All-in-one WordPress toolkit: contact channels, SMTP, maintenance, AI, spam filter, WooCommerce — one plugin.
24
Score
3,908
Errors
1,515
Warnings
+0
Change
Category Scores
Security0
Repo94
Performance97
Maintainability0
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
I18n
3,225
3 issue groups
Maintainability
1,137
12 issue groups
Security
954
10 issue groups
ERRORI18nText Domain MismatchMismatched text domain. Expected 'wp-helper-lite' but got "whp".3,178
- Category
- I18n
- Occurrences
- 3,178
- Severity
- error
Sample message
Mismatched text domain. Expected 'wp-helper-lite' but got "whp".
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$$f".567
- Category
- Maintainability
- Occurrences
- 567
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$$f".
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"rgba({$rgb[0]},{$rgb[1]},{$rgb[2]},0.08); border-color:rgba({$rgb[0]},{$rgb[1]},{$rgb[2]},0.3); color:{$c};"'.471
- Category
- Security
- Occurrences
- 471
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"rgba({$rgb[0]},{$rgb[1]},{$rgb[2]},0.08); border-color:rgba({$rgb[0]},{$rgb[1]},{$rgb[2]},0.3); color:{$c};"'.
WARNINGMaintainabilityNon-prefixed functionFunctions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "_maint_social_zalo_href".193
- Category
- Maintainability
- Occurrences
- 193
- Severity
- warning
Sample message
Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "_maint_social_zalo_href".
WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.137
- Category
- Security
- Occurrences
- 137
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGSecurityRequest data is not unslashed$_GET['aipq_from'] not unslashed before sanitization. Use wp_unslash() or similar136
- Category
- Security
- Occurrences
- 136
- Severity
- warning
Sample message
$_GET['aipq_from'] not unslashed before sanitization. Use wp_unslash() or similar
WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.112
- Category
- Maintainability
- Occurrences
- 112
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().105
- Category
- Maintainability
- Occurrences
- 105
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
ERRORMaintainabilitydate datedate() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.68
- Category
- Maintainability
- Occurrences
- 68
- Severity
- error
Sample message
date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.
WARNINGSecurityInterpolated SQL is not preparedUse placeholders and $wpdb->prepare(); found interpolated variable $jobs_table at "SELECT * FROM $jobs_table WHERE uuid = %s"53
- Category
- Security
- Occurrences
- 53
- Severity
- warning
Sample message
Use placeholders and $wpdb->prepare(); found interpolated variable $jobs_table at "SELECT * FROM $jobs_table WHERE uuid = %s"
Show 15 moreShow less
WARNINGSecurityMissing nonce verification48
- Category
- Security
- Occurrences
- 48
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGSecurityInput is not sanitized41
- Category
- Security
- Occurrences
- 41
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_FILES['receipt']['tmp_name']
ERRORI18nMissing Translators Comment38
- Category
- I18n
- Occurrences
- 38
- Severity
- error
Sample message
A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.
WARNINGSecurityDatabase parameter is not escaped30
- Category
- Security
- Occurrences
- 30
- Severity
- warning
Sample message
Unescaped parameter $jobs_table used in $wpdb->get_row()\n$jobs_table assigned unsafely at line 1497.
ERRORMaintainabilityShort PHP open tag found20
- Category
- Maintainability
- Occurrences
- 20
- Severity
- error
Sample message
Short PHP opening tag used with echo; expected "<?php echo $_ai_enable ..." but found "<?= $_ai_enable ..."
WARNINGSecurityInput is not validated18
- Category
- Security
- Occurrences
- 18
- Severity
- warning
Sample message
Detected usage of a possibly undefined superglobal array index: $_FILES['receipt']['size']. Check that the array index exists before using it.
ERRORMaintainabilityrand rand17
- Category
- Maintainability
- Occurrences
- 17
- Severity
- error
Sample message
rand() is discouraged. Use the far less predictable wp_rand() instead.
WARNINGMaintainabilityslow db query meta query14
- Category
- Maintainability
- Occurrences
- 14
- Severity
- warning
Sample message
Detected usage of meta_query, possible slow query.
WARNINGMaintainabilityDiscouraged PHP function11
- Category
- Maintainability
- Occurrences
- 11
- Severity
- warning
Sample message
The use of function ini_set() is discouraged
ERRORMaintainabilityparse url parse url11
- Category
- Maintainability
- Occurrences
- 11
- Severity
- error
Sample message
parse_url() is discouraged because of inconsistency in the output across PHP versions; use wp_parse_url() instead.
ERRORMaintainabilityOffloaded Content10
- Category
- Maintainability
- Occurrences
- 10
- Severity
- error
Sample message
Found call to wp_enqueue_script() with external resource. Offloading scripts to your servers or any remote service is disallowed.
