Simple & easy plugin to add social media sharing icons, buttons like Facebook, Twitter, WhatsApp, Instagram & more
Category Scores
Top Issues by Category
i18n119
security112
maintainability32
Issues Details
265 issues found in latest scan
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$args['after_title']'.
Mismatched text domain. Expected 'wp-socializer' but got 'text_domain'.
The $text text string should have translatable content. Found: ''
$_GET['cnt_id'] not unslashed before sanitization. Use wp_unslash() or similar
Processing form data without nonce verification.
In footer ($in_footer) is not set explicitly wp_enqueue_script; It is recommended to load scripts in the footer. Please set this value to `true` to load it in the footer, or explicitly `false` if it should be loaded in the header.
Resource version not set in call to wp_enqueue_script(). This means new versions of the script may not always be loaded due to browser caching.
Processing form data without nonce verification.
Detected usage of a non-sanitized input variable: $_GET['cnt_id']
Detected usage of a possibly undefined superglobal array index: $_GET['rule_id']. Check that the array index exists before using it.
Scripts must be registered/enqueued via wp_enqueue_script()
The plugin name includes a restricted term. Your chosen plugin name - "WP Socializer - Simple & Easy Social Media Share Icons" - contains the restricted term "wp" which cannot be used at all in your plugin name.
parse_url() is discouraged because of inconsistency in the output across PHP versions; use wp_parse_url() instead.
strip_tags() is discouraged. Use the more comprehensive wp_strip_all_tags() instead.
wp_reset_query() is discouraged. Use wp_reset_postdata() instead.
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "$validation_filter".
Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "WP_Socializer".
Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "ET_BUILDER_PRODUCT_VERSION".
debug_backtrace() found. Debug code should not normally be used in production.
A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.
The $text parameter must be a single text string literal. Found: 'Enter the ID of the CSS/JS resources to not to load in any page. <a href="#" class="tblr_btn" data-id="res_info_box">Click here</a> to see the list of resources. <div class="hidden" data-tglr="res_info_box"><p>' . $inc_text . '</p> <p>Enter the IDs separated by comma. <b>Note: Many of the resources are intelligently loaded based on buttons used in the page. Please use this field only after discussion with the developer.</b></p></div>'
Multiple placeholders in translatable strings should be ordered. Expected "%1$s, %2$s", but got "%s, %s" in 'If you want to use %s anywhere in a custom position then you can use the shortcode <code>[%s]</code>. Please refer shortcodes page on how to customize this shortcode.'.
Plugin name "WP Socializer - Simple & Easy Social Media Share Icons" is different from the name declared in plugin header "WP Socializer".
| Code | Type | Message | Count |
|---|---|---|---|
| WordPress.Security.EscapeOutput.OutputNotEscaped | ERROR | All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$args['after_title']'. | 84 |
| WordPress.WP.I18n.TextDomainMismatch | ERROR | Mismatched text domain. Expected 'wp-socializer' but got 'text_domain'. | 65 |
| WordPress.WP.I18n.NoEmptyStrings | ERROR | The $text text string should have translatable content. Found: '' | 40 |
| WordPress.WP.I18n.MissingArgDomain | ERROR | Missing $domain parameter in function call to __(). | 11 |
| WordPress.Security.ValidatedSanitizedInput.MissingUnslash | WARNING | $_GET['cnt_id'] not unslashed before sanitization. Use wp_unslash() or similar | 9 |
| WordPress.Security.NonceVerification.Recommended | WARNING | Processing form data without nonce verification. | 7 |
| WordPress.WP.EnqueuedResourceParameters.NotInFooter | WARNING | In footer ($in_footer) is not set explicitly wp_enqueue_script; It is recommended to load scripts in the footer. Please set this value to `true` to load it in the footer, or explicitly `false` if it should be loaded in the header. | 7 |
