One-click like buttons your visitors actually use, plus a built-in analytics dashboard that shows what your audience loves. No vote limits.
28
Score
285
Errors
783
Warnings
+0
Change
Category Scores
Security0
Repo100
Performance98
Maintainability15
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Security
676
11 issue groups
Maintainability
359
13 issue groups
I18n
16
1 issue group
WARNINGSecurityInterpolated SQL is not preparedUse placeholders and $wpdb->prepare(); found interpolated variable $column at "SELECT $id_column FROM $table WHERE meta_group = %s AND meta_key = %s AND $column = %d"313
- Category
- Security
- Occurrences
- 313
- Severity
- warning
Sample message
Use placeholders and $wpdb->prepare(); found interpolated variable $column at "SELECT $id_column FROM $table WHERE meta_group = %s AND meta_key = %s AND $column = %d"
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$ID'.175
- Category
- Security
- Occurrences
- 175
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$ID'.
WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.114
- Category
- Maintainability
- Occurrences
- 114
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().109
- Category
- Maintainability
- Occurrences
- 109
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$attributes".83
- Category
- Maintainability
- Occurrences
- 83
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$attributes".
ERRORSecuritySQL query is not preparedUse placeholders and $wpdb->prepare(); found $item_ID38
- Category
- Security
- Occurrences
- 38
- Severity
- error
Sample message
Use placeholders and $wpdb->prepare(); found $item_ID
WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.34
- Category
- Security
- Occurrences
- 34
- Severity
- warning
Sample message
Processing form data without nonce verification.
ERRORSecurityDatabase parameter is not escapedUnescaped parameter $active_status_sql used in $wpdb->get_col()\n$active_status_sql assigned unsafely at line 1062.32
- Category
- Security
- Occurrences
- 32
- Severity
- error
Sample message
Unescaped parameter $active_status_sql used in $wpdb->get_col()\n$active_status_sql assigned unsafely at line 1062.
WARNINGSecurityMissing nonce verificationProcessing form data without nonce verification.30
- Category
- Security
- Occurrences
- 30
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGSecurityDatabase parameter is not escapedUnescaped parameter $count used in $wpdb->get_results()\n$join assigned unsafely at line 1658.29
- Category
- Security
- Occurrences
- 29
- Severity
- warning
Sample message
Unescaped parameter $count used in $wpdb->get_results()\n$join assigned unsafely at line 1658.
Show 15 moreShow less
WARNINGMaintainabilityNon-prefixed hook name16
- Category
- Maintainability
- Occurrences
- 16
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "cache_enabler_clear_page_cache_by_post".
ERRORI18nMissing Translators Comment16
- Category
- I18n
- Occurrences
- 16
- Severity
- error
Sample message
A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.
WARNINGSecurityInput is not sanitized12
- Category
- Security
- Occurrences
- 12
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_COOKIE[$cookie_key]
ERRORMaintainabilitydate date11
- Category
- Maintainability
- Occurrences
- 11
- Severity
- error
Sample message
date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.
WARNINGMaintainabilityerror log error log8
- Category
- Maintainability
- Occurrences
- 8
- Severity
- warning
Sample message
error_log() found. Debug code should not normally be used in production.
WARNINGSecurityRequest data is not unslashed7
- Category
- Security
- Occurrences
- 7
- Severity
- warning
Sample message
$_SERVER['HTTP_ACCEPT_ENCODING'] not unslashed before sanitization. Use wp_unslash() or similar
WARNINGSecurityUnfinished Prepare4
- Category
- Security
- Occurrences
- 4
- Severity
- warning
Sample message
Replacement variables found, but no valid placeholders found in the query.
WARNINGMaintainabilityslow db query meta key4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- warning
Sample message
Detected usage of meta_key, possible slow query.
WARNINGMaintainabilityNon-prefixed class3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "CSF".
WARNINGMaintainabilitytrademarked term3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
The plugin name includes a restricted term. Your chosen plugin name - "WP ULike – Like Buttons, Voting & Engagement Analytics" - contains the restricted term "wp" which cannot be used at all in your plugin name.
WARNINGMaintainabilitySchema Change2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
Attempting a database schema change is discouraged.
