An adjustable progress meter showing how much of the post/page the user has scrolled through, and a read time commitment label near the post titles.
Category Scores
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
I18n
600
1 issue group
Maintainability
370
16 issue groups
Security
33
7 issue groups
Performance
4
1 issue group
ERRORI18nText Domain MismatchMismatched text domain. Expected 'worth-the-read' but got 'redux-framework'.600
- Category
- I18n
- Occurrences
- 600
- Severity
- error
Sample message
Mismatched text domain. Expected 'worth-the-read' but got 'redux-framework'.
ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;167
- Category
- Maintainability
- Occurrences
- 167
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$$options_global".95
- Category
- Maintainability
- Occurrences
- 95
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$$options_global".
ERRORMaintainabilitywp function not compatible with requires wpFunction "apply_filters_deprecated()" requires WordPress 4.6.0, but your plugin minimum supported version is WordPress 3.8.0.59
- Category
- Maintainability
- Occurrences
- 59
- Severity
- error
Sample message
Function "apply_filters_deprecated()" requires WordPress 4.6.0, but your plugin minimum supported version is WordPress 3.8.0.
WARNINGMaintainabilityNon-prefixed functionFunctions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "create_term_redux_users".28
- Category
- Maintainability
- Occurrences
- 28
- Severity
- warning
Sample message
Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "create_term_redux_users".
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$bg'.23
- Category
- Security
- Occurrences
- 23
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$bg'.
WARNINGMaintainabilityNon-prefixed hook nameHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "active_plugins".5
- Category
- Maintainability
- Occurrences
- 5
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "active_plugins".
WARNINGPerformancePost Not In excludeUsing exclusionary parameters, like exclude, in calls to get_posts() should be done with caution, see https://wpvip.com/documentation/performance-improvements-by-removing-usage-of-post__not_in/ for more information.4
- Category
- Performance
- Occurrences
- 4
- Severity
- warning
Sample message
Using exclusionary parameters, like exclude, in calls to get_posts() should be done with caution, see https://wpvip.com/documentation/performance-improvements-by-removing-usage-of-post__not_in/ for more information.
ERRORSecurityUnsafe printing functionAll output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.3
- Category
- Security
- Occurrences
- 3
- Severity
- error
Sample message
All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.
ERRORMaintainabilityForbidden PHP function foundThe use of function _cleanup_header_comment() is forbidden2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
The use of function _cleanup_header_comment() is forbidden
Show 15 moreShow less
ERRORMaintainabilityLocalhost URL found2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
Do not use Localhost/127.0.0.1/*.local in your code. Found: http://127.0.0.1/
ERRORSecurityException output is not escaped2
- Category
- Security
- Occurrences
- 2
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$name'.
WARNINGSecurityRequest data is not unslashed2
- Category
- Security
- Occurrences
- 2
- Severity
- warning
Sample message
$_POST['wtr-custom-time-label'] not unslashed before sanitization. Use wp_unslash() or similar
ERRORMaintainabilityfile system operations is writable2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: is_writable().
ERRORMaintainabilityfile system operations rmdir2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: rmdir().
ERRORMaintainabilityNo Explicit Version2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
Version parameter is not explicitly set or has been set to an equivalent of "false" for wp_enqueue_script; This means that the WordPress core version will be used which is not recommended for plugin or theme development.
ERRORMaintainabilityPlugin Directory Write1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
Plugin folders are deleted when upgraded. Do not save data to the plugin folder using file_put_contents(). Detected usage of __FILE__ or __DIR__ magic constant. Use wp_upload_dir() to get the uploads directory path or save to the database instead.
WARNINGSecurityMissing nonce verification1
- Category
- Security
- Occurrences
- 1
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGSecurityInput is not sanitized1
- Category
- Security
- Occurrences
- 1
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_POST['wtr_nonce']
WARNINGSecurityInput is not validated1
- Category
- Security
- Occurrences
- 1
- Severity
- warning
Sample message
Detected usage of a possibly undefined superglobal array index: $_GET['users']. Check that the array index exists before using it.
ERRORMaintainabilityfile system operations chmod1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: chmod().
ERRORMaintainabilityfile system operations mkdir1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: mkdir().
ERRORMaintainabilityfile system operations touch1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: touch().
ERRORMaintainabilityrename rename1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
rename() is discouraged. Use WP_Filesystem::move() to rename a file.
ERRORMaintainabilitystrip tags strip tags1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
strip_tags() is discouraged. Use the more comprehensive wp_strip_all_tags() instead.
External Connections
Not analyzed yet.
Score History
First score snapshot
v1.14.3
23
Latest
- Findings
- 1,011
- Errors
- 873
- Warnings
- 138
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 23 | 1,011 | 873 | 138 | v1.14.3 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.