Display TripAdvisor reviews in a slider or grid. Download multiple locations, store reviews locally for fast loading, and show badges, photos, and tem …
24
Score
1,135
Errors
2,650
Warnings
-1
Change
Category Scores
Security0
Repo91
Performance100
Maintainability0
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Maintainability
2,578
13 issue groups
Security
1,144
12 issue groups
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$account_addon_ids".1,883
- Category
- Maintainability
- Occurrences
- 1,883
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$account_addon_ids".
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '" <a href='{$skip_url}' class='button button-small button-secondary'>{$use_plugin_anonymously_text}</a>"'.630
- Category
- Security
- Occurrences
- 630
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '" <a href='{$skip_url}' class='button button-small button-secondary'>{$use_plugin_anonymously_text}</a>"'.
ERRORMaintainabilitywp function not compatible with requires wpFunction "esc_textarea()" requires WordPress 3.1.0, but your plugin minimum supported version is WordPress 3.0.1.189
- Category
- Maintainability
- Occurrences
- 189
- Severity
- error
Sample message
Function "esc_textarea()" requires WordPress 3.1.0, but your plugin minimum supported version is WordPress 3.0.1.
ERRORSecurityUnsafe printing functionAll output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.142
- Category
- Security
- Occurrences
- 142
- Severity
- error
Sample message
All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.
WARNINGMaintainabilityNon-prefixed functionFunctions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "_fs_text".107
- Category
- Maintainability
- Occurrences
- 107
- Severity
- warning
Sample message
Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "_fs_text".
WARNINGMaintainabilityNon-prefixed constantGlobal constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "DEFAULT_BR_TEXT".99
- Category
- Maintainability
- Occurrences
- 99
- Severity
- warning
Sample message
Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "DEFAULT_BR_TEXT".
WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.81
- Category
- Maintainability
- Occurrences
- 81
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGSecurityRequest data is not unslashed$_GET['page'] not unslashed before sanitization. Use wp_unslash() or similar78
- Category
- Security
- Occurrences
- 78
- Severity
- warning
Sample message
$_GET['page'] not unslashed before sanitization. Use wp_unslash() or similar
WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().75
- Category
- Maintainability
- Occurrences
- 75
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
WARNINGMaintainabilityNon-prefixed classClasses declared by a theme/plugin should start with the theme/plugin prefix. Found: "FS_Admin_Menu_Manager".68
- Category
- Maintainability
- Occurrences
- 68
- Severity
- warning
Sample message
Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "FS_Admin_Menu_Manager".
Show 15 moreShow less
WARNINGSecurityInput is not validated67
- Category
- Security
- Occurrences
- 67
- Severity
- warning
Sample message
Detected usage of a possibly undefined superglobal array index: $_GET['page']. Check that the array index exists before using it.
ERRORSecuritySQL query is not prepared47
- Category
- Security
- Occurrences
- 47
- Severity
- error
Sample message
Use placeholders and $wpdb->prepare(); found $fallback_query
WARNINGSecurityInterpolated SQL is not prepared45
- Category
- Security
- Occurrences
- 45
- Severity
- warning
Sample message
Use placeholders and $wpdb->prepare(); found interpolated variable $placeholders at " WHERE id IN ($placeholders)"
WARNINGSecurityDatabase parameter is not escaped42
- Category
- Security
- Occurrences
- 42
- Severity
- warning
Sample message
Unescaped parameter $reviews_table used in $wpdb->get_results()\n$reviews_table assigned unsafely at line 192.
WARNINGSecurityInput is not sanitized32
- Category
- Security
- Occurrences
- 32
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_GET['page']
WARNINGSecurityNonce verification recommended27
- Category
- Security
- Occurrences
- 27
- Severity
- warning
Sample message
Processing form data without nonce verification.
ERRORMaintainabilityMissing direct file access protection21
- Category
- Maintainability
- Occurrences
- 21
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
ERRORSecurityDatabase parameter is not escaped17
- Category
- Security
- Occurrences
- 17
- Severity
- error
Sample message
Unescaped parameter $fallback_query used in $wpdb->get_results()\n$fallback_query assigned unsafely at line 494.
ERRORMaintainabilityOffloaded Content15
- Category
- Maintainability
- Occurrences
- 15
- Severity
- error
Sample message
Offloading images, js, css, and other scripts to your servers or any remote service is disallowed.
ERRORMaintainabilitydate date12
- Category
- Maintainability
- Occurrences
- 12
- Severity
- error
Sample message
date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.
ERRORMaintainabilitycurl curl setopt12
- Category
- Maintainability
- Occurrences
- 12
- Severity
- error
Sample message
Using cURL functions is highly discouraged. Use wp_remote_get() instead.