WARNINGMaintainabilityslow db query meta value2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
Detected usage of meta_value, possible slow query.
WARNINGMaintainabilityNon-prefixed function2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "RUN_WPULIKE".
ERRORSecurityException output is not escaped2
- Category
- Security
- Occurrences
- 2
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found 'wp_ulike_setting_repo'.
ERRORMaintainabilityfile system operations fclose2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fclose().
External Connections
Potential connections found in static code analysis.
Outbound calls
76
External assets
0
Incoming endpoints
29
Notable Domains
wpulike.com46 · outbound
docs.wpulike.com4 · outbound
cloudflare.com2 · outbound
schemas.wp.org2 · outbound
docs.flying-press.com1 · outbound
docs.wp-rocket.me1 · outbound
Platform / Reference Domains
wordpress.org6 · platform/reference
w3.org4 · platform/reference
github.com1 · platform/reference
gnu.org1 · platform/reference
External Asset Domains
No external asset domains detected.
Incoming Endpoints
/wp-json/wp-ulike/v1/templatesREST
register_rest_route
wp_ajax_nopriv_wp_ulike_get_likerspublic
wp_ajax
wp_ajax_nopriv_wp_ulike_processpublic
wp_ajax
Admin AJAX endpoints26
admin_post_wp_ulike_flush_stats_cacheauthenticated
admin_post
admin_post_wp_ulike_import_settingsauthenticated
admin_post
admin_post_wp_ulike_repair_tablesauthenticated
admin_post
wp_ajax_wp_ulike_customizer_preview_apiauthenticated
wp_ajax
wp_ajax_wp_ulike_customizer_schema_apiauthenticated
wp_ajax
wp_ajax_wp_ulike_customizer_values_apiauthenticated
wp_ajax
wp_ajax_wp_ulike_deactivation_feedbackauthenticated
wp_ajax
wp_ajax_wp_ulike_delete_history_apiauthenticated
wp_ajax
wp_ajax_wp_ulike_dismissed_noticeauthenticated
wp_ajax
wp_ajax_wp_ulike_engagement_apiauthenticated
wp_ajax
wp_ajax_wp_ulike_export_settingsauthenticated
wp_ajax
wp_ajax_wp_ulike_get_likersauthenticated
wp_ajax
14 more hidden
Score History
5 score snapshots
v5.2.2
28
Latest
- Findings
- 1,068
- Errors
- 285
- Warnings
- 783
- Check
- 2.0.0
v5.2.1
28
Score
- Findings
- 1,061
- Errors
- 272
- Warnings
- 789
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 28 | 1,068 | 285 | 783 | v5.2.2 | 2.0.0 |
| 28 | 1,061 | 272 | 789 | v5.2.1 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Author
Category
Issue
Domain
Related
WebberZone Top 10 — Popular Posts66 scoreEasy Social Like Box – Popup – Sidebar Widget41 scoreLight Views Counter – Fast, Scalable View Counter for High-Traffic Sites89 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce22 scoreClassic Editor63 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreAkismet Anti-spam: Spam Protection35 scoreAll-in-One WP Migration and Backup34 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreRank Math SEO – AI SEO Tools to Dominate SEO Rankings30 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreAll-In-One Security (AIOS) – Security and Firewall24 scoreBooster Extension37 score
Author
Category
Issue
Domain
Related
WebberZone Top 10 — Popular Posts66 scoreEasy Social Like Box – Popup – Sidebar Widget41 scoreLight Views Counter – Fast, Scalable View Counter for High-Traffic Sites89 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce22 scoreClassic Editor63 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreAkismet Anti-spam: Spam Protection35 scoreAll-in-One WP Migration and Backup34 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreRank Math SEO – AI SEO Tools to Dominate SEO Rankings30 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreAll-In-One Security (AIOS) – Security and Firewall24 scoreBooster Extension37 score
Related Plugins
Light Views Counter – Fast, Scalable View Counter for High-Traffic Sites
3k+ active installs
89
WebberZone Top 10 — Popular Posts
10k+ active installs
66
FireCask Like & Share Button
400 active installs
54
All-in-one Like Widget
1k+ active installs
42
Easy Social Like Box – Popup – Sidebar Widget
7k+ active installs
41
Solid Post Likes
500 active installs
41