MDTF – Meta Data and Taxonomies Filter

The main idea of the plugin – make your WordPress site content is filterable and searchable by meta fields and taxonomies on the same time.

v1.3.9RealMag777Updated Added 1k+ installs90% rating
16
Score
1,550
Errors
1,956
Warnings
+0
Change

Category Scores

Security0
Repo48
Performance90
Maintainability0

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

3,506 findings

Maintainability

1,360

11 issue groups

I18n

1,148

4 issue groups

Security

916

10 issue groups

WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$activated_taxonomies".1,012
Category
Maintainability
Occurrences
1,012
Severity
warning

Sample message

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$activated_taxonomies".

ERRORI18nText Domain MismatchMismatched text domain. Expected 'wp-meta-data-filter-and-taxonomy-filter' but got 'meta-data-filter'.860
Category
I18n
Occurrences
860
Severity
error

Sample message

Mismatched text domain. Expected 'wp-meta-data-filter-and-taxonomy-filter' but got 'meta-data-filter'.

WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.262
Category
Security
Occurrences
262
Severity
warning

Sample message

Processing form data without nonce verification.

WARNINGSecurityRequest data is not unslashed$_GET['mdf_page_num'] not unslashed before sanitization. Use wp_unslash() or similar158
Category
Security
Occurrences
158
Severity
warning

Sample message

$_GET['mdf_page_num'] not unslashed before sanitization. Use wp_unslash() or similar

ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$'.152
Category
Security
Occurrences
152
Severity
error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$'.

ERRORI18nMissing Arg DomainMissing $domain parameter in function call to esc_html__().126
Category
I18n
Occurrences
126
Severity
error

Sample message

Missing $domain parameter in function call to esc_html__().

ERRORI18nNon Singular String Literal TextThe $text parameter must be a single text string literal. Found: $args['title']126
Category
I18n
Occurrences
126
Severity
error

Sample message

The $text parameter must be a single text string literal. Found: $args['title']

WARNINGSecurityInput is not validatedDetected usage of a possibly undefined superglobal array index: $_GET['slg']. Check that the array index exists before using it.91
Category
Security
Occurrences
91
Severity
warning

Sample message

Detected usage of a possibly undefined superglobal array index: $_GET['slg']. Check that the array index exists before using it.

WARNINGMaintainabilityMissing VersionResource version not set in call to wp_enqueue_script(). This means new versions of the script may not always be loaded due to browser caching.69
Category
Maintainability
Occurrences
69
Severity
warning

Sample message

Resource version not set in call to wp_enqueue_script(). This means new versions of the script may not always be loaded due to browser caching.

WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_GET['mdf_page_num']68
Category
Security
Occurrences
68
Severity
warning

Sample message

Detected usage of a non-sanitized input variable: $_GET['mdf_page_num']

Show 15 more
ERRORSecuritySQL query is not prepared67
Category
Security
Occurrences
67
Severity
error

Sample message

Use placeholders and $wpdb->prepare(); found $data_sql

WARNINGMaintainabilityNon-prefixed hook name59
Category
Maintainability
Occurrences
59
Severity
warning

Sample message

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "dynamic_sidebar".

WARNINGSecurityMissing nonce verification47
Category
Security
Occurrences
47
Severity
warning

Sample message

Processing form data without nonce verification.

WARNINGMaintainabilityNot In Footer39
Category
Maintainability
Occurrences
39
Severity
warning

Sample message

In footer ($in_footer) is not set explicitly wp_enqueue_script; It is recommended to load scripts in the footer. Please set this value to `true` to load it in the footer, or explicitly `false` if it should be loaded in the header.

ERRORI18nMissing Translators Comment36
Category
I18n
Occurrences
36
Severity
error

Sample message

A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.

ERRORMaintainabilitydate date34
Category
Maintainability
Occurrences
34
Severity
error

Sample message

date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.

ERRORMaintainabilitybadly named files34
Category
Maintainability
Occurrences
34
Severity
error

Sample message

File and folder names must not contain spaces or special characters.

WARNINGMaintainabilityDirect Query33
Category
Maintainability
Occurrences
33
Severity
warning

Sample message

Use of a direct database call is discouraged.

WARNINGMaintainabilityNo Caching33
Category
Maintainability
Occurrences
33
Severity
warning

Sample message

Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().

