VK All in One Expansion Unit

This plug-in is an integrated plug-in with a variety of features that make it powerful your web site.

v9.117.3Hidekazu IshikawaUpdated Added 100k+ installs80% rating
23
Score
1,026
Errors
518
Warnings
+0
Change

Category Scores

Security0
Repo94
Performance88
Maintainability0

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

1,544 findings

Security

906

7 issue groups

Maintainability

552

13 issue groups

I18n

66

5 issue groups

ERRORSecurityOutput Not EscapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$alt'.508
Category
Security
Occurrences
508
Severity
error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$alt'.

ERRORSecurityUnsafe Printing FunctionAll output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.326
Category
Security
Occurrences
326
Severity
error

Sample message

All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.

WARNINGMaintainabilityNon Prefixed Function FoundFunctions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "admin_scripts_3pr_media".214
Category
Maintainability
Occurrences
214
Severity
warning

Sample message

Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "admin_scripts_3pr_media".

WARNINGMaintainabilityNon Prefixed Variable FoundGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$_enable_ids".109
Category
Maintainability
Occurrences
109
Severity
warning

Sample message

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$_enable_ids".

ERRORMaintainabilitymissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;108
Category
Maintainability
Occurrences
108
Severity
error

Sample message

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

WARNINGMaintainabilityNon Prefixed Hookname FoundHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "begin_fetch_post_thumbnail_html".56
Category
Maintainability
Occurrences
56
Severity
warning

Sample message

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "begin_fetch_post_thumbnail_html".

WARNINGMaintainabilityNon Prefixed Class FoundClasses declared by a theme/plugin should start with the theme/plugin prefix. Found: "ExUnit_Custom_Html".33
Category
Maintainability
Occurrences
33
Severity
warning

Sample message

Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "ExUnit_Custom_Html".

WARNINGSecurityMissing Unslash$_GET['post'] not unslashed before sanitization. Use wp_unslash() or similar23
Category
Security
Occurrences
23
Severity
warning

Sample message

$_GET['post'] not unslashed before sanitization. Use wp_unslash() or similar

ERRORI18nMissing Translators CommentA function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.23
Category
I18n
Occurrences
23
Severity
error

Sample message

A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.

WARNINGSecurityInput Not SanitizedDetected usage of a non-sanitized input variable: $_GET['post']21
Category
Security
Occurrences
21
Severity
warning

Sample message

Detected usage of a non-sanitized input variable: $_GET['post']

Show 15 more
ERRORI18nNon Singular String Literal Domain21
Category
I18n
Occurrences
21
Severity
error

Sample message

The $domain parameter must be a single text string literal. Found: $vk_call_to_action_textdomain

ERRORI18nMissing Arg Domain14
Category
I18n
Occurrences
14
Severity
error

Sample message

Missing $domain parameter in function call to __().

WARNINGSecurityMissing12
Category
Security
Occurrences
12
Severity
warning

Sample message

Processing form data without nonce verification.

WARNINGSecurityRecommended9
Category
Security
Occurrences
9
Severity
warning

Sample message

Processing form data without nonce verification.

WARNINGSecurityInput Not Validated7
Category
Security
Occurrences
7
Severity
warning

Sample message

Detected usage of a possibly undefined superglobal array index: $_POST[$meta_key]['title']. Check that the array index exists before using it.

ERRORMaintainabilitystrip tags strip tags7
Category
Maintainability
Occurrences
7
Severity
error

Sample message

strip_tags() is discouraged. Use the more comprehensive wp_strip_all_tags() instead.

WARNINGMaintainabilitywp reset query wp reset query6
Category
Maintainability
Occurrences
6
Severity
warning

Sample message

wp_reset_query() is discouraged. Use wp_reset_postdata() instead.

ERRORI18nNon Singular String Literal Text5
Category
I18n
Occurrences
5
Severity
error

Sample message

The $text parameter must be a single text string literal. Found: $label

WARNINGMaintainabilityNon Prefixed Constant Found4
Category
Maintainability
Occurrences
4
Severity
warning

Sample message

Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "VEU_DIRECTORY_PATH".

WARNINGMaintainabilityDirect Query3
Category
Maintainability
Occurrences
3
Severity
warning

Sample message

Use of a direct database call is discouraged.

WARNINGMaintainabilityNo Caching3
Category
Maintainability
Occurrences
3
Severity
warning

Sample message

Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().

WARNINGMaintainabilityslow db query meta key3
Category
Maintainability
Occurrences
3
Severity
warning

Sample message

Detected usage of meta_key, possible slow query.

WARNINGMaintainabilityslow db query tax query3
Category
Maintainability
Occurrences
3
Severity
warning

Sample message

Detected usage of tax_query, possible slow query.

ERRORMaintainabilityNo Explicit Version3
Category
Maintainability
Occurrences
3
Severity
error

Sample message

Version parameter is not explicitly set or has been set to an equivalent of "false" for wp_register_script; This means that the WordPress core version will be used which is not recommended for plugin or theme development.

ERRORI18nText Domain Mismatch3
Category
I18n
Occurrences
3
Severity
error

Sample message

Mismatched text domain. Expected 'vk-all-in-one-expansion-unit' but got 'biz-vektor'.

Score History

First score snapshot

v9.117.3

23

Latest

Findings
1,544
Errors
1,026
Warnings
518
Check
2.0.0

Related Plugins