Wordpress Live Visitor Counter allows you to display how many times a page has been viewed with this simple, fast and easy to use the plugin.
Prioritized issue groups from the latest Plugin Check scan
Security
112
7 issue groups
Maintainability
67
16 issue groups
I18n
40
2 issue groups
Sample message
Use placeholders and $wpdb->prepare(); found interpolated variable $beginOfDay at "SELECT COUNT(*) FROM $visitors_stat WHERE time BETWEEN $beginOfDay AND $endOfDay "
Sample message
Mismatched text domain. Expected 'wp-visitors-widget' but got "wvw".
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$after_title'.
Sample message
All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.
Sample message
Use of a direct database call is discouraged.
Sample message
Unescaped parameter $table used in $wpdb->query()\n$table assigned unsafely at line 66.
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
Sample message
Missing $domain parameter in function call to __().
Sample message
strip_tags() is discouraged. Use the more comprehensive wp_strip_all_tags() instead.
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
Sample message
Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "wvw_get_graph_array".
Sample message
rand() is discouraged. Use the far less predictable wp_rand() instead.
Sample message
Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "vooAddStyles".
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$insert_script".
Sample message
Detected usage of a non-sanitized input variable: $_SERVER['REMOTE_ADDR']
Sample message
Detected usage of a possibly undefined superglobal array index: $_SERVER['REMOTE_ADDR']. Check that the array index exists before using it.
Sample message
$_SERVER['REMOTE_ADDR'] not unslashed before sanitization. Use wp_unslash() or similar
Sample message
Resource version not set in call to wp_enqueue_style(). This means new versions of the style may not always be loaded due to browser caching.
Sample message
Offloading images, js, css, and other scripts to your servers or any remote service is disallowed.
Sample message
The use of function ini_set() is discouraged
Sample message
Attempting a database schema change is discouraged.
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "colors".
Sample message
In footer ($in_footer) is not set explicitly wp_register_script; It is recommended to load scripts in the footer. Please set this value to `true` to load it in the footer, or explicitly `false` if it should be loaded in the header.
Sample message
Scripts must be registered/enqueued via wp_enqueue_script()
Sample message
Stylesheets must be registered/enqueued via wp_enqueue_style()
Not analyzed yet.
First score snapshot
v2.2
34
Latest
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 34 | 222 | 108 | 114 | v2.2 | 2.0.0 |
Author, categories, issues, domains, and nearby plugins.