[ โ ๐๐๐๐๐๐ ๐๐๐๐๐๐๐ ๐ต๐ ๐ซ๐๐๐๐ ] phpMyAdmin - Database Browser & Manager (for MySQL & MariaDB)
21
Score
4,528
Errors
6,435
Warnings
+0
Change
Category Scores
Security0
Repo75
Performance100
Maintainability0
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Security
5,523
9 issue groups
I18n
3,730
4 issue groups
Maintainability
1,481
12 issue groups
ERRORI18nMissing Arg DomainMissing $domain parameter in function call to __().3,118
- Category
- I18n
- Occurrences
- 3,118
- Severity
- error
Sample message
Missing $domain parameter in function call to __().
WARNINGSecurityMissing nonce verificationProcessing form data without nonce verification.1,787
- Category
- Security
- Occurrences
- 1,787
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$$".1,173
- Category
- Maintainability
- Occurrences
- 1,173
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$$".
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_COOKIE[$session_name]1,171
- Category
- Security
- Occurrences
- 1,171
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_COOKIE[$session_name]
WARNINGSecurityRequest data is not unslashed$_COOKIE[$session_name] not unslashed before sanitization. Use wp_unslash() or similar1,047
- Category
- Security
- Occurrences
- 1,047
- Severity
- warning
Sample message
$_COOKIE[$session_name] not unslashed before sanitization. Use wp_unslash() or similar
WARNINGSecurityInput is not validatedDetected usage of a possibly undefined superglobal array index: $_FILES['import_file']['error']. Check that the array index exists before using it.518
- Category
- Security
- Occurrences
- 518
- Severity
- warning
Sample message
Detected usage of a possibly undefined superglobal array index: $_FILES['import_file']['error']. Check that the array index exists before using it.
WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.483
- Category
- Security
- Occurrences
- 483
- Severity
- warning
Sample message
Processing form data without nonce verification.
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"<script>cat_term_ids = $out;</script>"'.386
- Category
- Security
- Occurrences
- 386
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"<script>cat_term_ids = $out;</script>"'.
ERRORI18nNon Singular String Literal TextThe $text parameter must be a single text string literal. Found: "Error: could not create the session file. " .$e->getMessage()306
- Category
- I18n
- Occurrences
- 306
- Severity
- error
Sample message
The $text parameter must be a single text string literal. Found: "Error: could not create the session file. " .$e->getMessage()
ERRORI18nMissing Translators CommentA function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.276
- Category
- I18n
- Occurrences
- 276
- Severity
- error
Sample message
A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.
Show 15 moreShow less
ERRORSecurityUnsafe printing function56
- Category
- Security
- Occurrences
- 56
- Severity
- error
Sample message
All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.
WARNINGMaintainabilityerror log trigger error51
- Category
- Maintainability
- Occurrences
- 51
- Severity
- warning
Sample message
trigger_error() found. Debug code should not normally be used in production.
ERRORSecuritySQL query is not prepared44
- Category
- Security
- Occurrences
- 44
- Severity
- error
Sample message
Use placeholders and $wpdb->prepare(); found $colum_names
ERRORMaintainabilityparse url parse url34
- Category
- Maintainability
- Occurrences
- 34
- Severity
- error
Sample message
parse_url() is discouraged because of inconsistency in the output across PHP versions; use wp_parse_url() instead.
WARNINGMaintainabilityDirect Query33
- Category
- Maintainability
- Occurrences
- 33
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGMaintainabilityDiscouraged PHP function32
- Category
- Maintainability
- Occurrences
- 32
- Severity
- warning
Sample message
The use of function ini_set() is discouraged
ERRORSecurityException output is not escaped31
- Category
- Security
- Occurrences
- 31
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"$method not supported, use from: "'.
WARNINGMaintainabilityNo Caching30
- Category
- Maintainability
- Occurrences
- 30
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
ERRORI18nUnordered Placeholders Text30
- Category
- I18n
- Occurrences
- 30
- Severity
- error
Sample message
Multiple placeholders in translatable strings should be ordered. Expected "%1$1s, %2$2s", but got "%1s, %2s" in 'Showing rows %1s - %2s'.
