WP-SCSS

Compiles .scss files to .css and enqueues them.

v4.0.8Connect ThinkUpdated Added 40k+ installs86% rating
34
Score
269
Errors
13
Warnings
+0
Change

Category Scores

Security0
Repo85
Performance100
Maintainability57

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

282 findings

Security

236

2 issue groups

Maintainability

44

15 issue groups

Supply Chain

1

1 issue group

Repo Compliance

1

1 issue group

ERRORSecurityException Not EscapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"$expectedLength arguments required, but only $length $verb passed."'.226
Category
Security
Occurrences
226
Severity
error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"$expectedLength arguments required, but only $length $verb passed."'.

ERRORSecurityOutput Not EscapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$base_compiling_folder'.10
Category
Security
Occurrences
10
Severity
error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$base_compiling_folder'.

ERRORMaintainabilitywp function not compatible with requires wpFunction "mb_strlen()" requires WordPress 4.2.0, but your plugin minimum supported version is WordPress 3.0.1.8
Category
Maintainability
Occurrences
8
Severity
error

Sample message

Function "mb_strlen()" requires WordPress 4.2.0, but your plugin minimum supported version is WordPress 3.0.1.

WARNINGMaintainabilityNon Prefixed Variable FoundGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$autoload".7
Category
Maintainability
Occurrences
7
Severity
warning

Sample message

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$autoload".

ERRORMaintainabilityrand mt randmt_rand() is discouraged. Use the far less predictable wp_rand() instead.6
Category
Maintainability
Occurrences
6
Severity
error

Sample message

mt_rand() is discouraged. Use the far less predictable wp_rand() instead.

ERRORMaintainabilityNot AllowedUse of heredoc syntax (<<<) is not allowed; use standard strings or inline HTML instead3
Category
Maintainability
Occurrences
3
Severity
error

Sample message

Use of heredoc syntax (<<<) is not allowed; use standard strings or inline HTML instead

ERRORMaintainabilityfile system operations is writableFile operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: is_writable().3
Category
Maintainability
Occurrences
3
Severity
error

Sample message

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: is_writable().

ERRORMaintainabilitymissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;3
Category
Maintainability
Occurrences
3
Severity
error

Sample message

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

WARNINGMaintainabilitytrademarked termThe plugin name includes a restricted term. Your chosen plugin name - "WP-SCSS" - contains the restricted term "wp" which cannot be used at all in your plugin name.3
Category
Maintainability
Occurrences
3
Severity
warning

Sample message

The plugin name includes a restricted term. Your chosen plugin name - "WP-SCSS" - contains the restricted term "wp" which cannot be used at all in your plugin name.

ERRORMaintainabilitydate datedate() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.2
Category
Maintainability
Occurrences
2
Severity
error

Sample message

date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.

Show 9 more
ERRORMaintainabilityfile system operations fwrite2
Category
Maintainability
Occurrences
2
Severity
error

Sample message

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fwrite().

ERRORMaintainabilityunlink unlink2
Category
Maintainability
Occurrences
2
Severity
error

Sample message

unlink() is discouraged. Use wp_delete_file() to delete a file.

WARNINGMaintainabilityNon Prefixed Function Found1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: &quot;get_base_dir_from_name&quot;.

WARNINGMaintainabilityerror log trigger error1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

trigger_error() found. Debug code should not normally be used in production.

ERRORMaintainabilityfile system operations fclose1
Category
Maintainability
Occurrences
1
Severity
error

Sample message

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fclose().

ERRORMaintainabilityAdd option Param3Found1
Category
Maintainability
Occurrences
1
Severity
error

Sample message

The parameter "$deprecated" at position #3 of add_option() has been deprecated since WordPress version 2.3.0. Use "" instead.

ERRORSupply Chainhidden files1
Category
Supply Chain
Occurrences
1
Severity
error

Sample message

Hidden files are not permitted.

ERRORRepo Complianceoutdated tested upto header1
Category
Repo Compliance
Occurrences
1
Severity
error

Sample message

Tested up to: 6.8 < 7.0. The "Tested up to" value in your plugin is not set to the current version of WordPress. This means your plugin will not show up in searches, as we require plugins to be compatible and documented as tested up to the most recent version of WordPress.

WARNINGMaintainabilityunexpected markdown file1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

Unexpected markdown file "DEPLOY.md" detected in plugin root. Only specific markdown files are expected in production plugins.

Score History

First score snapshot

v4.0.8

34

Latest

Findings
282
Errors
269
Warnings
13
Check
2.0.0

Related Plugins

Code Embed

10k+ active installs

100
Customize Admin

4k+ active installs

99
Add Admin CSS

10k+ active installs

98
Design Upgrade for LearnDash

7k+ active installs

97