PluginScore

whatwedo ACF Cleaner

Cleanup old metadata created by Advanced Custom Fields.

v1.2.2whatwedoUpdated Added 800 installs96% rating
acfadminadvanced custom fieldscleanercleanup
61
Score
8
Errors
20
Warnings
+0
Change

Category Scores

Security34
Repo91
Performance100
Maintainability92

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

28 findings

Security

18

5 issue groups

Maintainability

6

4 issue groups

I18n

2

1 issue group

Repo Compliance

2

2 issue groups

WARNINGSecurityInput is not validatedDetected usage of a possibly undefined superglobal array index: $_POST['paged']. Check that the array index exists before using it.5
Category
Security
Occurrences
5
Severity
warning

Sample message

Detected usage of a possibly undefined superglobal array index: $_POST['paged']. Check that the array index exists before using it.

WordPress.Security.ValidatedSanitizedInput.InputNotValidated
WARNINGSecurityMissing nonce verificationProcessing form data without nonce verification.4
Category
Security
Occurrences
4
Severity
warning

Sample message

Processing form data without nonce verification.

WordPress.Security.NonceVerification.Missing
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$message'.3
Category
Security
Occurrences
3
Severity
error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$message'.

WordPress.Security.EscapeOutput.OutputNotEscapedReference
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_POST['postId']3
Category
Security
Occurrences
3
Severity
warning

Sample message

Detected usage of a non-sanitized input variable: $_POST['postId']

WordPress.Security.ValidatedSanitizedInput.InputNotSanitized
WARNINGSecurityRequest data is not unslashed$_POST['postId'] not unslashed before sanitization. Use wp_unslash() or similar3
Category
Security
Occurrences
3
Severity
warning

Sample message

$_POST['postId'] not unslashed before sanitization. Use wp_unslash() or similar

WordPress.Security.ValidatedSanitizedInput.MissingUnslash
ERRORMaintainabilityNot AllowedUse of heredoc syntax (<<<) is not allowed; use standard strings or inline HTML instead2
Category
Maintainability
Occurrences
2
Severity
error

Sample message

Use of heredoc syntax (<<<) is not allowed; use standard strings or inline HTML instead

PluginCheck.CodeAnalysis.Heredoc.NotAllowed
WARNINGMaintainabilityNot In FooterIn footer ($in_footer) is not set explicitly wp_enqueue_script; It is recommended to load scripts in the footer. Please set this value to `true` to load it in the footer, or explicitly `false` if it should be loaded in the header.2
Category
Maintainability
Occurrences
2
Severity
warning

Sample message

In footer ($in_footer) is not set explicitly wp_enqueue_script; It is recommended to load scripts in the footer. Please set this value to `true` to load it in the footer, or explicitly `false` if it should be loaded in the header.

WordPress.WP.EnqueuedResourceParameters.NotInFooter
ERRORI18nText Domain MismatchMismatched text domain. Expected 'whatwedo-acf-cleaner' but got 'wwdac'.2
Category
I18n
Occurrences
2
Severity
error

Sample message

Mismatched text domain. Expected 'whatwedo-acf-cleaner' but got 'wwdac'.

WordPress.WP.I18n.TextDomainMismatchReference
WARNINGMaintainabilityerror log print rprint_r() found. Debug code should not normally be used in production.1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

print_r() found. Debug code should not normally be used in production.

WordPress.PHP.DevelopmentFunctions.error_log_print_r
WARNINGMaintainabilityerror log var exportvar_export() found. Debug code should not normally be used in production.1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

var_export() found. Debug code should not normally be used in production.

WordPress.PHP.DevelopmentFunctions.error_log_var_export
Show 2 more
ERRORRepo Complianceoutdated tested upto header1
Category
Repo Compliance
Occurrences
1
Severity
error

Sample message

Tested up to: 6.6 < 7.0. The "Tested up to" value in your plugin is not set to the current version of WordPress. This means your plugin will not show up in searches, as we require plugins to be compatible and documented as tested up to the most recent version of WordPress.

outdated_tested_upto_headerReference
WARNINGRepo Compliancereadme parser warnings too many tags1
Category
Repo Compliance
Occurrences
1
Severity
warning

Sample message

One or more tags were ignored. Please limit your plugin to 5 tags.

readme_parser_warnings_too_many_tags

External Connections

Potential connections found in static code analysis.

2 domains

Outbound calls

3

External assets

0

Incoming endpoints

4

Notable Domains

whatwedo.ch1 · outbound

Platform / Reference Domains

w3.org2 · platform/reference

External Asset Domains

No external asset domains detected.

Incoming Endpoints

No public endpoints detected.

Admin AJAX endpoints4
wp_ajax_batchCleanupauthenticated

wp_ajax

wp_ajax_batchDiscoveryauthenticated

wp_ajax

wp_ajax_singleCleanupauthenticated

wp_ajax

wp_ajax_singleDiscoveryauthenticated

wp_ajax

Score History

First score snapshot

v1.2.2

61

Latest

Findings
28
Errors
8
Warnings
20
Check
2.0.0

Relationship Map

Author, categories, issues, domains, and nearby plugins.

30 nodes

Related Plugins

Default Admin Color Scheme

800 active installs

100
PufferDesk

0 active installs

100
Redux Framework

900k+ active installs

100
Simply Show Hooks

2k+ active installs

100
ACF Field For CF7

10k+ active installs

99
Add Dashboard Columns

400 active installs

99