WP Directory Kit

Build your Directory portal, demos for Real Estate Agency and Car Dealership included

v1.5.3WPDirectoryKitUpdated Added 2k+ installs98% rating
18
Score
2,119
Errors
2,617
Warnings
+0
Change

Category Scores

Security0
Repo58
Performance94
Maintainability0

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

4,736 findings

Maintainability

2,041

11 issue groups

Security

1,748

10 issue groups

I18n

850

4 issue groups

WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$WDK_DashWidgets".1,429
Category
Maintainability
Occurrences
1,429
Severity
warning

Sample message

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$WDK_DashWidgets".

ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$chat['count']'.995
Category
Security
Occurrences
995
Severity
error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$chat['count']'.

ERRORI18nText Domain MismatchMismatched text domain. Expected 'wpdirectorykit' but got 'elementinvader-addons-for-elementor'.650
Category
I18n
Occurrences
650
Severity
error

Sample message

Mismatched text domain. Expected 'wpdirectorykit' but got 'elementinvader-addons-for-elementor'.

WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.219
Category
Security
Occurrences
219
Severity
warning

Sample message

Processing form data without nonce verification.

WARNINGMaintainabilityNon-prefixed functionFunctions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "activate_wpdirectorykit".182
Category
Maintainability
Occurrences
182
Severity
warning

Sample message

Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "activate_wpdirectorykit".

WARNINGSecurityMissing nonce verificationProcessing form data without nonce verification.150
Category
Security
Occurrences
150
Severity
warning

Sample message

Processing form data without nonce verification.

WARNINGSecurityRequest data is not unslashed$_COOKIE['wdk_last_search'] not unslashed before sanitization. Use wp_unslash() or similar122
Category
Security
Occurrences
122
Severity
warning

Sample message

$_COOKIE['wdk_last_search'] not unslashed before sanitization. Use wp_unslash() or similar

ERRORI18nNon Singular String Literal TextThe $text parameter must be a single text string literal. Found: $field->prefix114
Category
I18n
Occurrences
114
Severity
error

Sample message

The $text parameter must be a single text string literal. Found: $field->prefix

WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_COOKIE['wdk_last_search']78
Category
Security
Occurrences
78
Severity
warning

Sample message

Detected usage of a non-sanitized input variable: $_COOKIE['wdk_last_search']

ERRORI18nMissing Translators CommentA function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.68
Category
I18n
Occurrences
68
Severity
error

Sample message

A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.

Show 15 more
WARNINGMaintainabilityNon-prefixed namespace67
Category
Maintainability
Occurrences
67
Severity
warning

Sample message

Namespaces declared by a theme/plugin should start with the theme/plugin prefix. Found: "Wdk\DashWidgets\Widgets".

WARNINGMaintainabilityDirect Query66
Category
Maintainability
Occurrences
66
Severity
warning

Sample message

Use of a direct database call is discouraged.

WARNINGMaintainabilityNo Caching66
Category
Maintainability
Occurrences
66
Severity
warning

Sample message

Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().

ERRORSecuritySQL query is not prepared62
Category
Security
Occurrences
62
Severity
error

Sample message

Use placeholders and $wpdb->prepare(); found $sql

ERRORSecurityDatabase parameter is not escaped61
Category
Security
Occurrences
61
Severity
error

Sample message

Unescaped parameter $sql used in $wpdb->get_var()\n$sql assigned unsafely at line 4331.

WARNINGMaintainabilityNon-prefixed hook name46
Category
Maintainability
Occurrences
46
Severity
warning

Sample message

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "active_plugins".

ERRORMaintainabilitystrip tags strip tags45
Category
Maintainability
Occurrences
45
Severity
error

Sample message

strip_tags() is discouraged. Use the more comprehensive wp_strip_all_tags() instead.

WARNINGMaintainabilityNon-prefixed class42
Category
Maintainability
Occurrences
42
Severity
warning

Sample message

Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "Cachedusers_m".

ERRORMaintainabilitydate date41
Category
Maintainability
Occurrences
41
Severity
error

Sample message

date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.

WARNINGSecuritywp redirect wp redirect38
Category
Security
Occurrences
38
Severity
warning

Sample message

wp_redirect() found. Using wp_safe_redirect(), along with the "allowed_redirect_hosts" filter if needed, can help avoid any chances of malicious redirects within code. It is also important to remember to call exit() after a redirect so that no other unwanted code is executed.

WARNINGMaintainabilityMissing Version36
Category
Maintainability
Occurrences
36
Severity
warning

Sample message

Resource version not set in call to wp_enqueue_script(). This means new versions of the script may not always be loaded due to browser caching.

WARNINGMaintainabilityNot In Footer21
Category
Maintainability
Occurrences
21
Severity
warning

Sample message

In footer ($in_footer) is not set explicitly wp_enqueue_script; It is recommended to load scripts in the footer. Please set this value to `true` to load it in the footer, or explicitly `false` if it should be loaded in the header.

ERRORI18nMissing Arg Domain18
Category
I18n
Occurrences
18
Severity
error

Sample message

Missing $domain parameter in function call to esc_html__().

WARNINGSecurityInterpolated SQL is not prepared12
Category
Security
Occurrences
12
Severity
warning

Sample message

Use placeholders and $wpdb->prepare(); found interpolated variable $column_name at "ALTER TABLE `{$this->listingfield_m->_table_name}` CHANGE `$column_name` `$column_name` TEXT NULL DEFAULT NULL;"

WARNINGSecurityInput is not validated11
Category
Security
Occurrences
11
Severity
warning

Sample message

Detected usage of a possibly undefined superglobal array index: $_GET['from_id']. Check that the array index exists before using it.

External Connections

Not analyzed yet.

Score History

First score snapshot

v1.5.3

18

Latest

Findings
4,736
Errors
2,119
Warnings
2,617
Check
2.0.0

Relationship Map

Author, categories, issues, domains, and nearby plugins.

29 nodes

Related Plugins

HivePress Favorites

8k+ active installs

99
HivePress Authentication

1k+ active installs

98
HivePress Messages

7k+ active installs

90
HivePress Reviews

7k+ active installs

90
HivePress Claim Listings

3k+ active installs

89