Bannerize simplifies banner creation and management. Track views and clicks to gauge campaign success.
Category Scores
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
I18n
203
3 issue groups
Security
154
11 issue groups
Maintainability
128
10 issue groups
Performance
5
1 issue group
ERRORI18nText Domain MismatchMismatched text domain. Expected 'wp-bannerize-pro' but got 'wp-bannerize'.171
- Category
- I18n
- Occurrences
- 171
- Severity
- error
Sample message
Mismatched text domain. Expected 'wp-bannerize-pro' but got 'wp-bannerize'.
WARNINGSecurityInterpolated SQL is not preparedUse placeholders and $wpdb->prepare(); found interpolated variable $analytic at COUNT(*) AS $analytic\n40
- Category
- Security
- Occurrences
- 40
- Severity
- warning
Sample message
Use placeholders and $wpdb->prepare(); found interpolated variable $analytic at COUNT(*) AS $analytic\n
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"Error while create a record in {$instance->table} table"'.36
- Category
- Security
- Occurrences
- 36
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"Error while create a record in {$instance->table} table"'.
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$after_title".35
- Category
- Maintainability
- Occurrences
- 35
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$after_title".
WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.31
- Category
- Maintainability
- Occurrences
- 31
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().29
- Category
- Maintainability
- Occurrences
- 29
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
ERRORI18nMissing Arg DomainMissing $domain parameter in function call to __().29
- Category
- I18n
- Occurrences
- 29
- Severity
- error
Sample message
Missing $domain parameter in function call to __().
WARNINGSecurityRequest data is not unslashed$_POST['_wpnonce'] not unslashed before sanitization. Use wp_unslash() or similar22
- Category
- Security
- Occurrences
- 22
- Severity
- warning
Sample message
$_POST['_wpnonce'] not unslashed before sanitization. Use wp_unslash() or similar
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_POST['_wpnonce']17
- Category
- Security
- Occurrences
- 17
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_POST['_wpnonce']
ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;17
- Category
- Maintainability
- Occurrences
- 17
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
Show 15 moreShow less
WARNINGSecurityInput is not validated13
- Category
- Security
- Occurrences
- 13
- Severity
- warning
Sample message
Detected usage of a possibly undefined superglobal array index: $_POST['wp_bannerize_banner_clicks_enabled']. Check that the array index exists before using it.
WARNINGSecurityNonce verification recommended8
- Category
- Security
- Occurrences
- 8
- Severity
- warning
Sample message
Processing form data without nonce verification.
ERRORSecurityDatabase parameter is not escaped7
- Category
- Security
- Occurrences
- 7
- Severity
- error
Sample message
Unescaped parameter $analytic used in $wpdb->get_results()\n$analytic assigned unsafely at line 180.
ERRORSecurityUnsafe printing function7
- Category
- Security
- Occurrences
- 7
- Severity
- error
Sample message
All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.
WARNINGMaintainabilityslow db query meta query5
- Category
- Maintainability
- Occurrences
- 5
- Severity
- warning
Sample message
Detected usage of meta_query, possible slow query.
ERRORPerformanceSuppress Filters suppress filters5
- Category
- Performance
- Occurrences
- 5
- Severity
- error
Sample message
Setting `suppress_filters` to `true` is prohibited.
ERRORI18nMissing Translators Comment3
- Category
- I18n
- Occurrences
- 3
- Severity
- error
Sample message
A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.
WARNINGMaintainabilitytrademarked term3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
The plugin name includes a restricted term. Your chosen plugin name - "WP Bannerize Pro" - contains the restricted term "wp" which cannot be used at all in your plugin name.
WARNINGMaintainabilitySchema Change2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
Attempting a database schema change is discouraged.
WARNINGSecurityReplacements Wrong Number2
- Category
- Security
- Occurrences
- 2
- Severity
- warning
Sample message
Incorrect number of replacements passed to $wpdb->prepare(). Found 1 replacement parameters, expected 3.
WARNINGMaintainabilityNon-prefixed function2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "get_wp_bannerize_pro".
ERRORMaintainabilityfile system operations fclose2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fclose().
ERRORMaintainabilityfile system operations fwrite2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fwrite().
ERRORSecuritySQL query is not prepared1
- Category
- Security
- Occurrences
- 1
- Severity
- error
Sample message
Use placeholders and $wpdb->prepare(); found $query
WARNINGSecurityUnquoted Complex Placeholder1
- Category
- Security
- Occurrences
- 1
- Severity
- warning
Sample message
Complex placeholders used for values in the query string in $wpdb->prepare() will NOT be quoted automagically. Found: %1s.
External Connections
Potential connections found in static code analysis.
Outbound calls
240
External assets
0
Incoming endpoints
2
Notable Domains
Platform / Reference Domains
External Asset Domains
No external asset domains detected.
Incoming Endpoints
wp_ajax
Score History
First score snapshot
v1.13.1
32
Latest
- Findings
- 497
- Errors
- 281
- Warnings
- 216
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 32 | 497 | 281 | 216 | v1.13.1 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.