Search Engine (SEO) & Performance Optimization (WPO) via caching. Integrated caching: CDN, Page, Minify, Object, Fragment, Database support.
23
Score
307
Errors
678
Warnings
+0
Change
Category Scores
Security0
Repo86
Performance100
Maintainability0
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Maintainability
809
20 issue groups
Security
146
5 issue groups
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$data".510
- Category
- Maintainability
- Occurrences
- 510
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$data".
ERRORSecurityException output is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"($name) missing required param: '$paramName'"'.102
- Category
- Security
- Occurrences
- 102
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"($name) missing required param: '$paramName'"'.
ERRORMaintainabilitycurl curl setoptUsing cURL functions is highly discouraged. Use wp_remote_get() instead.85
- Category
- Maintainability
- Occurrences
- 85
- Severity
- error
Sample message
Using cURL functions is highly discouraged. Use wp_remote_get() instead.
WARNINGMaintainabilityNon-prefixed constantGlobal constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "AT_END".80
- Category
- Maintainability
- Occurrences
- 80
- Severity
- warning
Sample message
Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "AT_END".
WARNINGMaintainabilityNon-prefixed classClasses declared by a theme/plugin should start with the theme/plugin prefix. Found: "AmazonSNS".28
- Category
- Maintainability
- Occurrences
- 28
- Severity
- warning
Sample message
Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "AmazonSNS".
WARNINGSecurityDatabase parameter is not escapedUnescaped parameter $comp used in $wpdb->get_results()\n$comp assigned unsafely at line 199.22
- Category
- Security
- Occurrences
- 22
- Severity
- warning
Sample message
Unescaped parameter $comp used in $wpdb->get_results()\n$comp assigned unsafely at line 199.
ERRORMaintainabilityrand mt randmt_rand() is discouraged. Use the far less predictable wp_rand() instead.15
- Category
- Maintainability
- Occurrences
- 15
- Severity
- error
Sample message
mt_rand() is discouraged. Use the far less predictable wp_rand() instead.
WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.14
- Category
- Security
- Occurrences
- 14
- Severity
- warning
Sample message
Processing form data without nonce verification.
ERRORMaintainabilityfile system operations fwriteFile operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fwrite().11
- Category
- Maintainability
- Occurrences
- 11
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fwrite().
ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;11
- Category
- Maintainability
- Occurrences
- 11
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
Show 15 moreShow less
ERRORMaintainabilityfile system operations fopen9
- Category
- Maintainability
- Occurrences
- 9
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fopen().
ERRORMaintainabilityparse url parse url9
- Category
- Maintainability
- Occurrences
- 9
- Severity
- error
Sample message
parse_url() is discouraged because of inconsistency in the output across PHP versions; use wp_parse_url() instead.
ERRORMaintainabilityfile system operations fclose7
- Category
- Maintainability
- Occurrences
- 7
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fclose().
ERRORMaintainabilityunlink unlink7
- Category
- Maintainability
- Occurrences
- 7
- Severity
- error
Sample message
unlink() is discouraged. Use wp_delete_file() to delete a file.
ERRORMaintainabilitycurl curl getinfo6
- Category
- Maintainability
- Occurrences
- 6
- Severity
- error
Sample message
Using cURL functions is highly discouraged. Use wp_remote_get() instead.
WARNINGSecurityInput is not sanitized5
- Category
- Security
- Occurrences
- 5
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_ENV['TEMP']
WARNINGMaintainabilityDiscouraged PHP function4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- warning
Sample message
The use of function ini_set() is discouraged
WARNINGMaintainabilityerror log trigger error4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- warning
Sample message
trigger_error() found. Debug code should not normally be used in production.
ERRORMaintainabilitycurl curl close4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- error
Sample message
Using cURL functions is highly discouraged. Use wp_remote_get() instead.
ERRORMaintainabilitycurl curl error4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- error
Sample message
Using cURL functions is highly discouraged. Use wp_remote_get() instead.
ERRORMaintainabilitycurl curl exec4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- error
Sample message
Using cURL functions is highly discouraged. Use wp_remote_get() instead.
ERRORMaintainabilitycurl curl init4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- error
Sample message
Using cURL functions is highly discouraged. Use wp_remote_get() instead.
