PluginScore

WP Fail2Ban Redux

Records various WordPress events to your server's system log for integration with Fail2Ban.

v0.9.2Brandon AllenUpdated Added 7k+ installs100% rating
fail2banloginsecuritysyslog
82
Score
1
Errors
10
Warnings
+0
Change

Category Scores

Security69
Repo94
Performance100
Maintainability98

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

11 findings

Security

7

4 issue groups

Maintainability

3

1 issue group

Repo Compliance

1

1 issue group

WARNINGMaintainabilitytrademarked termThe plugin name includes a restricted term. Your chosen plugin name - "WP Fail2Ban Redux" - contains the restricted term "wp" which cannot be used at all in your plugin name.3
Category
Maintainability
Occurrences
3
Severity
warning

Sample message

The plugin name includes a restricted term. Your chosen plugin name - "WP Fail2Ban Redux" - contains the restricted term "wp" which cannot be used at all in your plugin name.

trademarked_term
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_SERVER['REMOTE_ADDR']2
Category
Security
Occurrences
2
Severity
warning

Sample message

Detected usage of a non-sanitized input variable: $_SERVER['REMOTE_ADDR']

WordPress.Security.ValidatedSanitizedInput.InputNotSanitized
WARNINGSecurityInput is not validatedDetected usage of a possibly undefined superglobal array index: $_SERVER['REMOTE_ADDR']. Check that the array index exists before using it.2
Category
Security
Occurrences
2
Severity
warning

Sample message

Detected usage of a possibly undefined superglobal array index: $_SERVER['REMOTE_ADDR']. Check that the array index exists before using it.

WordPress.Security.ValidatedSanitizedInput.InputNotValidated
WARNINGSecurityRequest data is not unslashed$_SERVER['REMOTE_ADDR'] not unslashed before sanitization. Use wp_unslash() or similar2
Category
Security
Occurrences
2
Severity
warning

Sample message

$_SERVER['REMOTE_ADDR'] not unslashed before sanitization. Use wp_unslash() or similar

WordPress.Security.ValidatedSanitizedInput.MissingUnslash
WARNINGSecurityInput is not validated or sanitizedDetected usage of a non-sanitized, non-validated input variable _SERVER: "wp({$_SERVER['HTTP_HOST']})"1
Category
Security
Occurrences
1
Severity
warning

Sample message

Detected usage of a non-sanitized, non-validated input variable _SERVER: "wp({$_SERVER['HTTP_HOST']})"

WordPress.Security.ValidatedSanitizedInput.InputNotValidatedNotSanitized
ERRORRepo Complianceoutdated tested upto headerTested up to: 6.8 < 7.0. The "Tested up to" value in your plugin is not set to the current version of WordPress. This means your plugin will not show up in searches, as we require plugins to be compatible and documented as tested up to the most recent version of WordPress.1
Category
Repo Compliance
Occurrences
1
Severity
error

Sample message

Tested up to: 6.8 < 7.0. The "Tested up to" value in your plugin is not set to the current version of WordPress. This means your plugin will not show up in searches, as we require plugins to be compatible and documented as tested up to the most recent version of WordPress.

outdated_tested_upto_headerReference

External Connections

Not analyzed yet.

Score History

First score snapshot

v0.9.2

82

Latest

Findings
11
Errors
1
Warnings
10
Check
2.0.0

Relationship Map

Author, categories, issues, domains, and nearby plugins.

26 nodes

Related Plugins

Dam Spam

1k+ active installs

100
Firebase Authentication

500 active installs

100
Logged-in-only

700 active installs

100
Login Security Captcha

10k+ active installs

100
Protect Login

600 active installs

100
Remove XML-RPC Methods

1k+ active installs

100