A wordpress plugin for using all caches on varnish, nginx, php-fpm stack with php-apc. This plugin includes db-cache-reloaded-fix for dbcache.
27
Score
189
Errors
113
Warnings
+0
Change
Category Scores
Security0
Repo91
Performance100
Maintainability19
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Security
115
10 issue groups
Maintainability
103
12 issue groups
I18n
65
3 issue groups
ERRORI18nText Domain MismatchMismatched text domain. Expected 'wpbase-cache' but got 'redis-cache'.61
- Category
- I18n
- Occurrences
- 61
- Severity
- error
Sample message
Mismatched text domain. Expected 'wpbase-cache' but got 'redis-cache'.
ERRORSecurityException output is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"Cannot use '{$command->getId()}' over clusters of connections."'.44
- Category
- Security
- Occurrences
- 44
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"Cannot use '{$command->getId()}' over clusters of connections."'.
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$cache_options".37
- Category
- Maintainability
- Occurrences
- 37
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$cache_options".
WARNINGMaintainabilityNon-prefixed functionFunctions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "check_wpoven_site".21
- Category
- Maintainability
- Occurrences
- 21
- Severity
- warning
Sample message
Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "check_wpoven_site".
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"<input id='wpbase_cache_admin_bar_button' disabled='disabled' name='wpbase_cache_options[admin_bar_button]' type='checkbox' value='1' $checked />"'.20
- Category
- Security
- Occurrences
- 20
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"<input id='wpbase_cache_admin_bar_button' disabled='disabled' name='wpbase_cache_options[admin_bar_button]' type='checkbox' value='1' $checked />"'.
ERRORMaintainabilityGoto statement foundThe "goto" language construct should not be used.19
- Category
- Maintainability
- Occurrences
- 19
- Severity
- error
Sample message
The "goto" language construct should not be used.
ERRORSecurityUnsafe printing functionAll output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.12
- Category
- Security
- Occurrences
- 12
- Severity
- error
Sample message
All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.
WARNINGSecurityInput is not validatedDetected usage of a possibly undefined superglobal array index: $_POST['post_id']. Check that the array index exists before using it.10
- Category
- Security
- Occurrences
- 10
- Severity
- warning
Sample message
Detected usage of a possibly undefined superglobal array index: $_POST['post_id']. Check that the array index exists before using it.
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_GET['_wpnonce']9
- Category
- Security
- Occurrences
- 9
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_GET['_wpnonce']
WARNINGSecurityRequest data is not unslashed$_GET['_wpnonce'] not unslashed before sanitization. Use wp_unslash() or similar9
- Category
- Security
- Occurrences
- 9
- Severity
- warning
Sample message
$_GET['_wpnonce'] not unslashed before sanitization. Use wp_unslash() or similar
Show 15 moreShow less
ERRORMaintainabilityMissing direct file access protection6
- Category
- Maintainability
- Occurrences
- 6
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
WARNINGSecurityMissing nonce verification5
- Category
- Security
- Occurrences
- 5
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGMaintainabilityNon-prefixed constant4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- warning
Sample message
Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "WP_REDIS_PREFIX".
WARNINGSecurityNonce verification recommended4
- Category
- Security
- Occurrences
- 4
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGMaintainabilityNon-prefixed class3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "Servers_List".
WARNINGMaintainabilitytrademarked term3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
The plugin name includes a restricted term. Your chosen plugin name - "WPBase Cache" - contains the restricted term "wp" which cannot be used at all in your plugin name.
ERRORMaintainabilityNot Allowed2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
Use of heredoc syntax (<<<) is not allowed; use standard strings or inline HTML instead
ERRORMaintainabilityPlugin Directory Write2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
Plugin folders are deleted when upgraded. Do not save data to the plugin folder using rename(). Detected usage of __FILE__ or __DIR__ magic constant. Use wp_upload_dir() to get the uploads directory path or save to the database instead.
WARNINGMaintainabilityNon-prefixed hook name2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "wp_redirect".
ERRORMaintainabilityfile system operations fread2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fread().
ERRORMaintainabilityrename rename2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
rename() is discouraged. Use WP_Filesystem::move() to rename a file.
ERRORI18nMissing Arg Domain2
- Category
- I18n
- Occurrences
- 2
- Severity
- error
Sample message
Missing $domain parameter in function call to __().
ERRORI18nMissing Translators Comment2
- Category
- I18n
- Occurrences
- 2
- Severity
- error
Sample message
A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.
ERRORSecuritySetting is missing a sanitization callback1
- Category
- Security
- Occurrences
- 1
- Severity
- error
Sample message
Sanitization missing for register_setting().
WARNINGSecurityDatabase parameter is not escaped1
- Category
- Security
- Occurrences
- 1
- Severity
- warning
Sample message
Unescaped parameter $table_name used in $wpdb->get_results()\n$table_name assigned unsafely at line 261.
External Connections
Not analyzed yet.
Score History
First score snapshot
v5.5.6
27
Latest
- Findings
- 302
- Errors
- 189
- Warnings
- 113
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 27 | 302 | 189 | 113 | v5.5.6 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueRelated
Relationship links
Plugin
Author
Issue
Related
Jetpack – WP Security, Backup, Speed, & Growth22 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreWooCommerce21 scoreWP Mail SMTP by WPForms – The Most Popular SMTP and Email Log Plugin30 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreAdvanced Custom Fields (ACF®)23 scoreLiteSpeed Cache35 scoreImage Optimization – Compress Images and Convert to WebP or AVIF87 scoreManageWP Worker23 scoreSpeed Optimizer – The All-In-One Performance-Boosting Plugin36 scoreWP Fastest Cache – WordPress Cache Plugin24 scoreModern Image Formats100 score
Plugin
Author
Issue
Related
Jetpack – WP Security, Backup, Speed, & Growth22 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreWooCommerce21 scoreWP Mail SMTP by WPForms – The Most Popular SMTP and Email Log Plugin30 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreAdvanced Custom Fields (ACF®)23 scoreLiteSpeed Cache35 scoreImage Optimization – Compress Images and Convert to WebP or AVIF87 scoreManageWP Worker23 scoreSpeed Optimizer – The All-In-One Performance-Boosting Plugin36 scoreWP Fastest Cache – WordPress Cache Plugin24 scoreModern Image Formats100 score
Related Plugins
Modern Image Formats
100k+ active installs
100
Disable Emojis (GDPR friendly)
60k+ active installs
100
Image Placeholders
60k+ active installs
100
Optimization Detective
60k+ active installs
100
Embed Optimizer
50k+ active installs
100
PWA for WP – Progressive Web Apps Made Simple
20k+ active installs
100