Convert existing categories to tags or tags to categories, selectively.
Category Scores
Top Issues by Category
security88
maintainability17
Issues Details
124 issues found in latest scan
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '" ({$category->count})</label>"'.
A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.
Detected usage of a possibly undefined superglobal array index: $_POST['cats_to_convert']. Check that the array index exists before using it.
All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.
Function "get_post_format_string()" requires WordPress 3.1.0, but your plugin minimum supported version is WordPress 3.0.0.
Detected usage of a non-sanitized input variable: $_GET['tab']
$_GET['tab'] not unslashed before sanitization. Use wp_unslash() or similar
Processing form data without nonce verification.
Processing form data without nonce verification.
The parameter "array('get' => 'all')" at position #2 of get_terms() has been deprecated since WordPress version 4.5.0. Instead do not pass the parameter.
Unescaped parameter $values used in $wpdb->query()\n$values used without escaping.
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
screen_icon() has been deprecated since WordPress version 3.8.0.
Your plugin has a different license declared in the readme file and plugin header. Please update your readme with a valid GPL license identifier.
Plugin name "Categories to Tags Converter" is different from the name declared in plugin header "Categories to Tags Converter Importer".
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
Tested up to: 6.7 < 7.0. The "Tested up to" value in your plugin is not set to the current version of WordPress. This means your plugin will not show up in searches, as we require plugins to be compatible and documented as tested up to the most recent version of WordPress.
The "Contributors" header in the readme file contains reserved username(s). Found: "wordpressdotorg"
The plugin slug includes a restricted term. Your plugin slug - "wpcat2tag-importer" - contains the restricted term "wp" which cannot be used at all in your plugin slug.
| Code | Type | Message | Count |
|---|---|---|---|
| WordPress.Security.EscapeOutput.OutputNotEscaped | ERROR | All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '" ({$category->count})</label>"'. | 48 |
| WordPress.WP.I18n.MissingTranslatorsComment | ERROR | A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders. | 16 |
| WordPress.Security.ValidatedSanitizedInput.InputNotValidated | WARNING | Detected usage of a possibly undefined superglobal array index: $_POST['cats_to_convert']. Check that the array index exists before using it. | 11 |
| WordPress.Security.EscapeOutput.UnsafePrintingFunction | ERROR | All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'. | 10 |
| wp_function_not_compatible_with_requires_wp | ERROR | Function "get_post_format_string()" requires WordPress 3.1.0, but your plugin minimum supported version is WordPress 3.0.0. | 7 |
| WordPress.Security.ValidatedSanitizedInput.InputNotSanitized | WARNING | Detected usage of a non-sanitized input variable: $_GET['tab'] | 6 |
| WordPress.Security.ValidatedSanitizedInput.MissingUnslash | WARNING | $_GET['tab'] not unslashed before sanitization. Use wp_unslash() or similar | 6 |
| WordPress.DB.DirectDatabaseQuery.DirectQuery | WARNING | Use of a direct database call is discouraged. | 3 |
| WordPress.Security.NonceVerification.Missing | WARNING | Processing form data without nonce verification. | 3 |
| WordPress.Security.NonceVerification.Recommended | WARNING | Processing form data without nonce verification. | 2 |
| WordPress.WP.DeprecatedParameters.Get_termsParam2Found | WARNING | The parameter "array('get' => 'all')" at position #2 of get_terms() has been deprecated since WordPress version 4.5.0. Instead do not pass the parameter. | 2 |
| PluginCheck.Security.DirectDB.UnescapedDBParameter | ERROR | Unescaped parameter $values used in $wpdb->query()\n$values used without escaping. | 1 |
| WordPress.DB.DirectDatabaseQuery.NoCaching | WARNING | Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete(). | 1 |
| WordPress.DB.PreparedSQL.NotPrepared | ERROR | Use placeholders and $wpdb->prepare(); found $values | 1 |
| WordPress.WP.DeprecatedFunctions.screen_iconFound | WARNING | screen_icon() has been deprecated since WordPress version 3.8.0. | 1 |
| license_mismatch | ERROR | Your plugin has a different license declared in the readme file and plugin header. Please update your readme with a valid GPL license identifier. | 1 |
| mismatched_plugin_name | WARNING | Plugin name "Categories to Tags Converter" is different from the name declared in plugin header "Categories to Tags Converter Importer". | 1 |
| missing_direct_file_access_protection | ERROR | PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit; | 1 |
| outdated_tested_upto_header | ERROR | Tested up to: 6.7 < 7.0. The "Tested up to" value in your plugin is not set to the current version of WordPress. This means your plugin will not show up in searches, as we require plugins to be compatible and documented as tested up to the most recent version of WordPress. | 1 |
| readme_reserved_contributors | WARNING | The "Contributors" header in the readme file contains reserved username(s). Found: "wordpressdotorg" | 1 |
| trademarked_term | WARNING | The plugin slug includes a restricted term. Your plugin slug - "wpcat2tag-importer" - contains the restricted term "wp" which cannot be used at all in your plugin slug. | 1 |
Latest Snapshot
Findings
124
Errors
86
Warnings
38
Score History
First score snapshot
First scan completed
v0.6.3 · Plugin Check 2.0.0 · Model 2026.06-mvp-static-v2
v0.6.3
39
Latest
- Findings
- 124
- Errors
- 86
- Warnings
- 38
- Plugin Check
- 2.0.0
- Model
- 2026.06-mvp-static-v2
| Scan | Score | Findings | Errors | Warnings | Plugin | Plugin Check | Model |
|---|---|---|---|---|---|---|---|
| Latest | 39 | 124 | 86 | 38 | v0.6.3 | 2.0.0 | 2026.06-mvp-static-v2 |