WP Affiliate Disclosure

Automatically add a customizable, FTC-compliant disclosure statement across your WordPress website based on the rule(s) you define.

v1.4.0mojofywpUpdated 2 months agoAdded 8 years ago1k+ installs100% rating

affiliate affiliate disclosure affiliate disclosure statement disclosure disclosure statement

Score

1,358

Errors

1,504

Warnings

Change

Category Scores

Security0

Repo83

Performance100

Maintainability0

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

2,862 findings

Maintainability

1,483

16 issue groups

Security

928

7 issue groups

I18n

439

2 issue groups

WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$account_addon_ids".1,099

Category: Maintainability
Occurrences: 1,099
Severity: warning

Sample message

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$account_addon_ids".

WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedVariableFound

ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '" <a href='{$skip_url}' class='button button-small button-secondary'>{$use_plugin_anonymously_text}</a>"'.734

Category: Security
Occurrences: 734
Severity: error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '" <a href='{$skip_url}' class='button button-small button-secondary'>{$use_plugin_anonymously_text}</a>"'.

WordPress.Security.EscapeOutput.OutputNotEscaped Reference

ERRORI18nNon Singular String Literal DomainThe $domain parameter must be a single text string literal. Found: WPADC_SLUG430

Category: I18n
Occurrences: 430
Severity: error

Sample message

The $domain parameter must be a single text string literal. Found: WPADC_SLUG

WordPress.WP.I18n.NonSingularStringLiteralDomain Reference

ERRORSecurityUnsafe printing functionAll output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.146

Category: Security
Occurrences: 146
Severity: error

Sample message

All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.

WordPress.Security.EscapeOutput.UnsafePrintingFunction Reference

WARNINGMaintainabilityNon-prefixed functionFunctions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "_fs_text".107

Category: Maintainability
Occurrences: 107
Severity: warning

Sample message

Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "_fs_text".

WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedFunctionFound

WARNINGMaintainabilityNon-prefixed constantGlobal constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "FS_API__ADDRESS".94

Category: Maintainability
Occurrences: 94
Severity: warning

Sample message

Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "FS_API__ADDRESS".

WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedConstantFound

WARNINGMaintainabilityDynamic hook nameHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "$this->_hook_prefix . 'add_new'".71

Category: Maintainability
Occurrences: 71
Severity: warning

Sample message

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "$this->_hook_prefix . 'add_new'".

WordPress.NamingConventions.PrefixAllGlobals.DynamicHooknameFound

WARNINGMaintainabilityNon-prefixed classClasses declared by a theme/plugin should start with the theme/plugin prefix. Found: "FS_Admin_Menu_Manager".56

Category: Maintainability
Occurrences: 56
Severity: warning

Sample message

Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "FS_Admin_Menu_Manager".

WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedClassFound

ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;24

Category: Maintainability
Occurrences: 24
Severity: error

Sample message

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

missing_direct_file_access_protection Reference

WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_GET['view']12

Category: Security
Occurrences: 12
Severity: warning

Sample message

Detected usage of a non-sanitized input variable: $_GET['view']

WordPress.Security.ValidatedSanitizedInput.InputNotSanitized

Show 15 more

WARNINGSecurityRequest data is not unslashed12

Category: Security
Occurrences: 12
Severity: warning

Sample message

$_GET['view'] not unslashed before sanitization. Use wp_unslash() or similar

WordPress.Security.ValidatedSanitizedInput.MissingUnslash

WARNINGSecurityMissing nonce verification11

Category: Security
Occurrences: 11
Severity: warning

Sample message

Processing form data without nonce verification.

WordPress.Security.NonceVerification.Missing

ERRORI18nMissing Translators Comment9

Category: I18n
Occurrences: 9
Severity: error

Sample message

A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.

WordPress.WP.I18n.MissingTranslatorsComment Reference

ERRORSecurityException output is not escaped7

Category: Security
Occurrences: 7
Severity: error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$message'.

