Named by Google AI as the top choice — display books, earn Amazon affiliate income, and sell with WooCommerce. Free to start.
35
Score
1,134
Errors
147
Warnings
+2
Change
Category Scores
Security0
Repo100
Performance91
Maintainability54
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Security
686
10 issue groups
I18n
556
6 issue groups
Maintainability
29
8 issue groups
Performance
5
1 issue group
ERRORSecurityUnsafe printing functionAll output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.363
- Category
- Security
- Occurrences
- 363
- Severity
- error
Sample message
All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.
ERRORI18nMissing Arg DomainMissing $domain parameter in function call to __().274
- Category
- I18n
- Occurrences
- 274
- Severity
- error
Sample message
Missing $domain parameter in function call to __().
ERRORI18nNon Singular String Literal TextThe $text parameter must be a single text string literal. Found: $bc->name273
- Category
- I18n
- Occurrences
- 273
- Severity
- error
Sample message
The $text parameter must be a single text string literal. Found: $bc->name
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$args['after_title']'.195
- Category
- Security
- Occurrences
- 195
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$args['after_title']'.
WARNINGSecurityRequest data is not unslashed$_GET[$get_key] not unslashed before sanitization. Use wp_unslash() or similar54
- Category
- Security
- Occurrences
- 54
- Severity
- warning
Sample message
$_GET[$get_key] not unslashed before sanitization. Use wp_unslash() or similar
WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.29
- Category
- Security
- Occurrences
- 29
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_GET[$get_key]20
- Category
- Security
- Occurrences
- 20
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_GET[$get_key]
ERRORSecurityDatabase parameter is not escapedUnescaped parameter $sql used in $wpdb->get_results()\n$sql assigned unsafely at line 123.7
- Category
- Security
- Occurrences
- 7
- Severity
- error
Sample message
Unescaped parameter $sql used in $wpdb->get_results()\n$sql assigned unsafely at line 123.
WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.7
- Category
- Maintainability
- Occurrences
- 7
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().7
- Category
- Maintainability
- Occurrences
- 7
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
Show 15 moreShow less
WARNINGSecurityInterpolated SQL is not prepared6
- Category
- Security
- Occurrences
- 6
- Severity
- warning
Sample message
Use placeholders and $wpdb->prepare(); found interpolated variable {$tbl} at "SELECT option_name FROM {$tbl} WHERE option_name LIKE %s"
WARNINGSecurityInput is not validated5
- Category
- Security
- Occurrences
- 5
- Severity
- warning
Sample message
Detected usage of a possibly undefined superglobal array index: $_POST['wbg_api_isbn']. Check that the array index exists before using it.
ERRORPerformanceSuppress Filters suppress filters5
- Category
- Performance
- Occurrences
- 5
- Severity
- error
Sample message
Setting `suppress_filters` to `true` is prohibited.
WARNINGMaintainabilityslow db query meta key4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- warning
Sample message
Detected usage of meta_key, possible slow query.
WARNINGMaintainabilityslow db query meta query4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- warning
Sample message
Detected usage of meta_query, possible slow query.
WARNINGSecurityMissing nonce verification4
- Category
- Security
- Occurrences
- 4
- Severity
- warning
Sample message
Processing form data without nonce verification.
ERRORSecuritySQL query is not prepared3
- Category
- Security
- Occurrences
- 3
- Severity
- error
Sample message
Use placeholders and $wpdb->prepare(); found $sql
ERRORI18nInterpolated Variable Text3
- Category
- I18n
- Occurrences
- 3
- Severity
- error
Sample message
The $text parameter must not contain interpolated variables or expressions. Found: {$existed_books}
ERRORI18nText Domain Mismatch3
- Category
- I18n
- Occurrences
- 3
- Severity
- error
Sample message
Mismatched text domain. Expected 'wp-books-gallery' but got 'jobwp'.
WARNINGMaintainabilitytrademarked term3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
The plugin name includes a restricted term. Your chosen plugin name - "Books Gallery – Book Showcase, Library & Affiliate Plugin" - contains the restricted term "plugin" which cannot be used at all in your plugin name.
ERRORMaintainabilitydate date2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.
ERRORI18nMissing Translators Comment2
- Category
- I18n
- Occurrences
- 2
- Severity
- error
Sample message
A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.
