Effortlessly set up WordPress themes with WPelemento Importer. One-click demo imports, Elementor compatibility, and support for diverse themes.
37
Score
121
Errors
88
Warnings
+2
Change
Category Scores
Security0
Repo100
Performance96
Maintainability60
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
I18n
97
3 issue groups
Maintainability
64
12 issue groups
Security
47
8 issue groups
Performance
1
1 issue group
ERRORI18nText Domain MismatchMismatched text domain. Expected 'wpelemento-importer' but got 'film-production'.89
- Category
- I18n
- Occurrences
- 89
- Severity
- error
Sample message
Mismatched text domain. Expected 'wpelemento-importer' but got 'film-production'.
WARNINGMaintainabilityMissing VersionResource version not set in call to wp_enqueue_script(). This means new versions of the script may not always be loaded due to browser caching.16
- Category
- Maintainability
- Occurrences
- 16
- Severity
- warning
Sample message
Resource version not set in call to wp_enqueue_script(). This means new versions of the script may not always be loaded due to browser caching.
WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.13
- Category
- Security
- Occurrences
- 13
- Severity
- warning
Sample message
Processing form data without nonce verification.
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$button_html'.12
- Category
- Security
- Occurrences
- 12
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$button_html'.
WARNINGMaintainabilityNot In FooterIn footer ($in_footer) is not set explicitly wp_enqueue_script; It is recommended to load scripts in the footer. Please set this value to `true` to load it in the footer, or explicitly `false` if it should be loaded in the header.9
- Category
- Maintainability
- Occurrences
- 9
- Severity
- warning
Sample message
In footer ($in_footer) is not set explicitly wp_enqueue_script; It is recommended to load scripts in the footer. Please set this value to `true` to load it in the footer, or explicitly `false` if it should be loaded in the header.
WARNINGMaintainabilityNon-prefixed functionFunctions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "enqueue_custom_admin_notice_styles".8
- Category
- Maintainability
- Occurrences
- 8
- Severity
- warning
Sample message
Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "enqueue_custom_admin_notice_styles".
WARNINGSecurityRequest data is not unslashed$_GET['plugin'] not unslashed before sanitization. Use wp_unslash() or similar8
- Category
- Security
- Occurrences
- 8
- Severity
- warning
Sample message
$_GET['plugin'] not unslashed before sanitization. Use wp_unslash() or similar
WARNINGMaintainabilityNon-prefixed constantGlobal constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "EDI_BASE".7
- Category
- Maintainability
- Occurrences
- 7
- Severity
- warning
Sample message
Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "EDI_BASE".
ERRORI18nMissing Arg DomainMissing $domain parameter in function call to esc_attr_e().7
- Category
- I18n
- Occurrences
- 7
- Severity
- error
Sample message
Missing $domain parameter in function call to esc_attr_e().
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_GET['plugin']6
- Category
- Security
- Occurrences
- 6
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_GET['plugin']
Show 14 moreShow less
WARNINGMaintainabilityNon-prefixed hook name5
- Category
- Maintainability
- Occurrences
- 5
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "tgmpa_notice_action_links".
ERRORMaintainabilityMissing direct file access protection5
- Category
- Maintainability
- Occurrences
- 5
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
WARNINGMaintainabilityDynamic hook name4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "$this->plugin_name . '_theme_setup_wizard_page_slug'".
ERRORMaintainabilitybadly named files4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- error
Sample message
File and folder names must not contain spaces or special characters.
WARNINGSecuritywp redirect wp redirect3
- Category
- Security
- Occurrences
- 3
- Severity
- warning
Sample message
wp_redirect() found. Using wp_safe_redirect(), along with the "allowed_redirect_hosts" filter if needed, can help avoid any chances of malicious redirects within code. It is also important to remember to call exit() after a redirect so that no other unwanted code is executed.
WARNINGSecurityInput is not validated3
- Category
- Security
- Occurrences
- 3
- Severity
- warning
Sample message
Detected usage of a possibly undefined superglobal array index: $_POST['bdi_admin_notice_id']. Check that the array index exists before using it.
WARNINGMaintainabilitytrademarked term3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
The plugin name includes a restricted term. Your chosen plugin name - "WPElemento Importer" - contains the restricted term "wp" which cannot be used at all in your plugin name.
