Display TripAdvisor reviews in a slider or grid. Download multiple locations, store reviews locally for fast loading, and show badges, photos, and tem …
25
Score
1,063
Errors
2,582
Warnings
+0
Change
Category Scores
Security0
Repo97
Performance100
Maintainability0
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Maintainability
2,511
14 issue groups
Security
1,079
11 issue groups
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$account_addon_ids".1,861
- Category
- Maintainability
- Occurrences
- 1,861
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$account_addon_ids".
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '" <a href='{$skip_url}' class='button button-small button-secondary'>{$use_plugin_anonymously_text}</a>"'.621
- Category
- Security
- Occurrences
- 621
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '" <a href='{$skip_url}' class='button button-small button-secondary'>{$use_plugin_anonymously_text}</a>"'.
ERRORMaintainabilitywp function not compatible with requires wpFunction "esc_textarea()" requires WordPress 3.1.0, but your plugin minimum supported version is WordPress 3.0.1.168
- Category
- Maintainability
- Occurrences
- 168
- Severity
- error
Sample message
Function "esc_textarea()" requires WordPress 3.1.0, but your plugin minimum supported version is WordPress 3.0.1.
ERRORSecurityUnsafe printing functionAll output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.131
- Category
- Security
- Occurrences
- 131
- Severity
- error
Sample message
All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.
WARNINGMaintainabilityNon-prefixed functionFunctions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "_fs_text".107
- Category
- Maintainability
- Occurrences
- 107
- Severity
- warning
Sample message
Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "_fs_text".
WARNINGMaintainabilityNon-prefixed constantGlobal constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "DEFAULT_BR_TEXT".99
- Category
- Maintainability
- Occurrences
- 99
- Severity
- warning
Sample message
Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "DEFAULT_BR_TEXT".
WARNINGSecurityRequest data is not unslashed$_GET['pnum'] not unslashed before sanitization. Use wp_unslash() or similar77
- Category
- Security
- Occurrences
- 77
- Severity
- warning
Sample message
$_GET['pnum'] not unslashed before sanitization. Use wp_unslash() or similar
WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.71
- Category
- Maintainability
- Occurrences
- 71
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGSecurityInput is not validatedDetected usage of a possibly undefined superglobal array index: $_GET['page']. Check that the array index exists before using it.67
- Category
- Security
- Occurrences
- 67
- Severity
- warning
Sample message
Detected usage of a possibly undefined superglobal array index: $_GET['page']. Check that the array index exists before using it.
WARNINGMaintainabilityNon-prefixed classClasses declared by a theme/plugin should start with the theme/plugin prefix. Found: "FS_Admin_Menu_Manager".66
- Category
- Maintainability
- Occurrences
- 66
- Severity
- warning
Sample message
Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "FS_Admin_Menu_Manager".
Show 15 moreShow less
WARNINGMaintainabilityNo Caching65
- Category
- Maintainability
- Occurrences
- 65
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
WARNINGSecurityDatabase parameter is not escaped38
- Category
- Security
- Occurrences
- 38
- Severity
- warning
Sample message
Unescaped parameter $reviews_table used in $wpdb->get_results()\n$reviews_table assigned unsafely at line 193.
ERRORSecuritySQL query is not prepared36
- Category
- Security
- Occurrences
- 36
- Severity
- error
Sample message
Use placeholders and $wpdb->prepare(); found $filterratingtext
WARNINGSecurityInterpolated SQL is not prepared35
- Category
- Security
- Occurrences
- 35
- Severity
- warning
Sample message
Use placeholders and $wpdb->prepare(); found interpolated variable $placeholders at " WHERE id IN ($placeholders)"
WARNINGSecurityInput is not sanitized31
- Category
- Security
- Occurrences
- 31
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_GET['pnum']
WARNINGSecurityNonce verification recommended30
- Category
- Security
- Occurrences
- 30
- Severity
- warning
Sample message
Processing form data without nonce verification.
ERRORMaintainabilityMissing direct file access protection16
- Category
- Maintainability
- Occurrences
- 16
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
ERRORMaintainabilityOffloaded Content15
- Category
- Maintainability
- Occurrences
- 15
- Severity
- error
Sample message
Offloading images, js, css, and other scripts to your servers or any remote service is disallowed.
ERRORMaintainabilitycurl curl setopt12
- Category
- Maintainability
- Occurrences
- 12
- Severity
- error
Sample message
Using cURL functions is highly discouraged. Use wp_remote_get() instead.
ERRORMaintainabilityGoto statement found10
- Category
- Maintainability
- Occurrences
- 10
- Severity
- error
Sample message
The "goto" language construct should not be used.