| WordPress.WP.EnqueuedResourceParameters.MissingVersion | WARNING | Resource version not set in call to wp_enqueue_script(). This means new versions of the script may not always be loaded due to browser caching. | 6 |
| WordPress.Security.NonceVerification.Missing | WARNING | Processing form data without nonce verification. | 4 |
| WordPress.Security.ValidatedSanitizedInput.InputNotSanitized | WARNING | Detected usage of a non-sanitized input variable: $_GET['cnt_id'] | 4 |
| WordPress.Security.ValidatedSanitizedInput.InputNotValidated | WARNING | Detected usage of a possibly undefined superglobal array index: $_GET['rule_id']. Check that the array index exists before using it. | 4 |
| WordPress.WP.EnqueuedResources.NonEnqueuedScript | ERROR | Scripts must be registered/enqueued via wp_enqueue_script() | 3 |
| trademarked_term | WARNING | The plugin name includes a restricted term. Your chosen plugin name - "WP Socializer - Simple & Easy Social Media Share Icons" - contains the restricted term "wp" which cannot be used at all in your plugin name. | 3 |
| WordPress.WP.AlternativeFunctions.parse_url_parse_url | ERROR | parse_url() is discouraged because of inconsistency in the output across PHP versions; use wp_parse_url() instead. | 2 |
| WordPress.WP.AlternativeFunctions.strip_tags_strip_tags | ERROR | strip_tags() is discouraged. Use the more comprehensive wp_strip_all_tags() instead. | 2 |
| WordPress.WP.DiscouragedFunctions.wp_reset_query_wp_reset_query | WARNING | wp_reset_query() is discouraged. Use wp_reset_postdata() instead. | 2 |
| missing_direct_file_access_protection | ERROR | PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit; | 2 |
| WordPress.NamingConventions.PrefixAllGlobals.DynamicHooknameFound | WARNING | Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "$validation_filter". | 1 |
| WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedClassFound | WARNING | Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "WP_Socializer". | 1 |
| WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedConstantFound | WARNING | Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "ET_BUILDER_PRODUCT_VERSION". | 1 |
| WordPress.PHP.DevelopmentFunctions.error_log_debug_backtrace | WARNING | debug_backtrace() found. Debug code should not normally be used in production. | 1 |
| WordPress.WP.I18n.MissingTranslatorsComment | ERROR | A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders. | 1 |
| WordPress.WP.I18n.NonSingularStringLiteralText | ERROR | The $text parameter must be a single text string literal. Found: 'Enter the ID of the CSS/JS resources to not to load in any page. <a href="#" class="tblr_btn" data-id="res_info_box">Click here</a> to see the list of resources. <div class="hidden" data-tglr="res_info_box"><p>' . $inc_text . '</p> <p>Enter the IDs separated by comma. <b>Note: Many of the resources are intelligently loaded based on buttons used in the page. Please use this field only after discussion with the developer.</b></p></div>' | 1 |
| WordPress.WP.I18n.UnorderedPlaceholdersText | ERROR | Multiple placeholders in translatable strings should be ordered. Expected "%1$s, %2$s", but got "%s, %s" in 'If you want to use %s anywhere in a custom position then you can use the shortcode <code>[%s]</code>. Please refer shortcodes page on how to customize this shortcode.'. | 1 |
| mismatched_plugin_name | WARNING | Plugin name "WP Socializer - Simple & Easy Social Media Share Icons" is different from the name declared in plugin header "WP Socializer". | 1 |
Latest Snapshot
Findings
265
Errors
214
Warnings
51
Score History
First score snapshot
First scan completed Jun 20, 2026
v7.9 · Plugin Check 2.0.0 · Model 2026.06-mvp-static-v2
Jun 20, 2026
v7.9
36
Latest
- Findings
- 265
- Errors
- 214
- Warnings
- 51
- Plugin Check
- 2.0.0
- Model
- 2026.06-mvp-static-v2
| Scan | Score | Findings | Errors | Warnings | Plugin | Plugin Check | Model |
|---|---|---|---|---|---|---|---|
| Jun 20, 2026Latest | 36 | 265 | 214 | 51 | v7.9 | 2.0.0 | 2026.06-mvp-static-v2 |