Essential security: password protection, AI crawler blocking, login limits, country restrictions, CPU monitoring & live-preview login customizer.
39
Score
34
Errors
29
Warnings
+0
Change
Category Scores
Security0
Repo100
Performance100
Maintainability69
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Security
32
5 issue groups
Maintainability
30
16 issue groups
I18n
1
1 issue group
ERRORSecurityUnsupported Identifier PlaceholderThe %i modifier is only supported in WP 6.2 or higher. Found: "%i".14
- Category
- Security
- Occurrences
- 14
- Severity
- error
Sample message
The %i modifier is only supported in WP 6.2 or higher. Found: "%i".
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$color'.12
- Category
- Security
- Occurrences
- 12
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$color'.
WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
WARNINGSecurityUnfinished PrepareReplacement variables found, but no valid placeholders found in the query.3
- Category
- Security
- Occurrences
- 3
- Severity
- warning
Sample message
Replacement variables found, but no valid placeholders found in the query.
WARNINGMaintainabilityMissing VersionResource version not set in call to wp_enqueue_script(). This means new versions of the script may not always be loaded due to browser caching.3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
Resource version not set in call to wp_enqueue_script(). This means new versions of the script may not always be loaded due to browser caching.
WARNINGMaintainabilitytrademarked termThe plugin name includes a restricted term. Your chosen plugin name - "WPEPP – Essential Security, Password Protect & Login Page Customizer" - contains the restricted term "wp" which cannot be used at all in your plugin name.3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
The plugin name includes a restricted term. Your chosen plugin name - "WPEPP – Essential Security, Password Protect & Login Page Customizer" - contains the restricted term "wp" which cannot be used at all in your plugin name.
WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGMaintainabilityslow db query meta keyDetected usage of meta_key, possible slow query.2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
Detected usage of meta_key, possible slow query.
WARNINGMaintainabilityslow db query meta valueDetected usage of meta_value, possible slow query.2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
Detected usage of meta_value, possible slow query.
WARNINGMaintainabilityNon-prefixed classClasses declared by a theme/plugin should start with the theme/plugin prefix. Found: "PageTemplater".2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "PageTemplater".
Show 12 moreShow less
WARNINGMaintainabilityNon-prefixed hook name2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "page_templater_plugin_dir_path".
WARNINGSecurityMissing nonce verification2
- Category
- Security
- Occurrences
- 2
- Severity
- warning
Sample message
Processing form data without nonce verification.
ERRORMaintainabilityfile system operations is writable2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: is_writable().
ERRORMaintainabilitywp function not compatible with requires wp2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
Function "wp_autoload_values_to_autoload()" requires WordPress 6.6.0, but your plugin minimum supported version is WordPress 6.0.0.
WARNINGI18nDiscouraged text-domain loading1
- Category
- I18n
- Occurrences
- 1
- Severity
- warning
Sample message
load_plugin_textdomain() has been discouraged since WordPress version 4.6. When your plugin is hosted on WordPress.org, you no longer need to manually include this function call for translations under your plugin slug. WordPress will automatically load the translations for you as needed.
WARNINGMaintainabilityslow db query meta query1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Detected usage of meta_query, possible slow query.
WARNINGMaintainabilityDynamic hook name1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "$hook".
WARNINGSecurityNonce verification recommended1
- Category
- Security
- Occurrences
- 1
- Severity
- warning
Sample message
Processing form data without nonce verification.
ERRORMaintainabilityrename rename1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
rename() is discouraged. Use WP_Filesystem::move() to rename a file.
ERRORMaintainabilityunlink unlink1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
unlink() is discouraged. Use wp_delete_file() to delete a file.
ERRORMaintainabilityfive star reviews detected1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
Linking directly to 5 stars reviews is not allowed.
ERRORMaintainabilitytrunk stable tag1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
Incorrect Stable Tag. It's recommended not to use "Stable Tag: trunk". Your Stable Tag is meant to be the stable version of your plugin and it needs to be exactly the same with the Version in your main plugin file's header. Any mismatch can prevent users from downloading the correct plugin files from WordPress.org.
External Connections
Potential connections found in static code analysis.
Outbound calls
77
External assets
1
Incoming endpoints
9
Notable Domains
youtube.com12 · outbound
wpthemespace.com9 · outbound
appsero.com4 · outbound
player.vimeo.com4 · outbound
php-fig.org2 · outbound
api.appsero.com1 · outbound
Platform / Reference Domains
w3.org25 · platform/reference
github.com3 · platform/reference
wordpress.org3 · platform/reference
gnu.org1 · platform/reference
External Asset Domains
google.com6 · asset + outbound
Incoming Endpoints
wp_ajax_nopriv_wpepp_check_passwordpublic
wp_ajax
wp_ajax_nopriv_wpepp_check_site_passwordpublic
wp_ajax
Admin AJAX endpoints7
wp_ajax_appsero_refresh_license_authenticated
wp_ajax
wp_ajax_wpepp_check_passwordauthenticated
wp_ajax
wp_ajax_wpepp_check_site_passwordauthenticated
wp_ajax
wp_ajax_wpepp_dismiss_new_badgeauthenticated
wp_ajax
wp_ajax_wpepp_dismiss_pro_noticeauthenticated
wp_ajax
wp_ajax_wpepp_dismiss_review_noticeauthenticated
wp_ajax
wp_ajax_wpepp_previewauthenticated
wp_ajax
Score History
2 score snapshots
v2.0.5
39
Latest
- Findings
- 63
- Errors
- 34
- Warnings
- 29
- Check
- 2.0.0
v2.0.4
39
Score
- Findings
- 63
- Errors
- 34
- Warnings
- 29
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 39 | 63 | 34 | 29 | v2.0.5 | 2.0.0 |
| 39 | 63 | 34 | 29 | v2.0.4 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Author
Category
Issue
Domain
Related
LoginPress | wp-login Custom Login Page Customizer55 scoreCustom Login Page Customizer96 scoreWP Custom Login99 scoreDoLogin Security43 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreClassic Editor63 scoreWooCommerce21 scoreAkismet Anti-spam: Spam Protection35 scoreAll-in-One WP Migration and Backup34 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreHostinger Reach – AI-Powered Email Marketing for WordPress40 scoreUser Role Editor43 scoreBackuply – Backup, Restore, Migrate and Clone24 scoreFloating Chat Widget: Contact Chat Icons, Telegram Chat, Line Messenger, WeChat, Email, SMS, Call Button – Chaty26 score
Author
Category
Issue
Domain
Related
LoginPress | wp-login Custom Login Page Customizer55 scoreCustom Login Page Customizer96 scoreWP Custom Login99 scoreDoLogin Security43 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreClassic Editor63 scoreWooCommerce21 scoreAkismet Anti-spam: Spam Protection35 scoreAll-in-One WP Migration and Backup34 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreHostinger Reach – AI-Powered Email Marketing for WordPress40 scoreUser Role Editor43 scoreBackuply – Backup, Restore, Migrate and Clone24 scoreFloating Chat Widget: Contact Chat Icons, Telegram Chat, Line Messenger, WeChat, Email, SMS, Call Button – Chaty26 score
Related Plugins
WP Custom Login
10k+ active installs
99
Custom Login Page Customizer
50k+ active installs
96
LoginPress | wp-login Custom Login Page Customizer
200k+ active installs
55
WIP Custom Login
700 active installs
52
DoLogin Security
7k+ active installs
43
CLP – Custom Login Page by NiteoThemes
700 active installs
36