ERRORMaintainabilityGoto statement found10
- Category
- Maintainability
- Occurrences
- 10
- Severity
- error
Sample message
The "goto" language construct should not be used.
WARNINGSecurityMissing nonce verification10
- Category
- Security
- Occurrences
- 10
- Severity
- warning
Sample message
Processing form data without nonce verification.
ERRORSecurityException output is not escaped7
- Category
- Security
- Occurrences
- 7
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$message'.
WARNINGMaintainabilityDiscouraged PHP function6
- Category
- Maintainability
- Occurrences
- 6
- Severity
- warning
Sample message
The use of function ini_set() is discouraged
External Connections
Potential connections found in static code analysis.
Outbound calls
265
External assets
20
Incoming endpoints
15
Notable Domains
momentjs.com12 · outbound
freemius.com8 · outbound
facebook.com7 · outbound
php.net6 · outbound
tripadvisor.com5 · outbound
crawl.ljapps.com4 · outbound
Platform / Reference Domains
gnu.org110 · platform/reference
w3.org10 · platform/reference
wordpress.org10 · platform/reference
github.com6 · platform/reference
opensource.org3 · platform/reference
api.wordpress.org2 · platform/reference
make.wordpress.org2 · platform/reference
core.trac.wordpress.org1 · platform/reference
External Asset Domains
wpreviewslider.com28 · asset + outbound
ljapps.com11 · asset + outbound
s3-us-west-2.amazonaws.com3 · asset
gravatar.com2 · asset
s3-media2.fl.yelpcdn.com1 · asset
s3-media3.fl.tripadvisorcdn.com1 · asset
Incoming Endpoints
No public endpoints detected.
Admin AJAX endpoints15
admin_post_fs_clone_resolutionauthenticated
admin_post
wp_ajax_fs_dismiss_notice_action_{$ajax_action_suffix}authenticated
wp_ajax
wp_ajax_fs_toggle_debug_modeauthenticated
wp_ajax
wp_ajax_tripadvisor_find_reviewsauthenticated
wp_ajax
wp_ajax_tripadvisor_get_resultsauthenticated
wp_ajax
wp_ajax_tripadvisor_hide_reviewauthenticated
wp_ajax
wp_ajax_wppro_get_overall_chart_dataauthenticated
wp_ajax
wp_ajax_wprevpro_analytics_platformauthenticated
wp_ajax
wp_ajax_wprevpro_analytics_platform_volumeauthenticated
wp_ajax
wp_ajax_wprevpro_analytics_volumeauthenticated
wp_ajax
wp_ajax_wptripadvisor_add_sourceauthenticated
wp_ajax
wp_ajax_wptripadvisor_download_sourceauthenticated
wp_ajax
3 more hidden
Score History
5 score snapshots
v14.9
24
Latest
- Findings
- 3,785
- Errors
- 1,135
- Warnings
- 2,650
- Check
- 2.1.0
v14.8
25
Score
- Findings
- 3,645
- Errors
- 1,063
- Warnings
- 2,582
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 24 | 3,785 | 1,135 | 2,650 | v14.9 | 2.1.0 |
| 25 | 3,645 | 1,063 | 2,582 | v14.8 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Author
Category
Issue
Domain
Related
Widgets for Google Reviews95 scoreWP Google Review Slider25 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce22 scoreAkismet Anti-spam: Spam Protection35 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder39 scoreClassic Editor63 scoreLiteSpeed Cache35 scoreAll-in-One WP Migration and Backup34 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreRich Showcase for Google Reviews32 scoreReal Testimonials – Testimonial Slider, Collect Customer Reviews and Video Testimonials71 scoreNotificationX – FOMO, Live Sales Notification, WooCommerce Sales Popup, GDPR, Social Proof, Announcement Banner & Floating Notification Bar74 score
Author
Category
Issue
Domain
Related
Widgets for Google Reviews95 scoreWP Google Review Slider25 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce22 scoreAkismet Anti-spam: Spam Protection35 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder39 scoreClassic Editor63 scoreLiteSpeed Cache35 scoreAll-in-One WP Migration and Backup34 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreRich Showcase for Google Reviews32 scoreReal Testimonials – Testimonial Slider, Collect Customer Reviews and Video Testimonials71 scoreNotificationX – FOMO, Live Sales Notification, WooCommerce Sales Popup, GDPR, Social Proof, Announcement Banner & Floating Notification Bar74 score
Related Plugins
Reviews Widgets for Google & 45+ platforms by Repuso
1k+ active installs
100
Reviewkit – Trustpilot Reviews Widget & Embed
1k+ active installs
97
ProveSource Social Proof
2k+ active installs
96
Widgets for Google Reviews
1m+ active installs
95
TrustedSite
10k+ active installs
90
Nudgify Social Proof
500 active installs
81