WordPress.Security.EscapeOutput.ExceptionNotEscaped Reference

WARNINGSecurityNonce verification recommended6

Category: Security
Occurrences: 6
Severity: warning

Sample message

Processing form data without nonce verification.

WordPress.Security.NonceVerification.Recommended

WARNINGMaintainabilityDirect Query5

Category: Maintainability
Occurrences: 5
Severity: warning

Sample message

Use of a direct database call is discouraged.

WordPress.DB.DirectDatabaseQuery.DirectQuery

WARNINGMaintainabilityNot In Footer5

Category: Maintainability
Occurrences: 5
Severity: warning

Sample message

In footer ($in_footer) is not set explicitly wp_enqueue_script; It is recommended to load scripts in the footer. Please set this value to `true` to load it in the footer, or explicitly `false` if it should be loaded in the header.

WordPress.WP.EnqueuedResourceParameters.NotInFooter

WARNINGMaintainabilityNo Caching4

Category: Maintainability
Occurrences: 4
Severity: warning

Sample message

Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().

WordPress.DB.DirectDatabaseQuery.NoCaching

WARNINGMaintainabilityslow db query meta key3

Category: Maintainability
Occurrences: 3
Severity: warning

Sample message

Detected usage of meta_key, possible slow query.

WordPress.DB.SlowDBQuery.slow_db_query_meta_key

WARNINGMaintainabilityNon-prefixed hook name3

Category: Maintainability
Occurrences: 3
Severity: warning

Sample message

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "fs_plugins_api".

WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedHooknameFound

WARNINGMaintainabilityMissing Version3

Category: Maintainability
Occurrences: 3
Severity: warning

Sample message

Resource version not set in call to wp_enqueue_script(). This means new versions of the script may not always be loaded due to browser caching.

WordPress.WP.EnqueuedResourceParameters.MissingVersion

WARNINGMaintainabilitytrademarked term3

Category: Maintainability
Occurrences: 3
Severity: warning

Sample message

The plugin name includes a restricted term. Your chosen plugin name - "WP Affiliate Disclosure" - contains the restricted term "wp" which cannot be used at all in your plugin name.

trademarked_term

WARNINGMaintainabilitySchema Change2

Category: Maintainability
Occurrences: 2
Severity: warning

Sample message

Attempting a database schema change is discouraged.

WordPress.DB.DirectDatabaseQuery.SchemaChange

ERRORMaintainabilityplugin updater detected2

Category: Maintainability
Occurrences: 2
Severity: error

Sample message

Plugin Updater detected. These are not permitted in WordPress.org hosted plugins. Detected: class FS_Plugin_Updater

plugin_updater_detected

WARNINGMaintainabilityupdate modification detected2

Category: Maintainability
Occurrences: 2
Severity: warning

Sample message

Plugin Updater detected. Detected code which may be altering WordPress update routines. Detected: _site_transient_update_plugins

update_modification_detected Reference

External Connections

Not analyzed yet.

Score History

First score snapshot

16 days ago

v1.4.0

Latest

Findings: 2,862
Errors: 1,358
Warnings: 1,504
Check: 2.0.0

Scan	Score	Findings	Errors	Warnings	Plugin	Check
16 days agoLatest	22	2,862	1,358	1,504	v1.4.0	2.0.0

Relationship Map

Author, categories, issues, domains, and nearby plugins.

29 nodes

Loading map

PluginAuthorCategoryIssueRelated

Relationship links

Issue

Related Plugins

Affiliates WooCommerce Light

1k+ active installs

AffiliateX – Amazon Affiliate Plugin, Product Boxes, Comparison Tables & Affiliate Link Tracking

10k+ active installs

Clicky by Yoast

4k+ active installs

Improved External Products for WooCommerce

1k+ active installs

FMTC Affiliate Disclosure

1k+ active installs

Meks ThemeForest Smart Widget

10k+ active installs