This plugin is more than just a photo album plugin, it is a complete, highly customizable multimedia cms and display system.
25
Score
5
Errors
1,817
Warnings
+0
Change
Category Scores
Security0
Repo100
Performance100
Maintainability0
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Maintainability
1,666
16 issue groups
Security
156
7 issue groups
WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.760
- Category
- Maintainability
- Occurrences
- 760
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().759
- Category
- Maintainability
- Occurrences
- 759
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
WARNINGSecurityInterpolated SQL is not preparedUse placeholders and $wpdb->prepare(); found interpolated variable $alb at \t\t\t\t\t\t\t\t AND album = $alb\r\n86
- Category
- Security
- Occurrences
- 86
- Severity
- warning
Sample message
Use placeholders and $wpdb->prepare(); found interpolated variable $alb at \t\t\t\t\t\t\t\t AND album = $alb\r\n
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$albums_used".57
- Category
- Maintainability
- Occurrences
- 57
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$albums_used".
WARNINGSecurityUnfinished PrepareReplacement variables found, but no valid placeholders found in the query.35
- Category
- Security
- Occurrences
- 35
- Severity
- warning
Sample message
Replacement variables found, but no valid placeholders found in the query.
WARNINGMaintainabilityNon-prefixed functionFunctions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "_wppa_admin".32
- Category
- Maintainability
- Occurrences
- 32
- Severity
- warning
Sample message
Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "_wppa_admin".
WARNINGSecurityReplacements Wrong NumberIncorrect number of replacements passed to $wpdb->prepare(). Found 1 replacement parameters, expected 2.23
- Category
- Security
- Occurrences
- 23
- Severity
- warning
Sample message
Incorrect number of replacements passed to $wpdb->prepare(). Found 1 replacement parameters, expected 2.
WARNINGMaintainabilityNon-prefixed hook nameHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "bulk_actions-{$this->screen->id}".19
- Category
- Maintainability
- Occurrences
- 19
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "bulk_actions-{$this->screen->id}".
WARNINGMaintainabilityNon-prefixed classClasses declared by a theme/plugin should start with the theme/plugin prefix. Found: "AdminsChoice".14
- Category
- Maintainability
- Occurrences
- 14
- Severity
- warning
Sample message
Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "AdminsChoice".
WARNINGMaintainabilitySchema ChangeAttempting a database schema change is discouraged.8
- Category
- Maintainability
- Occurrences
- 8
- Severity
- warning
Sample message
Attempting a database schema change is discouraged.
Show 13 moreShow less
WARNINGMaintainabilityerror log debug backtrace5
- Category
- Maintainability
- Occurrences
- 5
- Severity
- warning
Sample message
debug_backtrace() found. Debug code should not normally be used in production.
WARNINGSecurityInput is not sanitized4
- Category
- Security
- Occurrences
- 4
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_POST['data']
WARNINGSecurityDatabase parameter is not escaped3
- Category
- Security
- Occurrences
- 3
- Severity
- warning
Sample message
Unescaped parameter $table used in $wpdb->get_results()
WARNINGMaintainabilityerror log var export3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
var_export() found. Debug code should not normally be used in production.
WARNINGSecurityRequest data is not unslashed3
- Category
- Security
- Occurrences
- 3
- Severity
- warning
Sample message
$_COOKIE['wppa_session_id'] not unslashed before sanitization. Use wp_unslash() or similar
WARNINGMaintainabilitytrademarked term3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
The plugin name includes a restricted term. Your chosen plugin name - "WP Photo Album Plus" - contains the restricted term "wp" which cannot be used at all in your plugin name.
ERRORSecurityOutput is not escaped2
- Category
- Security
- Occurrences
- 2
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found 'wppa_show_query'.
WARNINGMaintainabilityDynamic hook name1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "{$option}".
WARNINGMaintainabilityNon-prefixed constant1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "DOING_WPPA_AJAX".
