WP Accessibility fixes common accessibility issues in your WordPress site.
41
Score
198
Errors
104
Warnings
+2
Change
Category Scores
Security0
Repo97
Performance100
Maintainability81
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Security
282
7 issue groups
Maintainability
19
9 issue groups
Repo Compliance
1
1 issue group
ERRORSecurityUnsafe printing functionAll output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.112
- Category
- Security
- Occurrences
- 112
- Severity
- error
Sample message
All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '" \"$current_user->display_name\" <$current_user->user_email></code>\r\n'.77
- Category
- Security
- Occurrences
- 77
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '" \"$current_user->display_name\" <$current_user->user_email></code>\r\n'.
WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.33
- Category
- Security
- Occurrences
- 33
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGSecurityRequest data is not unslashed$_GET['color'] not unslashed before sanitization. Use wp_unslash() or similar30
- Category
- Security
- Occurrences
- 30
- Severity
- warning
Sample message
$_GET['color'] not unslashed before sanitization. Use wp_unslash() or similar
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_GET['s']15
- Category
- Security
- Occurrences
- 15
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_GET['s']
WARNINGSecurityInput is not validatedDetected usage of a possibly undefined superglobal array index: $_POST['has_donated']. Check that the array index exists before using it.13
- Category
- Security
- Occurrences
- 13
- Severity
- warning
Sample message
Detected usage of a possibly undefined superglobal array index: $_POST['has_donated']. Check that the array index exists before using it.
ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
ERRORMaintainabilitystrip tags strip tagsstrip_tags() is discouraged. Use the more comprehensive wp_strip_all_tags() instead.3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- error
Sample message
strip_tags() is discouraged. Use the more comprehensive wp_strip_all_tags() instead.
WARNINGMaintainabilityMissing VersionResource version not set in call to wp_register_style(). This means new versions of the style may not always be loaded due to browser caching.3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
Resource version not set in call to wp_register_style(). This means new versions of the style may not always be loaded due to browser caching.
WARNINGMaintainabilitytrademarked termThe plugin name includes a restricted term. Your chosen plugin name - "WP Accessibility" - contains the restricted term "wp" which cannot be used at all in your plugin name.3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
The plugin name includes a restricted term. Your chosen plugin name - "WP Accessibility" - contains the restricted term "wp" which cannot be used at all in your plugin name.
Show 7 moreShow less
WARNINGSecurityInput is not validated or sanitized2
- Category
- Security
- Occurrences
- 2
- Severity
- warning
Sample message
Detected usage of a non-sanitized, non-validated input variable _SERVER: Server Software: $_SERVER[SERVER_SOFTWARE]\r\n
ERRORMaintainabilityNon Enqueued Stylesheet2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
Stylesheets must be registered/enqueued via wp_enqueue_style()
WARNINGMaintainabilityDirect Query1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGMaintainabilityNo Caching1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
WARNINGMaintainabilityslow db query tax query1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Detected usage of tax_query, possible slow query.
WARNINGMaintainabilityerror log print r1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
print_r() found. Debug code should not normally be used in production.
WARNINGRepo Complianceplugin header nonexistent domain path1
- Category
- Repo Compliance
- Occurrences
- 1
- Severity
- warning
Sample message
The "Domain Path" header in the plugin file must point to an existing folder. Found: "lang"
External Connections
Potential connections found in static code analysis.
Outbound calls
62
External assets
0
Incoming endpoints
2
Notable Domains
joedolson.com18 · outbound
docs.joedolson.com6 · outbound
equalizedigital.com3 · outbound
linkedin.com3 · outbound
cs.tut.fi2 · outbound
456bereastreet.com1 · outbound
Platform / Reference Domains
w3.org10 · platform/reference
github.com4 · platform/reference
make.wordpress.org3 · platform/reference
wordpress.org3 · platform/reference
gnu.org1 · platform/reference
opensource.org1 · platform/reference
translate.wordpress.org1 · platform/reference
External Asset Domains
No external asset domains detected.
Incoming Endpoints
wp_ajax_nopriv_wpa_stats_actionpublic
wp_ajax
Admin AJAX endpoints1
wp_ajax_wpa_stats_actionauthenticated
wp_ajax
Score History
3 score snapshots
v2.3.5
41
Latest
- Findings
- 302
- Errors
- 198
- Warnings
- 104
- Check
- 2.0.0
v2.3.4
39
Score
- Findings
- 304
- Errors
- 200
- Warnings
- 104
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 41 | 302 | 198 | 104 | v2.3.5 | 2.0.0 |
| 39 | 304 | 200 | 104 | v2.3.4 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Plugin
Author
Issue
Domain
Related
Classic Editor63 scoreWooCommerce22 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreAkismet Anti-spam: Spam Protection35 scoreAll-in-One WP Migration and Backup34 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreDuplicate Page40 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreWordPress Importer25 scoreWeb Accessibility (formally known as Ally) – WCAG Scanning, Guided Fixes, Usability Widget40 scoreAuto Image Attributes From Filename With Bulk Updater (Add Alt Text, Image Title For Image SEO)41 scoreAccessibility by UserWay39 scoreAccessibleWP – Accessibility Toolbar38 score
Plugin
Author
Issue
Domain
Related
Classic Editor63 scoreWooCommerce22 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreAkismet Anti-spam: Spam Protection35 scoreAll-in-One WP Migration and Backup34 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreDuplicate Page40 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreWordPress Importer25 scoreWeb Accessibility (formally known as Ally) – WCAG Scanning, Guided Fixes, Usability Widget40 scoreAuto Image Attributes From Filename With Bulk Updater (Add Alt Text, Image Title For Image SEO)41 scoreAccessibility by UserWay39 scoreAccessibleWP – Accessibility Toolbar38 score
Related Plugins
Button visually impaired
10k+ active installs
100
ResponsiveVoice Text To Speech
7k+ active installs
100
Definitely allow mobile zooming
7k+ active installs
100
Dark Mode for WP Dashboard
3k+ active installs
100
Accessibility New Window Warnings
1k+ active installs
100
Accessible Carousel & Slider – WCAG AA Compliant Slideshow
600 active installs
100