The fastest RSS feeds plugin for WordPress. Includes excerpt & thumbnail image. Use as a news aggregator, autoblog, or RSS parsing.
61
Score
23
Errors
8
Warnings
+0
Change
Category Scores
Security38
Repo91
Performance100
Maintainability83
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Maintainability
17
6 issue groups
Security
12
5 issue groups
Repo Compliance
2
2 issue groups
ERRORMaintainabilitywp function not compatible with requires wpFunction "get_current_screen()" requires WordPress 3.1.0, but your plugin minimum supported version is WordPress 2.8.0.9
- Category
- Maintainability
- Occurrences
- 9
- Severity
- error
Sample message
Function "get_current_screen()" requires WordPress 3.1.0, but your plugin minimum supported version is WordPress 2.8.0.
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found 'WP_RSS_RETRIEVER_VER'.6
- Category
- Security
- Occurrences
- 6
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found 'WP_RSS_RETRIEVER_VER'.
ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_REQUEST['settings']2
- Category
- Security
- Occurrences
- 2
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_REQUEST['settings']
WARNINGSecurityRequest data is not unslashed$_REQUEST['settings'] not unslashed before sanitization. Use wp_unslash() or similar2
- Category
- Security
- Occurrences
- 2
- Severity
- warning
Sample message
$_REQUEST['settings'] not unslashed before sanitization. Use wp_unslash() or similar
WARNINGMaintainabilityerror log var dumpvar_dump() found. Debug code should not normally be used in production.1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
var_dump() found. Debug code should not normally be used in production.
ERRORSecurityException output is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$message'.1
- Category
- Security
- Occurrences
- 1
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$message'.
WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.1
- Category
- Security
- Occurrences
- 1
- Severity
- warning
Sample message
Processing form data without nonce verification.
ERRORMaintainabilityrand mt randmt_rand() is discouraged. Use the far less predictable wp_rand() instead.1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
mt_rand() is discouraged. Use the far less predictable wp_rand() instead.
ERRORMaintainabilityrand seeding mt srandmt_srand() is discouraged. Rand seeding is not necessary when using the wp_rand() function (as you should).1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
mt_srand() is discouraged. Rand seeding is not necessary when using the wp_rand() function (as you should).
Show 3 moreShow less
ERRORRepo Complianceoutdated tested upto header1
- Category
- Repo Compliance
- Occurrences
- 1
- Severity
- error
Sample message
Tested up to: 6.1 < 7.0. The "Tested up to" value in your plugin is not set to the current version of WordPress. This means your plugin will not show up in searches, as we require plugins to be compatible and documented as tested up to the most recent version of WordPress.
WARNINGRepo Complianceplugin header nonexistent domain path1
- Category
- Repo Compliance
- Occurrences
- 1
- Severity
- warning
Sample message
The "Domain Path" header in the plugin file must point to an existing folder. Found: "languages"
WARNINGMaintainabilitytrademarked term1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
The plugin slug includes a restricted term. Your plugin slug - "wp-rss-retriever" - contains the restricted term "wp" which cannot be used at all in your plugin slug.
External Connections
Not analyzed yet.
Score History
First score snapshot
v1.6.10
61
Latest
- Findings
- 31
- Errors
- 23
- Warnings
- 8
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 61 | 31 | 23 | 8 | v1.6.10 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueRelated
Relationship links
Author
Category
Issue
wp function not compatible with requires wp9 findingsOutput is not escaped6 findingsMissing direct file access protection4 findingsInput is not sanitized2 findingsRequest data is not unslashed2 findingserror log var dump1 findingException output is not escaped1 findingNonce verification recommended1 finding
Related
RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator82 scoreSuper RSS Reader – Add attractive RSS Feed Widget76 scoreFeed Post Thumbnail78 scoreClassic Editor63 scoreAkismet Anti-spam: Spam Protection35 scoreAll-in-One WP Migration and Backup34 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreElementor Website Builder – more than just a page builder39 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreLiteSpeed Cache35 scoreWooCommerce21 scoreWP RSS Aggregator – RSS Import, Feed to Post, Autoblogging, AI Content24 scorePodcast Player – Your Podcasting Companion38 scoreWPeMatico RSS Feed Fetcher24 score
Author
Category
Issue
wp function not compatible with requires wp9 findingsOutput is not escaped6 findingsMissing direct file access protection4 findingsInput is not sanitized2 findingsRequest data is not unslashed2 findingserror log var dump1 findingException output is not escaped1 findingNonce verification recommended1 finding
Related
RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator82 scoreSuper RSS Reader – Add attractive RSS Feed Widget76 scoreFeed Post Thumbnail78 scoreClassic Editor63 scoreAkismet Anti-spam: Spam Protection35 scoreAll-in-One WP Migration and Backup34 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreElementor Website Builder – more than just a page builder39 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreLiteSpeed Cache35 scoreWooCommerce21 scoreWP RSS Aggregator – RSS Import, Feed to Post, Autoblogging, AI Content24 scorePodcast Player – Your Podcasting Companion38 scoreWPeMatico RSS Feed Fetcher24 score
Related Plugins
Admin Dashboard RSS Feed
500 active installs
99
Remove RSS Feed
1k+ active installs
92
82
Feed Post Thumbnail
2k+ active installs
78
Super RSS Reader – Add attractive RSS Feed Widget
9k+ active installs
76
Featured Image in RSS Feed by MailerLite
1k+ active installs
72