Get email alerts for file and permission changes on your WordPress sites. No false positives!
80
Score
16
Errors
92
Warnings
+0
Change
Category Scores
Security76
Repo94
Performance100
Maintainability69
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Maintainability
97
8 issue groups
Security
6
3 issue groups
I18n
4
1 issue group
Repo Compliance
1
1 issue group
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$data".36
- Category
- Maintainability
- Occurrences
- 36
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$data".
WARNINGMaintainabilityNon-prefixed namespaceNamespaces declared by a theme/plugin should start with the theme/plugin prefix. Found: "MFM".21
- Category
- Maintainability
- Occurrences
- 21
- Severity
- warning
Sample message
Namespaces declared by a theme/plugin should start with the theme/plugin prefix. Found: "MFM".
WARNINGMaintainabilityDynamic hook nameHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "$this->identifier . '_wp_die'".14
- Category
- Maintainability
- Occurrences
- 14
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "$this->identifier . '_wp_die'".
WARNINGMaintainabilityNon-prefixed constantGlobal constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "MFM_BASE_NAME".12
- Category
- Maintainability
- Occurrences
- 12
- Severity
- warning
Sample message
Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "MFM_BASE_NAME".
ERRORMaintainabilitywp function not compatible with requires wpFunction "str_contains()" requires WordPress 5.9.0, but your plugin minimum supported version is WordPress 5.0.0.11
- Category
- Maintainability
- Occurrences
- 11
- Severity
- error
Sample message
Function "str_contains()" requires WordPress 5.9.0, but your plugin minimum supported version is WordPress 5.0.0.
WARNINGSecurityDatabase parameter is not escapedUnescaped parameter $data used in $wpdb->query()\n$data assigned unsafely at line 1537.4
- Category
- Security
- Occurrences
- 4
- Severity
- warning
Sample message
Unescaped parameter $data used in $wpdb->query()\n$data assigned unsafely at line 1537.
ERRORI18nText Domain MismatchMismatched text domain. Expected 'website-file-changes-monitor' but got 'melapress-login-security'.4
- Category
- I18n
- Occurrences
- 4
- Severity
- error
Sample message
Mismatched text domain. Expected 'website-file-changes-monitor' but got 'melapress-login-security'.
WARNINGMaintainabilityNon-prefixed classClasses declared by a theme/plugin should start with the theme/plugin prefix. Found: "MFM".1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "MFM".
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_POST['email_address']1
- Category
- Security
- Occurrences
- 1
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_POST['email_address']
WARNINGSecurityInput is not validatedDetected usage of a possibly undefined superglobal array index: $_POST['email_address']. Check that the array index exists before using it.1
- Category
- Security
- Occurrences
- 1
- Severity
- warning
Sample message
Detected usage of a possibly undefined superglobal array index: $_POST['email_address']. Check that the array index exists before using it.
Show 3 moreShow less
WARNINGMaintainabilityDeprecated function: seems_utf81
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
seems_utf8() has been deprecated since WordPress version 6.9.0. Use wp_is_valid_utf8() instead.
ERRORRepo Compliancelicense mismatch1
- Category
- Repo Compliance
- Occurrences
- 1
- Severity
- error
Sample message
Your plugin has a different license declared in the readme file and plugin header. Please update your readme with a valid GPL license identifier.
WARNINGMaintainabilitymissing composer json file1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
The "/vendor" directory using composer exists, but "composer.json" file is missing.
External Connections
Potential connections found in static code analysis.
Outbound calls
185
External assets
0
Incoming endpoints
19
Notable Domains
melapress.com14 · outbound
redis.io4 · outbound
docs.aws.amazon.com2 · outbound
php-fig.org2 · outbound
zend.com2 · outbound
deliciousbrains.com1 · outbound
Platform / Reference Domains
github.com143 · platform/reference
wordpress.org3 · platform/reference
api.wordpress.org2 · platform/reference
codex.wordpress.org1 · platform/reference
core.trac.wordpress.org1 · platform/reference
gnu.org1 · platform/reference
External Asset Domains
No external asset domains detected.
Incoming Endpoints
/wp-json/mfm-scan-status/get-statusREST
register_rest_route
wp_ajax_nopriv_public
wp_ajax
Admin AJAX endpoints17
wp_ajax_dismiss_mfm_update_noticeauthenticated
wp_ajax
wp_ajax_mfm_abort_scanauthenticated
wp_ajax
wp_ajax_mfm_cancel_scanauthenticated
wp_ajax
wp_ajax_mfm_cancel_setup_wizardauthenticated
wp_ajax
wp_ajax_mfm_dismiss_events_noticeauthenticated
wp_ajax
wp_ajax_mfm_event_lookupauthenticated
wp_ajax
wp_ajax_mfm_finish_setup_wizardauthenticated
wp_ajax
wp_ajax_mfm_load_extra_metadataauthenticated
wp_ajax
wp_ajax_mfm_mark_as_readauthenticated
wp_ajax
wp_ajax_mfm_purge_dataauthenticated
wp_ajax
wp_ajax_mfm_reset_settingauthenticated
wp_ajax
wp_ajax_mfm_send_test_emailauthenticated
wp_ajax
5 more hidden
Score History
2 score snapshots
v2.4.0
80
Latest
- Findings
- 108
- Errors
- 16
- Warnings
- 92
- Check
- 2.1.0
v2.3.0
80
Score
- Findings
- 106
- Errors
- 16
- Warnings
- 90
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 80 | 108 | 16 | 92 | v2.4.0 | 2.1.0 |
| 80 | 106 | 16 | 90 | v2.3.0 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Author
Category
Issue
Domain
Related
Contact Form 769 scoreElementor Website Builder – more than just a page builder39 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreLiteSpeed Cache35 scoreWooCommerce22 scoreAkismet Anti-spam: Spam Protection35 scoreAdvanced Custom Fields (ACF®)23 scoreUltimate Addons for Elementor – Widgets, Templates, WooCommerce & Header Footer Builder33 scoreWordPress Importer25 scoreStarter Templates: AI-Powered Website Templates for Elementor & Gutenberg23 scoreSmash Balloon Social Photo Feed – Easy Social Feeds Plugin25 scoreSpectra Legacy – Gutenberg Blocks25 scoreWP Activity Log26 scoreWP 2FA – Two-factor authentication for WordPress25 score
Author
Category
Issue
Domain
Related
Contact Form 769 scoreElementor Website Builder – more than just a page builder39 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreLiteSpeed Cache35 scoreWooCommerce22 scoreAkismet Anti-spam: Spam Protection35 scoreAdvanced Custom Fields (ACF®)23 scoreUltimate Addons for Elementor – Widgets, Templates, WooCommerce & Header Footer Builder33 scoreWordPress Importer25 scoreStarter Templates: AI-Powered Website Templates for Elementor & Gutenberg23 scoreSmash Balloon Social Photo Feed – Easy Social Feeds Plugin25 scoreSpectra Legacy – Gutenberg Blocks25 scoreWP Activity Log26 scoreWP 2FA – Two-factor authentication for WordPress25 score
Related Plugins
WP Activity Log
300k+ active installs
26
WP 2FA – Two-factor authentication for WordPress
100k+ active installs
25
Admin Notices Manager
10k+ active installs
97
Melapress Login Security
3k+ active installs
31