ERRORMaintainabilityfile system operations is writable4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: is_writable().
ERRORMaintainabilitydate date3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- error
Sample message
date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.
ERRORSecurityOutput is not escaped3
- Category
- Security
- Occurrences
- 3
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$content['content']'.
External Connections
Potential connections found in static code analysis.
Outbound calls
284
External assets
2
Incoming endpoints
14
Notable Domains
boldgrid.com85 · outbound
api.w3-edge.com17 · outbound
api.bunny.net11 · outbound
cloudflare.com10 · outbound
docs.bunny.net6 · outbound
docs.amazonwebservices.com5 · outbound
Platform / Reference Domains
developer.wordpress.org26 · platform/reference
github.com8 · platform/reference
core.trac.wordpress.org5 · platform/reference
wordpress.org4 · platform/reference
w3.org3 · platform/reference
make.wordpress.org2 · platform/reference
api.wordpress.org1 · platform/reference
codex.wordpress.org1 · platform/reference
s.w.org1 · platform/reference
External Asset Domains
w3-edge.com23 · asset + outbound
googletagmanager.com2 · asset + outbound
Incoming Endpoints
No public endpoints detected.
Admin AJAX endpoints14
wp_ajax_ustats_access_log_testauthenticated
wp_ajax
wp_ajax_w3tc_ajaxauthenticated
wp_ajax
wp_ajax_w3tc_dismiss_license_noticeauthenticated
wp_ajax
wp_ajax_w3tc_forums_apiauthenticated
wp_ajax
wp_ajax_w3tc_imageservice_allauthenticated
wp_ajax
wp_ajax_w3tc_imageservice_countsauthenticated
wp_ajax
wp_ajax_w3tc_imageservice_postmetaauthenticated
wp_ajax
wp_ajax_w3tc_imageservice_revertauthenticated
wp_ajax
wp_ajax_w3tc_imageservice_revertallauthenticated
wp_ajax
wp_ajax_w3tc_imageservice_submitauthenticated
wp_ajax
wp_ajax_w3tc_imageservice_usageauthenticated
wp_ajax
wp_ajax_w3tc_recheck_licenseauthenticated
wp_ajax
2 more hidden
Score History
6 score snapshots
v2.10.4
23
Latest
- Findings
- 985
- Errors
- 307
- Warnings
- 678
- Check
- 2.0.0
v2.10.3
23
Score
- Findings
- 985
- Errors
- 307
- Warnings
- 678
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 23 | 985 | 307 | 678 | v2.10.4 | 2.0.0 |
| 23 | 985 | 307 | 678 | v2.10.3 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Plugin
Author
Issue
Domain
Related
LiteSpeed Cache35 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce21 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder39 scoreAkismet Anti-spam: Spam Protection35 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreWP Mail SMTP by WPForms – The Most Popular SMTP and Email Log Plugin30 scoreJetpack – WP Security, Backup, Speed, & Growth22 scoreSpeed Optimizer – The All-In-One Performance-Boosting Plugin36 scoreWP Fastest Cache – WordPress Cache Plugin24 scoreWP Super Cache25 scoreWP-Optimize – Cache, Compress images, Minify & Clean database to boost page speed & performance56 score
Plugin
Author
Issue
Domain
Related
LiteSpeed Cache35 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce21 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder39 scoreAkismet Anti-spam: Spam Protection35 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreWP Mail SMTP by WPForms – The Most Popular SMTP and Email Log Plugin30 scoreJetpack – WP Security, Backup, Speed, & Growth22 scoreSpeed Optimizer – The All-In-One Performance-Boosting Plugin36 scoreWP Fastest Cache – WordPress Cache Plugin24 scoreWP Super Cache25 scoreWP-Optimize – Cache, Compress images, Minify & Clean database to boost page speed & performance56 score
Related Plugins
Core Web Vitals & PageSpeed Booster
1k+ active installs
100
WEDOS | Protection & Cache Performance
500 active installs
100
Cache Using Gzip
400 active installs
100
Offload, AI & Optimize with Cloudflare Images
1k+ active installs
99
Instant Back/Forward
10k+ active installs
98
App for Cloudflare®
1k+ active installs
98