ERRORMaintainabilitydate date9
- Category
- Maintainability
- Occurrences
- 9
- Severity
- error
Sample message
date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.
ERRORSecurityException output is not escaped7
- Category
- Security
- Occurrences
- 7
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$message'.
ERRORSecurityDatabase parameter is not escaped6
- Category
- Security
- Occurrences
- 6
- Severity
- error
Sample message
Unescaped parameter $query used in $wpdb->get_results()\n$query assigned unsafely at line 608.
WARNINGMaintainabilityDiscouraged PHP function6
- Category
- Maintainability
- Occurrences
- 6
- Severity
- warning
Sample message
The use of function ini_set() is discouraged
WARNINGMaintainabilitySchema Change6
- Category
- Maintainability
- Occurrences
- 6
- Severity
- warning
Sample message
Attempting a database schema change is discouraged.
External Connections
Potential connections found in static code analysis.
Outbound calls
238
External assets
20
Incoming endpoints
11
Notable Domains
freemius.com8 · outbound
tripadvisor.com8 · outbound
php.net6 · outbound
crawl.ljapps.com4 · outbound
sourceforge.net4 · outbound
facebook.com3 · outbound
Platform / Reference Domains
gnu.org111 · platform/reference
w3.org13 · platform/reference
wordpress.org10 · platform/reference
github.com4 · platform/reference
api.wordpress.org2 · platform/reference
make.wordpress.org2 · platform/reference
core.trac.wordpress.org1 · platform/reference
External Asset Domains
wpreviewslider.com18 · asset + outbound
ljapps.com14 · asset + outbound
s3-us-west-2.amazonaws.com3 · asset
gravatar.com2 · asset
s3-media2.fl.yelpcdn.com1 · asset
s3-media3.fl.tripadvisorcdn.com1 · asset
Incoming Endpoints
No public endpoints detected.
Admin AJAX endpoints11
admin_post_fs_clone_resolutionauthenticated
admin_post
wp_ajax_fs_dismiss_notice_action_{$ajax_action_suffix}authenticated
wp_ajax
wp_ajax_fs_toggle_debug_modeauthenticated
wp_ajax
wp_ajax_tripadvisor_find_reviewsauthenticated
wp_ajax
wp_ajax_tripadvisor_get_resultsauthenticated
wp_ajax
wp_ajax_tripadvisor_hide_reviewauthenticated
wp_ajax
wp_ajax_wptripadvisor_add_sourceauthenticated
wp_ajax
wp_ajax_wptripadvisor_download_sourceauthenticated
wp_ajax
wp_ajax_wptripadvisor_get_previewauthenticated
wp_ajax
wp_ajax_wptripadvisor_save_reviewauthenticated
wp_ajax
wp_ajax_wptripadvisor_save_templateauthenticated
wp_ajax
Score History
4 score snapshots
v14.8
25
Latest
- Findings
- 3,645
- Errors
- 1,063
- Warnings
- 2,582
- Check
- 2.0.0
v14.7
25
Score
- Findings
- 3,645
- Errors
- 1,063
- Warnings
- 2,582
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 25 | 3,645 | 1,063 | 2,582 | v14.8 | 2.0.0 |
| 25 | 3,645 | 1,063 | 2,582 | v14.7 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Author
Category
Issue
Domain
Related
Real Testimonials – Testimonial Slider, Collect Customer Reviews and Video Testimonials94 scoreNotificationX – FOMO, Live Sales Notification, WooCommerce Sales Popup, GDPR, Social Proof, Announcement Banner & Floating Notification Bar98 scoreWP Google Review Slider25 scoreWP Review Slider25 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce21 scoreAkismet Anti-spam: Spam Protection35 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder39 scoreClassic Editor63 scoreLiteSpeed Cache35 scoreAll-in-One WP Migration and Backup34 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreTrustedSite50 score
Author
Category
Issue
Domain
Related
Real Testimonials – Testimonial Slider, Collect Customer Reviews and Video Testimonials94 scoreNotificationX – FOMO, Live Sales Notification, WooCommerce Sales Popup, GDPR, Social Proof, Announcement Banner & Floating Notification Bar98 scoreWP Google Review Slider25 scoreWP Review Slider25 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce21 scoreAkismet Anti-spam: Spam Protection35 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder39 scoreClassic Editor63 scoreLiteSpeed Cache35 scoreAll-in-One WP Migration and Backup34 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreTrustedSite50 score
Related Plugins
Reviews Widgets for Google & 45+ platforms by Repuso
1k+ active installs
100
98
Reviewkit – Trustpilot Reviews Widget & Embed
800 active installs
97
ProveSource Social Proof
2k+ active installs
96
94
Nudgify Social Proof
500 active installs
80