ERRORSecurityDatabase parameter is not escaped10
- Category
- Security
- Occurrences
- 10
- Severity
- error
Sample message
Unescaped parameter $count_sql used in $wpdb->get_var()\n$count_sql assigned unsafely at line 133.
ERRORSecuritySQL query is not prepared10
- Category
- Security
- Occurrences
- 10
- Severity
- error
Sample message
Use placeholders and $wpdb->prepare(); found $count_sql
ERRORMaintainabilityNon Enqueued Stylesheet9
- Category
- Maintainability
- Occurrences
- 9
- Severity
- error
Sample message
Stylesheets must be registered/enqueued via wp_enqueue_style()
ERRORI18nNon Singular String Literal Text9
- Category
- I18n
- Occurrences
- 9
- Severity
- error
Sample message
The $text parameter must be a single text string literal. Found: $itemInfo['desc'] ?? ""
External Connections
Potential connections found in static code analysis.
Outbound calls
122
External assets
35
Incoming endpoints
75
Notable Domains
matbao.net6 · outbound
generativelanguage.googleapis.com5 · outbound
facebook.com3 · outbound
m.me3 · outbound
zalo.me3 · outbound
aistudio.google.com2 · outbound
Platform / Reference Domains
External Asset Domains
fonts.googleapis.com16 · asset + outbound
cdnjs.cloudflare.com11 · asset + outbound
google.com8 · asset + outbound
fonts.gstatic.com7 · asset
cdn.jsdelivr.net2 · asset + outbound
challenges.cloudflare.com2 · asset + outbound
Incoming Endpoints
wp_ajax_nopriv_whp_ajax_sendmail_popuppublic
wp_ajax
wp_ajax_nopriv_whp_cancel_order_expiredpublic
wp_ajax
wp_ajax_nopriv_whp_confirm_transferpublic
wp_ajax
wp_ajax_nopriv_whp_support_requestpublic
wp_ajax
wp_ajax_nopriv_whp_upload_receiptpublic
wp_ajax
wp_ajax_nopriv_wpaap_frontend_ai_verifypublic
wp_ajax
Admin AJAX endpoints67
wp_ajax_whp_ajax_sendmail_popupauthenticated
wp_ajax
wp_ajax_whp_cancel_order_expiredauthenticated
wp_ajax
wp_ajax_whp_confirm_transferauthenticated
wp_ajax
wp_ajax_whp_contact_toggle_activeauthenticated
wp_ajax
wp_ajax_whp_maintenance_toggle_enableauthenticated
wp_ajax
wp_ajax_whp_popup_toggle_enableauthenticated
wp_ajax
wp_ajax_whp_smtp_send_mail_testauthenticated
wp_ajax
wp_ajax_whp_smtp_toggle_enableauthenticated
wp_ajax
wp_ajax_whp_support_requestauthenticated
wp_ajax
wp_ajax_whp_thankyou_toggle_enableauthenticated
wp_ajax
wp_ajax_whp_upload_receiptauthenticated
wp_ajax
wp_ajax_wpaap_ai_apply_post_seoauthenticated
wp_ajax
55 more hidden
Score History
4 score snapshots
v4.7.2
24
Latest
- Findings
- 5,423
- Errors
- 3,908
- Warnings
- 1,515
- Check
- 2.0.0
v4.7.1
24
Score
- Findings
- 5,423
- Errors
- 3,908
- Warnings
- 1,515
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 24 | 5,423 | 3,908 | 1,515 | v4.7.2 | 2.0.0 |
| 24 | 5,423 | 3,908 | 1,515 | v4.7.1 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Category
Issue
Domain
Related
Wordfence Security – Firewall, Malware Scan, and Login Security21 scoreJetpack – WP Security, Backup, Speed, & Growth22 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreLiteSpeed Cache35 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder35 scoreWooCommerce22 scoreAkismet Anti-spam: Spam Protection35 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWP Mail SMTP by WPForms – The Most Popular SMTP and Email Log Plugin30 scoreHostinger Tools82 scoreAll-In-One Security (AIOS) – Security and Firewall24 scoreLogin Security Captcha100 score
Category
Issue
Domain
Related
Wordfence Security – Firewall, Malware Scan, and Login Security21 scoreJetpack – WP Security, Backup, Speed, & Growth22 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreLiteSpeed Cache35 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder35 scoreWooCommerce22 scoreAkismet Anti-spam: Spam Protection35 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWP Mail SMTP by WPForms – The Most Popular SMTP and Email Log Plugin30 scoreHostinger Tools82 scoreAll-In-One Security (AIOS) – Security and Firewall24 scoreLogin Security Captcha100 score
Related Plugins
Beckin Maintenance Mode
1k+ active installs
100
Dam Spam
2k+ active installs
100
Floating Contact Button for MAX and Telegram
1k+ active installs
100
Login Security Captcha
10k+ active installs
100
Maintenance mode for WooCommerce
2k+ active installs
100
Protect Login
600 active installs
100