
- 14
- Severity
- warning
Sample message
Processing form data without nonce verification.
ERRORMaintainabilityunlink unlinkunlink() is discouraged. Use wp_delete_file() to delete a file.10
- Category
- Maintainability
- Occurrences
- 10
- Severity
- error
Sample message
unlink() is discouraged. Use wp_delete_file() to delete a file.
Show 15 moreShow less
ERRORMaintainabilitydate date8
- Category
- Maintainability
- Occurrences
- 8
- Severity
- error
Sample message
date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.
WARNINGSecurityMissing nonce verification8
- Category
- Security
- Occurrences
- 8
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGMaintainabilityMissing Version8
- Category
- Maintainability
- Occurrences
- 8
- Severity
- warning
Sample message
Resource version not set in call to wp_enqueue_style(). This means new versions of the style may not always be loaded due to browser caching.
WARNINGMaintainabilityslow db query meta key6
- Category
- Maintainability
- Occurrences
- 6
- Severity
- warning
Sample message
Detected usage of meta_key, possible slow query.
WARNINGMaintainabilityNon-prefixed function6
- Category
- Maintainability
- Occurrences
- 6
- Severity
- warning
Sample message
Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "add_unit_if_needed".
WARNINGMaintainabilityDirect Query5
- Category
- Maintainability
- Occurrences
- 5
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGMaintainabilityNo Caching5
- Category
- Maintainability
- Occurrences
- 5
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
WARNINGMaintainabilityNon-prefixed class4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- warning
Sample message
Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "WP_Importer_Logger".
WARNINGMaintainabilityNon-prefixed global variable4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$obj".
WARNINGMaintainabilityDiscouraged PHP function3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
The use of function ini_set() is discouraged
ERRORSecuritySQL query is not prepared3
- Category
- Security
- Occurrences
- 3
- Severity
- error
Sample message
Use placeholders and $wpdb->prepare(); found $query
WARNINGMaintainabilityslow db query meta query3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
Detected usage of meta_query, possible slow query.
WARNINGMaintainabilityslow db query tax query3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
Detected usage of tax_query, possible slow query.
WARNINGMaintainabilityprevent path disclosure error reporting3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
error_reporting() can lead to full path disclosure.
ERRORI18nMissing Arg Domain3
- Category
- I18n
- Occurrences
- 3
- Severity
- error
Sample message
Missing $domain parameter in function call to __().
External Connections
Potential connections found in static code analysis.
Outbound calls
289
External assets
1
Incoming endpoints
10
Notable Domains
themehunk.com3 · outbound
animate.style1 · outbound
firstdonoharm.dev1 · outbound
googleapis.com1 · outbound
Platform / Reference Domains
w3.org283 · platform/reference
External Asset Domains
fonts.googleapis.com1 · asset
Incoming Endpoints
/wp-json/vayu-blocks/v1/deactivate-feedbackREST
register_rest_route
/wp-json/vayu-blocks/v1/google-fontsREST
register_rest_route
/wp-json/vayu-blocks/v1/manifestREST
register_rest_route
/wp-json/vayu-blocks/v1/upload-mediaREST
register_rest_route
wp_ajax_nopriv_load_category_productspublic
wp_ajax
wp_ajax_nopriv_load_more_postspublic
wp_ajax
Admin AJAX endpoints4
wp_ajax_load_category_productsauthenticated
wp_ajax
wp_ajax_load_more_postsauthenticated
wp_ajax
wp_ajax_vayu_blocks_option_panelauthenticated
wp_ajax
wp_ajax_vayu_blocks_save_input_valuesauthenticated
wp_ajax
Score History
First score snapshot
v1.4.8
25
Latest
- Findings
- 407
- Errors
- 174
- Warnings
- 233
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 25 | 407 | 174 | 233 | v1.4.8 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Author
Category
Issue
Related
Yoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreClassic Editor63 scoreWooCommerce21 scoreAll-in-One WP Migration and Backup34 scoreJetpack – WP Security, Backup, Speed, & Growth22 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreAdvanced Custom Fields (ACF®)23 scoreSpectra Legacy – Gutenberg Blocks25 scoreBreadcrumb NavXT36 scoreKadence Blocks — Page Builder Toolkit for Gutenberg Editor23 scorePage Builder: Pagelayer – Drag and Drop website builder24 scoreJeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress23 score
Author
Category
Issue
Related
Yoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreClassic Editor63 scoreWooCommerce21 scoreAll-in-One WP Migration and Backup34 scoreJetpack – WP Security, Backup, Speed, & Growth22 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreAdvanced Custom Fields (ACF®)23 scoreSpectra Legacy – Gutenberg Blocks25 scoreBreadcrumb NavXT36 scoreKadence Blocks — Page Builder Toolkit for Gutenberg Editor23 scorePage Builder: Pagelayer – Drag and Drop website builder24 scoreJeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress23 score
Related Plugins
Crowdsignal Forms
200k+ active installs
100
100
Advance Custom HTML – Show Off Code Snippets with Live Preview
10k+ active installs
100
Shortcode Redirect
10k+ active installs
100
Carousel Block – Showcase Images in Elegant Sliding Displays
7k+ active installs
100
Hyperlink Group Block
7k+ active installs
100