WARNINGI18nDiscouraged text-domain loading1
- Category
- I18n
- Occurrences
- 1
- Severity
- warning
Sample message
load_plugin_textdomain() has been discouraged since WordPress version 4.6. When your plugin is hosted on WordPress.org, you no longer need to manually include this function call for translations under your plugin slug. WordPress will automatically load the translations for you as needed.
ERRORMaintainabilityOffloaded Content1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
Found call to wp_register_style() with external resource. Offloading styles to your servers or any remote service is disallowed.
ERRORMaintainabilityOffloaded Content1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
Offloading images, js, css, and other scripts to your servers or any remote service is disallowed.
External Connections
Potential connections found in static code analysis.
Outbound calls
212
External assets
4
Incoming endpoints
3
Notable Domains
freemius.com10 · outbound
php.net6 · outbound
openlibrary.org3 · outbound
benalman.com2 · outbound
checkout.freemius-local.com2 · outbound
checkout.freemius.com2 · outbound
Platform / Reference Domains
gnu.org112 · platform/reference
wordpress.org10 · platform/reference
github.com5 · platform/reference
w3.org5 · platform/reference
api.wordpress.org2 · platform/reference
make.wordpress.org2 · platform/reference
schema.org2 · platform/reference
core.trac.wordpress.org1 · platform/reference
External Asset Domains
books-gallery.com13 · asset + outbound
Incoming Endpoints
No public endpoints detected.
Admin AJAX endpoints3
admin_post_fs_clone_resolutionauthenticated
admin_post
wp_ajax_fs_dismiss_notice_action_{$ajax_action_suffix}authenticated
wp_ajax
wp_ajax_fs_toggle_debug_modeauthenticated
wp_ajax
Score History
2 score snapshots
v4.8.3
35
Latest
- Findings
- 1,281
- Errors
- 1,134
- Warnings
- 147
- Check
- 2.0.0
v4.8.2
33
Score
- Findings
- 1,931
- Errors
- 1,753
- Warnings
- 178
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 35 | 1,281 | 1,134 | 147 | v4.8.3 | 2.0.0 |
| 33 | 1,931 | 1,753 | 178 | v4.8.2 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Author
Issue
Unsafe printing function363 findingsMissing Arg Domain274 findingsNon Singular String Literal Text273 findingsOutput is not escaped195 findingsRequest data is not unslashed54 findingsNonce verification recommended29 findingsInput is not sanitized20 findingsDatabase parameter is not escaped7 findings
Domain
Related
AffiliateX – Amazon Affiliate Plugin, Product Boxes, Comparison Tables & Affiliate Link Tracking96 scoreMeks ThemeForest Smart Widget79 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreClassic Editor63 scoreWooCommerce22 scoreLiteSpeed Cache35 scoreWP Mail SMTP by WPForms – The Most Popular SMTP and Email Log Plugin30 scoreDuplicate Page40 scoreHostinger Tools82 scoreWordPress Importer25 scoreAdvanced Custom Fields (ACF®)23 scoreAdvanced Ads – Ad Manager & AdSense25 scorePochipp35 score
Author
Issue
Unsafe printing function363 findingsMissing Arg Domain274 findingsNon Singular String Literal Text273 findingsOutput is not escaped195 findingsRequest data is not unslashed54 findingsNonce verification recommended29 findingsInput is not sanitized20 findingsDatabase parameter is not escaped7 findings
Domain
Related
AffiliateX – Amazon Affiliate Plugin, Product Boxes, Comparison Tables & Affiliate Link Tracking96 scoreMeks ThemeForest Smart Widget79 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreClassic Editor63 scoreWooCommerce22 scoreLiteSpeed Cache35 scoreWP Mail SMTP by WPForms – The Most Popular SMTP and Email Log Plugin30 scoreDuplicate Page40 scoreHostinger Tools82 scoreWordPress Importer25 scoreAdvanced Custom Fields (ACF®)23 scoreAdvanced Ads – Ad Manager & AdSense25 scorePochipp35 score
Related Plugins
Affiliates WooCommerce Light
1k+ active installs
100
96
Clicky by Yoast
4k+ active installs
95
Improved External Products for WooCommerce
1k+ active installs
95
FMTC Affiliate Disclosure
1k+ active installs
92
Meks ThemeForest Smart Widget
10k+ active installs
79