Visual Portfolio, Photo Gallery & Post Grid

Powerful WordPress gallery plugin for stunning photo, video & album galleries with advanced layouts and flexible block editing.

v3.6.2nKUpdated Added 60k+ installs96% rating
39
Score
34
Errors
189
Warnings
+0
Change

Category Scores

Security0
Repo100
Performance96
Maintainability71

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

223 findings

Maintainability

151

9 issue groups

Security

65

4 issue groups

I18n

4

2 issue groups

Performance

3

1 issue group

WARNINGMaintainabilityNon-prefixed hook nameHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "'wsa_form_bottom_' . $form['id']".142
Category
Maintainability
Occurrences
142
Severity
warning

Sample message

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "'wsa_form_bottom_' . $form['id']".

WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.26
Category
Security
Occurrences
26
Severity
warning

Sample message

Processing form data without nonce verification.

ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"<tr{$class}{$condition}{$style}>"'.25
Category
Security
Occurrences
25
Severity
error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"<tr{$class}{$condition}{$style}>"'.

WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_GET[&#039;post&#039;]7
Category
Security
Occurrences
7
Severity
warning

Sample message

Detected usage of a non-sanitized input variable: $_GET[&#039;post&#039;]

WARNINGSecurityRequest data is not unslashed$_GET[&#039;post&#039;] not unslashed before sanitization. Use wp_unslash() or similar7
Category
Security
Occurrences
7
Severity
warning

Sample message

$_GET[&#039;post&#039;] not unslashed before sanitization. Use wp_unslash() or similar

ERRORI18nMissing Arg DomainMissing $domain parameter in function call to __().3
Category
I18n
Occurrences
3
Severity
error

Sample message

Missing $domain parameter in function call to __().

WARNINGPerformancePost Not In post not inUsing exclusionary parameters, like post__not_in, in calls to get_posts() should be done with caution, see https://wpvip.com/documentation/performance-improvements-by-removing-usage-of-post__not_in/ for more information.3
Category
Performance
Occurrences
3
Severity
warning

Sample message

Using exclusionary parameters, like post__not_in, in calls to get_posts() should be done with caution, see https://wpvip.com/documentation/performance-improvements-by-removing-usage-of-post__not_in/ for more information.

ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;2
Category
Maintainability
Occurrences
2
Severity
error

Sample message

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

WARNINGI18nDiscouraged text-domain loadingload_plugin_textdomain() has been discouraged since WordPress version 4.6. When your plugin is hosted on WordPress.org, you no longer need to manually include this function call for translations under your plugin slug. WordPress will automatically load the translations for you as needed.1
Category
I18n
Occurrences
1
Severity
warning

Sample message

load_plugin_textdomain() has been discouraged since WordPress version 4.6. When your plugin is hosted on WordPress.org, you no longer need to manually include this function call for translations under your plugin slug. WordPress will automatically load the translations for you as needed.

WARNINGMaintainabilityslow db query meta keyDetected usage of meta_key, possible slow query.1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

Detected usage of meta_key, possible slow query.

Show 6 more
ERRORMaintainabilityfile system operations mkdir1
Category
Maintainability
Occurrences
1
Severity
error

Sample message

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: mkdir().

ERRORMaintainabilityparse url parse url1
Category
Maintainability
Occurrences
1
Severity
error

Sample message

parse_url() is discouraged because of inconsistency in the output across PHP versions; use wp_parse_url() instead.

ERRORMaintainabilityDeprecated parameter: get_terms parameter 21
Category
Maintainability
Occurrences
1
Severity
error

Sample message

The parameter "array(\n\t\t\t\t\t\t\t\t'hide_empty' => false,\n\t\t\t\t\t\t\t)" at position #2 of get_terms() has been deprecated since WordPress version 4.5.0. Instead do not pass the parameter.

ERRORMaintainabilityfive star reviews detected1
Category
Maintainability
Occurrences
1
Severity
error

Sample message

Linking directly to 5 stars reviews is not allowed.

WARNINGMaintainabilitymismatched plugin name1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

Plugin name "Visual Portfolio, Photo Gallery & Post Grid" is different from the name declared in plugin header "Visual Portfolio, Posts & Image Gallery".

WARNINGMaintainabilityunexpected markdown file1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

Unexpected markdown file "AGENTS.md" detected in plugin root. Only specific markdown files are expected in production plugins.

Score History

First score snapshot

v3.6.2

39

Latest

Findings
223
Errors
34
Warnings
189
Check
2.0.0

Related Plugins

Album Gallery for Flickr

4k+ active installs

100
100
100
Filter Gallery

3k+ active installs

98