ERRORSecurityDatabase parameter is not escaped28
Category
Security
Occurrences
28
Severity
error

Sample message

Unescaped parameter $data_subscr['request'] used in $wpdb->get_results()\n$data_subscr['request'] used without escaping.

ERRORSecurityUnsafe printing function27
Category
Security
Occurrences
27
Severity
error

Sample message

All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.

WARNINGSecurityInterpolated SQL is not prepared16
Category
Security
Occurrences
16
Severity
warning

Sample message

Use placeholders and $wpdb->prepare(); found interpolated variable $post->ID at "DELETE FROM $wpdb->postmeta WHERE meta_key LIKE 'medafi_%' AND post_id=$post->ID"

WARNINGMaintainabilityslow db query meta key16
Category
Maintainability
Occurrences
16
Severity
warning

Sample message

Detected usage of meta_key, possible slow query.

WARNINGMaintainabilityNon-prefixed class16
Category
Maintainability
Occurrences
16
Severity
warning

Sample message

Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "Aq_Resize".

ERRORMaintainabilitymysql PDO15
Category
Maintainability
Occurrences
15
Severity
error

Sample message

Accessing the database directly should be avoided. Please use the $wpdb object and associated functions instead. Found: \PDO.

External Connections

Potential connections found in static code analysis.

61 domains

Outbound calls

218

External assets

14

Incoming endpoints

30

Notable Domains

jqueryui.com13 · outbound
getharvest.com10 · outbound
twitter.com8 · outbound
wp-filter.com8 · outbound
jquery.com7 · outbound
designmodo.com6 · outbound

Platform / Reference Domains

github.com64 · platform/reference
wordpress.org9 · platform/reference
w3.org5 · platform/reference
codex.wordpress.org4 · platform/reference
opensource.org2 · platform/reference
gnu.org1 · platform/reference
schema.org1 · platform/reference

External Asset Domains

ajax.googleapis.com8 · asset + outbound
pluginus.net5 · asset + outbound
maps.google.com3 · asset + outbound
youtube.com3 · asset + outbound
code.jquery.com2 · asset + outbound
gstatic.com2 · asset + outbound

Incoming Endpoints

wp_ajax_nopriv_draw_mdf_taxmeta_varpublic

wp_ajax

wp_ajax_nopriv_mdf_draw_term_childspublic

wp_ajax

wp_ajax_nopriv_mdf_encode_search_get_paramspublic

wp_ajax

wp_ajax_nopriv_mdf_get_ajax_auto_recount_datapublic

wp_ajax

wp_ajax_nopriv_mdf_posts_messenger_add_subscrpublic

wp_ajax

wp_ajax_nopriv_mdf_posts_messenger_remove_subscrpublic

wp_ajax

Admin AJAX endpoints22
wp_ajax_draw_mdf_taxmeta_varauthenticated

wp_ajax

wp_ajax_mdf_add_filter_item_to_widgetauthenticated

wp_ajax

wp_ajax_mdf_cache_count_data_clearauthenticated

wp_ajax

wp_ajax_mdf_cache_terms_data_clearauthenticated

wp_ajax

wp_ajax_mdf_change_meta_keyauthenticated

wp_ajax

wp_ajax_mdf_draw_shortcode_html_itemsauthenticated

wp_ajax

wp_ajax_mdf_draw_term_childsauthenticated

wp_ajax

wp_ajax_mdf_encode_search_get_paramsauthenticated

wp_ajax

wp_ajax_mdf_get_ajax_auto_recount_dataauthenticated

wp_ajax

wp_ajax_mdf_get_operative_tablesauthenticated

wp_ajax

wp_ajax_mdf_get_stat_dataauthenticated

wp_ajax

wp_ajax_mdf_get_tax_options_in_widgetauthenticated

wp_ajax

10 more hidden

Score History

First score snapshot

v1.3.9

16

Latest

Findings
3,506
Errors
1,550
Warnings
1,956
Check
2.0.0

Relationship Map

Author, categories, issues, domains, and nearby plugins.

37 nodes

Related Plugins

Simply Show Hooks

2k+ active installs

100
Filter for Divi

2k+ active installs

99
Gallery Styles

500 active installs

99
98
Default Media Uploader View

600 active installs

98