Adds a more advanced paging navigation interface.
36
Score
78
Errors
94
Warnings
+1
Change
Category Scores
Security0
Repo94
Performance100
Maintainability59
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Maintainability
77
13 issue groups
I18n
46
3 issue groups
Security
46
9 issue groups
ERRORI18nNon Singular String Literal DomainThe $domain parameter must be a single text string literal. Found: $this->textdomain39
- Category
- I18n
- Occurrences
- 39
- Severity
- error
Sample message
The $domain parameter must be a single text string literal. Found: $this->textdomain
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '", $argc"'.24
- Category
- Security
- Occurrences
- 24
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '", $argc"'.
WARNINGMaintainabilityNon-prefixed classClasses declared by a theme/plugin should start with the theme/plugin prefix. Found: "PageNavi_Call".23
- Category
- Maintainability
- Occurrences
- 23
- Severity
- warning
Sample message
Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "PageNavi_Call".
WARNINGMaintainabilityNon-prefixed functionFunctions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "_pagenavi_init".15
- Category
- Maintainability
- Occurrences
- 15
- Severity
- warning
Sample message
Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "_pagenavi_init".
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$_scb_data".6
- Category
- Maintainability
- Occurrences
- 6
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$_scb_data".
WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.5
- Category
- Maintainability
- Occurrences
- 5
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().5
- Category
- Maintainability
- Occurrences
- 5
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
WARNINGSecurityInterpolated SQL is not preparedUse placeholders and $wpdb->prepare(); found interpolated variable $columns at "CREATE TABLE IF NOT EXISTS $full_table_name ( $columns ) $table_options;"5
- Category
- Security
- Occurrences
- 5
- Severity
- warning
Sample message
Use placeholders and $wpdb->prepare(); found interpolated variable $columns at "CREATE TABLE IF NOT EXISTS $full_table_name ( $columns ) $table_options;"
WARNINGMaintainabilityerror log trigger errortrigger_error() found. Debug code should not normally be used in production.5
- Category
- Maintainability
- Occurrences
- 5
- Severity
- warning
Sample message
trigger_error() found. Debug code should not normally be used in production.
WARNINGSecurityMissing nonce verificationProcessing form data without nonce verification.5
- Category
- Security
- Occurrences
- 5
- Severity
- warning
Sample message
Processing form data without nonce verification.
Show 15 moreShow less
ERRORMaintainabilityMissing direct file access protection5
- Category
- Maintainability
- Occurrences
- 5
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
WARNINGMaintainabilityNon-prefixed hook name4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "'scb_activation_' . $plugin".
ERRORI18nMissing Arg Domain4
- Category
- I18n
- Occurrences
- 4
- Severity
- error
Sample message
Missing $domain parameter in function call to __().
WARNINGSecurityDatabase parameter is not escaped3
- Category
- Security
- Occurrences
- 3
- Severity
- warning
Sample message
Unescaped parameter $full_table_name used in $wpdb->query()\n$full_table_name assigned unsafely at line 320.
WARNINGMaintainabilitySchema Change3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
Attempting a database schema change is discouraged.
ERRORI18nMissing Translators Comment3
- Category
- I18n
- Occurrences
- 3
- Severity
- error
Sample message
A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.
WARNINGMaintainabilitytrademarked term3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
The plugin name includes a restricted term. Your chosen plugin name - "WP-PageNavi" - contains the restricted term "wp" which cannot be used at all in your plugin name.
WARNINGSecurityNonce verification recommended2
- Category
- Security
- Occurrences
- 2
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGSecurityInput is not sanitized2
- Category
- Security
- Occurrences
- 2
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_SERVER['HTTP_HOST']
WARNINGSecurityInput is not validated2
- Category
- Security
- Occurrences
- 2
- Severity
- warning
Sample message
Detected usage of a possibly undefined superglobal array index: $_SERVER['HTTP_HOST']. Check that the array index exists before using it.
WARNINGSecurityRequest data is not unslashed2
- Category
- Security
- Occurrences
- 2
- Severity
- warning
Sample message
$_SERVER['HTTP_HOST'] not unslashed before sanitization. Use wp_unslash() or similar
ERRORMaintainabilityNot Allowed1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
Use of heredoc syntax (<<<) is not allowed; use standard strings or inline HTML instead
ERRORSecurityDatabase parameter is not escaped1
- Category
- Security
- Occurrences
- 1
- Severity
- error
Sample message
Unescaped parameter $keys used in $wpdb->query()\n$keys assigned unsafely at line 202.
WARNINGMaintainabilityDynamic hook name1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "$this->hook".
WARNINGMaintainabilityNon-prefixed interface1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Interfaces declared by a theme/plugin should start with the theme/plugin prefix. Found: "scbFormField_I".
External Connections
Potential connections found in static code analysis.
Outbound calls
6
External assets
0
Incoming endpoints
0
Notable Domains
lesterchan.net2 · outbound
Platform / Reference Domains
core.trac.wordpress.org2 · platform/reference
codex.wordpress.org1 · platform/reference
wordpress.org1 · platform/reference
External Asset Domains
No external asset domains detected.
Incoming Endpoints
No public endpoints detected.
Score History
2 score snapshots
v2.94.6
36
Latest
- Findings
- 172
- Errors
- 78
- Warnings
- 94
- Check
- 2.0.0
v2.94.5
35
Score
- Findings
- 179
- Errors
- 84
- Warnings
- 95
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 36 | 172 | 78 | 94 | v2.94.6 | 2.0.0 |
| 35 | 179 | 84 | 95 | v2.94.5 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Plugin
Author
Issue
Domain
Related
Breadcrumb NavXT36 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreClassic Editor63 scoreWooCommerce21 scoreAkismet Anti-spam: Spam Protection35 scoreAll-in-One WP Migration and Backup34 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreAdvanced Custom Fields (ACF®)23 scoreLimit Login Attempts Security – Login Security, 2FA, Firewall, Brute Force Prevention25 scoreManageWP Worker23 scoreThe Events Calendar23 scoreOMGF | GDPR/DSGVO Compliant, Faster Google Fonts. Easy.31 scoreMax Mega Menu37 scoreLuckyWP Table of Contents39 score
Plugin
Author
Issue
Domain
Related
Breadcrumb NavXT36 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreClassic Editor63 scoreWooCommerce21 scoreAkismet Anti-spam: Spam Protection35 scoreAll-in-One WP Migration and Backup34 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreAdvanced Custom Fields (ACF®)23 scoreLimit Login Attempts Security – Login Security, 2FA, Firewall, Brute Force Prevention25 scoreManageWP Worker23 scoreThe Events Calendar23 scoreOMGF | GDPR/DSGVO Compliant, Faster Google Fonts. Easy.31 scoreMax Mega Menu37 scoreLuckyWP Table of Contents39 score
Related Plugins
Breadcrumb Block
3k+ active installs
100
Catch Sticky Menu
2k+ active installs
100
Hide Drafts in Menus
1k+ active installs
100
Easy Menu Icons – Awesome Menu Icons
700 active installs
100
Post Tags and Categories for Pages
20k+ active installs
99
Essential Widgets
10k+ active installs
99