Integrate WhatsApp experience directly into your WordPress website.
27
Score
120
Errors
274
Warnings
+0
Change
Category Scores
Security0
Repo85
Performance100
Maintainability21
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Maintainability
261
16 issue groups
Security
126
9 issue groups
ERRORMaintainabilitywp function not compatible with requires wpFunction "determine_locale()" requires WordPress 5.0.0, but your plugin minimum supported version is WordPress 3.0.0.76
- Category
- Maintainability
- Occurrences
- 76
- Severity
- error
Sample message
Function "determine_locale()" requires WordPress 5.0.0, but your plugin minimum supported version is WordPress 3.0.0.
WARNINGMaintainabilityAlternative PHP tag foundPossible use of ASP style opening tags detected; found: <% _.each(accounts, function (account) { %...60
- Category
- Maintainability
- Occurrences
- 60
- Severity
- warning
Sample message
Possible use of ASP style opening tags detected; found: <% _.each(accounts, function (account) { %...
WARNINGSecurityRequest data is not unslashed$_GET['tab'] not unslashed before sanitization. Use wp_unslash() or similar47
- Category
- Security
- Occurrences
- 47
- Severity
- warning
Sample message
$_GET['tab'] not unslashed before sanitization. Use wp_unslash() or similar
WARNINGMaintainabilityAlternative PHP tag foundPossible use of ASP style short opening tags detected; found: <%= (account['daysOfWeekWorking'][day[0]]['...42
- Category
- Maintainability
- Occurrences
- 42
- Severity
- warning
Sample message
Possible use of ASP style short opening tags detected; found: <%= (account['daysOfWeekWorking'][day[0]]['...
WARNINGSecurityInput is not validatedDetected usage of a possibly undefined superglobal array index: $_POST['accountId']. Check that the array index exists before using it.42
- Category
- Security
- Occurrences
- 42
- Severity
- warning
Sample message
Detected usage of a possibly undefined superglobal array index: $_POST['accountId']. Check that the array index exists before using it.
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$active_tab".18
- Category
- Maintainability
- Occurrences
- 18
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$active_tab".
ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;18
- Category
- Maintainability
- Occurrences
- 18
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
WARNINGMaintainabilityNon-prefixed namespaceNamespaces declared by a theme/plugin should start with the theme/plugin prefix. Found: "NTA_WhatsApp".12
- Category
- Maintainability
- Occurrences
- 12
- Severity
- warning
Sample message
Namespaces declared by a theme/plugin should start with the theme/plugin prefix. Found: "NTA_WhatsApp".
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$action'.9
- Category
- Security
- Occurrences
- 9
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$action'.
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_POST['daysOfWeekWorking']9
- Category
- Security
- Occurrences
- 9
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_POST['daysOfWeekWorking']
Show 15 moreShow less
WARNINGMaintainabilityNon-prefixed class7
- Category
- Maintainability
- Occurrences
- 7
- Severity
- warning
Sample message
Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "FBDashboardCross".
WARNINGMaintainabilityNon-prefixed hook name6
- Category
- Maintainability
- Occurrences
- 6
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "njt_wa_get_post_type".
ERRORSecurityException output is not escaped6
- Category
- Security
- Occurrences
- 6
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$e'.
WARNINGSecurityNonce verification recommended6
- Category
- Security
- Occurrences
- 6
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGMaintainabilityNon-prefixed constant5
- Category
- Maintainability
- Occurrences
- 5
- Severity
- warning
Sample message
Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "NTA_WHATSAPP_BASE_NAME".
WARNINGSecurityMissing nonce verification4
- Category
- Security
- Occurrences
- 4
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGMaintainabilityslow db query meta query3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
Detected usage of meta_query, possible slow query.
WARNINGMaintainabilityNon-prefixed function3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "njt_wa_assets".
WARNINGMaintainabilitytrademarked term3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
The plugin name includes a restricted term. Your chosen plugin name - "WP Chat App" - contains the restricted term "wp" which cannot be used at all in your plugin name.
ERRORMaintainabilityOffloaded Content2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
Offloading images, js, css, and other scripts to your servers or any remote service is disallowed.
ERRORSecuritySetting is missing a sanitization callback2
- Category
- Security
- Occurrences
- 2
- Severity
- error
Sample message
Sanitization missing for register_setting().
WARNINGMaintainabilityslow db query meta key2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
Detected usage of meta_key, possible slow query.
ERRORMaintainabilitydate date2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.
WARNINGMaintainabilityerror log error log2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
error_log() found. Debug code should not normally be used in production.
ERRORSecurityUnsafe printing function1
- Category
- Security
- Occurrences
- 1
- Severity
- error
Sample message
All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.
External Connections
Not analyzed yet.
Score History
First score snapshot
v3.8.2
27
Latest
- Findings
- 394
- Errors
- 120
- Warnings
- 274
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 27 | 394 | 120 | 274 | v3.8.2 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueRelated
Relationship links
Plugin
Author
Category
Issue
wp function not compatible with requires wp76 findingsAlternative PHP tag found60 findingsRequest data is not unslashed47 findingsAlternative PHP tag found42 findingsInput is not validated42 findingsNon-prefixed global variable18 findingsMissing direct file access protection18 findingsNon-prefixed namespace12 findings
Related
Click to Chat – HoliThemes100 scoreElementor Website Builder – more than just a page builder39 scoreClassic Editor63 scoreLiteSpeed Cache35 scoreAkismet Anti-spam: Spam Protection35 scoreAll-in-One WP Migration and Backup34 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scorePhoto Gallery, Sliders, Proofing and Themes – NextGEN Gallery23 scoreCalculated Fields Form – AI Form Builder for WordPress – Contact, Payment, Quote, Quiz & More24 scoreHappyforms – Form Builder for WordPress: Drag & Drop Contact Forms, Surveys, Payments & Multipurpose Forms22 scoreFunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce23 scorePop-up31 scoreStripe Payment Forms by WP Full Pay – Accept Credit Card Payments, Donations & Subscriptions23 scoreJoinchat – Enhanced "click to chat"95 score
Plugin
Author
Category
Issue
wp function not compatible with requires wp76 findingsAlternative PHP tag found60 findingsRequest data is not unslashed47 findingsAlternative PHP tag found42 findingsInput is not validated42 findingsNon-prefixed global variable18 findingsMissing direct file access protection18 findingsNon-prefixed namespace12 findings
Related
Click to Chat – HoliThemes100 scoreElementor Website Builder – more than just a page builder39 scoreClassic Editor63 scoreLiteSpeed Cache35 scoreAkismet Anti-spam: Spam Protection35 scoreAll-in-One WP Migration and Backup34 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scorePhoto Gallery, Sliders, Proofing and Themes – NextGEN Gallery23 scoreCalculated Fields Form – AI Form Builder for WordPress – Contact, Payment, Quote, Quiz & More24 scoreHappyforms – Form Builder for WordPress: Drag & Drop Contact Forms, Surveys, Payments & Multipurpose Forms22 scoreFunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce23 scorePop-up31 scoreStripe Payment Forms by WP Full Pay – Accept Credit Card Payments, Donations & Subscriptions23 scoreJoinchat – Enhanced "click to chat"95 score
Related Plugins
Click to Chat – HoliThemes
700k+ active installs
100
Floating Contact Button for MAX and Telegram
1k+ active installs
100
100
Spice Social Share
4k+ active installs
99
Bolt CTA Button – Floating Call Button for WordPress
1k+ active installs
99
Mobile Call Buttons
600 active installs
97