SAML authentication for WordPress.
79
Score
0
Errors
25
Warnings
+0
Change
Category Scores
Security65
Repo100
Performance100
Maintainability91
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Security
12
3 issue groups
Maintainability
12
5 issue groups
I18n
1
1 issue group
WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.7
- Category
- Security
- Occurrences
- 7
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGMaintainabilityerror log error logerror_log() found. Debug code should not normally be used in production.5
- Category
- Maintainability
- Occurrences
- 5
- Severity
- warning
Sample message
error_log() found. Debug code should not normally be used in production.
WARNINGSecurityRequest data is not unslashed$_SERVER['REQUEST_URI'] not unslashed before sanitization. Use wp_unslash() or similar3
- Category
- Security
- Occurrences
- 3
- Severity
- warning
Sample message
$_SERVER['REQUEST_URI'] not unslashed before sanitization. Use wp_unslash() or similar
WARNINGMaintainabilitytrademarked termThe plugin name includes a restricted term. Your chosen plugin name - "WP SAML Auth" - contains the restricted term "wp" which cannot be used at all in your plugin name.3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
The plugin name includes a restricted term. Your chosen plugin name - "WP SAML Auth" - contains the restricted term "wp" which cannot be used at all in your plugin name.
WARNINGMaintainabilityNon-prefixed functionFunctions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "wpsa_boostrap".2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "wpsa_boostrap".
WARNINGSecurityMissing nonce verificationProcessing form data without nonce verification.2
- Category
- Security
- Occurrences
- 2
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGI18nDiscouraged text-domain loadingload_plugin_textdomain() has been discouraged since WordPress version 4.6. When your plugin is hosted on WordPress.org, you no longer need to manually include this function call for translations under your plugin slug. WordPress will automatically load the translations for you as needed.1
- Category
- I18n
- Occurrences
- 1
- Severity
- warning
Sample message
load_plugin_textdomain() has been discouraged since WordPress version 4.6. When your plugin is hosted on WordPress.org, you no longer need to manually include this function call for translations under your plugin slug. WordPress will automatically load the translations for you as needed.
WARNINGMaintainabilitymissing composer json fileThe "/vendor" directory using composer exists, but "composer.json" file is missing.1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
The "/vendor" directory using composer exists, but "composer.json" file is missing.
WARNINGMaintainabilityupgrade notice limitThe upgrade notice for "2.2.0" exceeds the limit of 300 characters.1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
The upgrade notice for "2.2.0" exceeds the limit of 300 characters.
External Connections
Potential connections found in static code analysis.
Outbound calls
149
External assets
0
Incoming endpoints
0
Notable Domains
php-fig.org2 · outbound
getcomposer.org1 · outbound
pantheon.io1 · outbound
php.net1 · outbound
saml2int.org1 · outbound
schemas.xmlsoap.org1 · outbound
Platform / Reference Domains
w3.org107 · platform/reference
github.com26 · platform/reference
opensource.org4 · platform/reference
wordpress.org4 · platform/reference
External Asset Domains
No external asset domains detected.
Incoming Endpoints
No public endpoints detected.
Score History
3 score snapshots
v2.3.4
79
Latest
- Findings
- 25
- Errors
- 0
- Warnings
- 25
- Check
- 2.0.0
v2.3.3
79
Score
- Findings
- 24
- Errors
- 0
- Warnings
- 24
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 79 | 25 | 0 | 25 | v2.3.4 | 2.0.0 |
| 79 | 24 | 0 | 24 | v2.3.3 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Plugin
Author
Issue
Domain
Related
Elementor Website Builder – more than just a page builder39 scoreWooCommerce22 scoreAkismet Anti-spam: Spam Protection35 scoreContact Form 769 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreAll-in-One WP Migration and Backup34 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreHostinger Tools82 scoreLimit Login Attempts40 scoreTwo Factor42 scoreWPS Limit Login40 scoreWP-Members Membership Plugin24 scoreGoogle Authenticator41 score
Plugin
Author
Issue
Domain
Related
Elementor Website Builder – more than just a page builder39 scoreWooCommerce22 scoreAkismet Anti-spam: Spam Protection35 scoreContact Form 769 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreAll-in-One WP Migration and Backup34 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreHostinger Tools82 scoreLimit Login Attempts40 scoreTwo Factor42 scoreWPS Limit Login40 scoreWP-Members Membership Plugin24 scoreGoogle Authenticator41 score
Related Plugins
Active Directory Integration / LDAP Integration
4k+ active installs
100
Shibboleth
3k+ active installs
100
WP Basic Authentication
2k+ active installs
100
Logged-in-only
700 active installs
100
Protect Login
600 active installs
100
Firebase Authentication
500 active installs
100