WP Console – WordPress PHP Console powered by PsySH

An in-browser PHP console for WordPress powered by PsySH

v2.6.0Edi AminUpdated Added 20k+ installs100% rating
53
Score
34
Errors
48
Warnings
+0
Change

Category Scores

Security27
Repo94
Performance100
Maintainability72

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

82 findings

Maintainability

52

11 issue groups

Security

28

2 issue groups

I18n

1

1 issue group

Repo Compliance

1

1 issue group

ERRORSecurityException output is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$color'.26
Category
Security
Occurrences
26
Severity
error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$color'.

WARNINGMaintainabilityprevent path disclosure error reportingerror_reporting() can lead to full path disclosure.15
Category
Maintainability
Occurrences
15
Severity
warning

Sample message

error_reporting() can lead to full path disclosure.

WARNINGMaintainabilityNon-prefixed namespaceNamespaces declared by a theme/plugin should start with the theme/plugin prefix. Found: "Psy".10
Category
Maintainability
Occurrences
10
Severity
warning

Sample message

Namespaces declared by a theme/plugin should start with the theme/plugin prefix. Found: "Psy".

WARNINGMaintainabilityerror log trigger errortrigger_error() found. Debug code should not normally be used in production.7
Category
Maintainability
Occurrences
7
Severity
warning

Sample message

trigger_error() found. Debug code should not normally be used in production.

WARNINGMaintainabilityerror log set error handlerset_error_handler() found. Debug code should not normally be used in production.4
Category
Maintainability
Occurrences
4
Severity
warning

Sample message

set_error_handler() found. Debug code should not normally be used in production.

ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;4
Category
Maintainability
Occurrences
4
Severity
error

Sample message

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$version".3
Category
Maintainability
Occurrences
3
Severity
warning

Sample message

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$version".

WARNINGMaintainabilityerror log var exportvar_export() found. Debug code should not normally be used in production.3
Category
Maintainability
Occurrences
3
Severity
warning

Sample message

var_export() found. Debug code should not normally be used in production.

WARNINGMaintainabilitytrademarked termThe plugin name includes a restricted term. Your chosen plugin name - "WP Console - WordPress PHP Console powered by PsySH" - contains the restricted term "wordpress" which cannot be used at all in your plugin name.3
Category
Maintainability
Occurrences
3
Severity
warning

Sample message

The plugin name includes a restricted term. Your chosen plugin name - "WP Console - WordPress PHP Console powered by PsySH" - contains the restricted term "wordpress" which cannot be used at all in your plugin name.

ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$config'.2
Category
Security
Occurrences
2
Severity
error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$config'.

Show 5 more
ERRORMaintainabilityForbidden PHP function found1
Category
Maintainability
Occurrences
1
Severity
error

Sample message

The use of function eval() is forbidden

WARNINGI18nDiscouraged text-domain loading1
Category
I18n
Occurrences
1
Severity
warning

Sample message

load_plugin_textdomain() has been discouraged since WordPress version 4.6. When your plugin is hosted on WordPress.org, you no longer need to manually include this function call for translations under your plugin slug. WordPress will automatically load the translations for you as needed.

WARNINGMaintainabilityNon-prefixed function1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "_dump".

WARNINGMaintainabilitymismatched plugin name1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

Plugin name "WP Console - WordPress PHP Console powered by PsySH" is different from the name declared in plugin header "WP Console".

ERRORRepo Complianceplugin header no license1
Category
Repo Compliance
Occurrences
1
Severity
error

Sample message

Missing "License" in Plugin Header. Please update your Plugin Header with a valid GPLv2 (or later) compatible license.

External Connections

Not analyzed yet.

Score History

First score snapshot

v2.6.0

53

Latest

Findings
82
Errors
34
Warnings
48
Check
2.0.0

Relationship Map

Author, categories, issues, domains, and nearby plugins.

29 nodes

Related Plugins

Laravel DD for WordPress

1k+ active installs

97
Leverage Browser Caching

10k+ active installs

97
AutoCEP

1k+ active installs

96
WP BrowserUpdate

1k+ active installs

90