WARNINGMaintainabilityNon-prefixed constant28
- Category
- Maintainability
- Occurrences
- 28
- Severity
- warning
Sample message
Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "AUTOLOAD_FILE".
ERRORMaintainabilitydate date26
- Category
- Maintainability
- Occurrences
- 26
- Severity
- error
Sample message
date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.
ERRORMaintainabilityMissing direct file access protection21
- Category
- Maintainability
- Occurrences
- 21
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
ERRORMaintainabilityfile system operations fclose20
- Category
- Maintainability
- Occurrences
- 20
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fclose().
ERRORMaintainabilityfile system operations fopen17
- Category
- Maintainability
- Occurrences
- 17
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fopen().
ERRORMaintainabilitycurl curl setopt16
- Category
- Maintainability
- Occurrences
- 16
- Severity
- error
Sample message
Using cURL functions is highly discouraged. Use wp_remote_get() instead.
External Connections
Not analyzed yet.
Score History
First score snapshot
v5.2.2.01
21
Latest
- Findings
- 10,963
- Errors
- 4,528
- Warnings
- 6,435
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 21 | 10,963 | 4,528 | 6,435 | v5.2.2.01 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueRelated
Relationship links
Plugin
Author
Issue
Missing Arg Domain3,118 findingsMissing nonce verification1,787 findingsNon-prefixed global variable1,173 findingsInput is not sanitized1,171 findingsRequest data is not unslashed1,047 findingsInput is not validated518 findingsNonce verification recommended483 findingsOutput is not escaped386 findings
Related
Wordfence Security โ Firewall, Malware Scan, and Login Security21 scoreContact Form 769 scoreLiteSpeed Cache35 scoreWooCommerce21 scoreAkismet Anti-spam: Spam Protection35 scoreAll-in-One WP Migration and Backup34 scoreSite Kit by Google โ Analytics, Search Console, AdSense, Speed25 scoreWP Mail SMTP by WPForms โ The Most Popular SMTP and Email Log Plugin30 scoreHostinger Tools82 scoreReally Simple Security โ Simple and Performant Security (formerly Really Simple SSL)19 scoreAdvanced Custom Fields (ACFยฎ)23 scoreAdvanced Database Cleaner โ Optimize & Clean Database to Speed Up Site Performance30 scoreSearch Regex76 scoreBackUpWordPress27 score
Plugin
Author
Issue
Missing Arg Domain3,118 findingsMissing nonce verification1,787 findingsNon-prefixed global variable1,173 findingsInput is not sanitized1,171 findingsRequest data is not unslashed1,047 findingsInput is not validated518 findingsNonce verification recommended483 findingsOutput is not escaped386 findings
Related
Wordfence Security โ Firewall, Malware Scan, and Login Security21 scoreContact Form 769 scoreLiteSpeed Cache35 scoreWooCommerce21 scoreAkismet Anti-spam: Spam Protection35 scoreAll-in-One WP Migration and Backup34 scoreSite Kit by Google โ Analytics, Search Console, AdSense, Speed25 scoreWP Mail SMTP by WPForms โ The Most Popular SMTP and Email Log Plugin30 scoreHostinger Tools82 scoreReally Simple Security โ Simple and Performant Security (formerly Really Simple SSL)19 scoreAdvanced Custom Fields (ACFยฎ)23 scoreAdvanced Database Cleaner โ Optimize & Clean Database to Speed Up Site Performance30 scoreSearch Regex76 scoreBackUpWordPress27 score
Related Plugins
Database Collation Fix
1k+ active installs
100
Change Table Prefix
1k+ active installs
99
Easy Actions Scheduler Cleaner
800 active installs
99
Simple Table Manager
400 active installs
99
WP-ServerInfo
10k+ active installs
98
Transient Cleaner
1k+ active installs
96