ERRORMaintainabilityfile system operations fclose1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fclose().
ERRORMaintainabilityfile system operations fopen1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fopen().
ERRORMaintainabilityfile system operations fwrite1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fwrite().
WARNINGMaintainabilityDeprecated function: seems_utf81
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
seems_utf8() has been deprecated since WordPress version 6.9.0. Use wp_is_valid_utf8() instead.
External Connections
Potential connections found in static code analysis.
Outbound calls
73
External assets
2
Incoming endpoints
3
Notable Domains
developer.mozilla.org8 · outbound
fengyuanchen.github.io6 · outbound
wppa.nl6 · outbound
stackoverflow.com4 · outbound
0.30000000000000004.com3 · outbound
nicescroll.areaaperta.com3 · outbound
Platform / Reference Domains
github.com5 · platform/reference
w3.org3 · platform/reference
dev.w3.org2 · platform/reference
codex.wordpress.org1 · platform/reference
core.trac.wordpress.org1 · platform/reference
gnu.org1 · platform/reference
opensource.org1 · platform/reference
wordpress.org1 · platform/reference
External Asset Domains
cdnjs.cloudflare.com2 · asset
Incoming Endpoints
/wp-json/wp-photo-album-plus/endPoint/REST
register_rest_route
wp_ajax_nopriv_wppapublic
wp_ajax
Admin AJAX endpoints1
wp_ajax_wppaauthenticated
wp_ajax
Score History
13 score snapshots
v9.3.02.003
25
Latest
- Findings
- 1,822
- Errors
- 5
- Warnings
- 1,817
- Check
- 2.1.0
v9.3.01.003
25
Score
- Findings
- 1,822
- Errors
- 5
- Warnings
- 1,817
- Check
- 2.1.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 25 | 1,822 | 5 | 1,817 | v9.3.02.003 | 2.1.0 |
| 25 | 1,822 | 5 | 1,817 | v9.3.01.003 | 2.1.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Author
Issue
Domain
Related
Contact Form 769 scoreElementor Website Builder – more than just a page builder38 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce22 scoreAkismet Anti-spam: Spam Protection35 scoreLiteSpeed Cache35 scoreAll-in-One WP Migration and Backup34 scoreShortcodes Ultimate – Content Elements24 scorePDF Embedder – PDF Viewer & Embed PDF Files for WordPress91 scorePDF Invoices & Packing Slips for WooCommerce35 scoreFirelight Lightbox52 scoreEnvira Gallery – Image Photo Gallery, Albums, Video Gallery, Slideshows & More93 scoreLightbox & Modal Popup WordPress Plugin – FooBox25 scorePrint, PDF & Email by PrintFriendly100 score
Author
Issue
Domain
Related
Contact Form 769 scoreElementor Website Builder – more than just a page builder38 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce22 scoreAkismet Anti-spam: Spam Protection35 scoreLiteSpeed Cache35 scoreAll-in-One WP Migration and Backup34 scoreShortcodes Ultimate – Content Elements24 scorePDF Embedder – PDF Viewer & Embed PDF Files for WordPress91 scorePDF Invoices & Packing Slips for WooCommerce35 scoreFirelight Lightbox52 scoreEnvira Gallery – Image Photo Gallery, Albums, Video Gallery, Slideshows & More93 scoreLightbox & Modal Popup WordPress Plugin – FooBox25 scorePrint, PDF & Email by PrintFriendly100 score
Related Plugins
Print, PDF & Email by PrintFriendly
20k+ active installs
100
Embed PDF Viewer
20k+ active installs
100
HTML5 Audio Player – The Ultimate No-Code Podcast, MP3 & Audio Player
10k+ active installs
100
Video Popup – Video Lightbox for YouTube, Vimeo & MP4
10k+ active installs
100
ResponsiveVoice Text To Speech
7k+ active installs
100
Buzzsprout Podcasting
5k+ active installs
100