WARNINGMaintainabilityNon-prefixed class1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "BDI_Admin_Notice".
ERRORSecurityUnsafe printing function1
- Category
- Security
- Occurrences
- 1
- Severity
- error
Sample message
All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.
WARNINGSecurityMissing nonce verification1
- Category
- Security
- Occurrences
- 1
- Severity
- warning
Sample message
Processing form data without nonce verification.
ERRORMaintainabilityunlink unlink1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
unlink() is discouraged. Use wp_delete_file() to delete a file.
WARNINGMaintainabilityDiscouraged PHP function1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
wp_reset_query() is discouraged. Use wp_reset_postdata() instead.
ERRORI18nNon Singular String Literal Text1
- Category
- I18n
- Occurrences
- 1
- Severity
- error
Sample message
The $text parameter must be a single text string literal. Found: $theme_key
ERRORPerformanceSuppress Filters suppress filters1
- Category
- Performance
- Occurrences
- 1
- Severity
- error
Sample message
Setting `suppress_filters` to `true` is prohibited.
External Connections
Potential connections found in static code analysis.
Outbound calls
46
External assets
4
Incoming endpoints
12
Notable Domains
tgmpluginactivation.com3 · outbound
wpelemento.com3 · outbound
fontawesome.com2 · outbound
getbootstrap.com2 · outbound
via.placeholder.com2 · outbound
license.wpelemento.com1 · outbound
Platform / Reference Domains
w3.org18 · platform/reference
github.com4 · platform/reference
core.trac.wordpress.org3 · platform/reference
api.wordpress.org1 · platform/reference
developer.wordpress.org1 · platform/reference
gnu.org1 · platform/reference
wordpress.org1 · platform/reference
External Asset Domains
cdn.shopify.com3 · asset
fonts.googleapis.com2 · asset + outbound
Incoming Endpoints
No public endpoints detected.
Admin AJAX endpoints12
wp_ajax_bdi_admin_notice_ignoreauthenticated
wp_ajax
wp_ajax_bdi_get_admin_noticesauthenticated
wp_ajax
wp_ajax_get_collectionsauthenticated
wp_ajax
wp_ajax_get_filtered_productsauthenticated
wp_ajax
wp_ajax_pagination_load_contentauthenticated
wp_ajax
wp_ajax_setup_pluginsauthenticated
wp_ajax
wp_ajax_setup_widgetsauthenticated
wp_ajax
wp_ajax_templates_api_category_wiseauthenticated
wp_ajax
wp_ajax_wpelemento_importer_install_free_themeauthenticated
wp_ajax
wp_ajax_wpelemento_importer_setup_elementorauthenticated
wp_ajax
wp_ajax_wpelemento_importer_setup_themesauthenticated
wp_ajax
wp_ajax_wz_activate_elemento_exporter_proauthenticated
wp_ajax
Score History
2 score snapshots
v0.7.1
37
Latest
- Findings
- 209
- Errors
- 121
- Warnings
- 88
- Check
- 2.0.0
v0.7.0
35
Score
- Findings
- 249
- Errors
- 126
- Warnings
- 123
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 37 | 209 | 121 | 88 | v0.7.1 | 2.0.0 |
| 35 | 249 | 126 | 123 | v0.7.0 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Author
Issue
Domain
Related
Wordfence Security – Firewall, Malware Scan, and Login Security21 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder39 scoreLiteSpeed Cache35 scoreWooCommerce21 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreJetpack – WP Security, Backup, Speed, & Growth22 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreDuplicate Page40 scoreEssential Addons for Elementor – Popular Elementor Templates & Widgets31 scoreStarter Templates – AI-Powered Templates for Elementor & Gutenberg24 scoreWebsite Builder by SeedProd — Theme Builder, Landing Page Builder, Coming Soon Page, Maintenance Mode29 scoreExtendify35 score
Author
Issue
Domain
Related
Wordfence Security – Firewall, Malware Scan, and Login Security21 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder39 scoreLiteSpeed Cache35 scoreWooCommerce21 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreJetpack – WP Security, Backup, Speed, & Growth22 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreDuplicate Page40 scoreEssential Addons for Elementor – Popular Elementor Templates & Widgets31 scoreStarter Templates – AI-Powered Templates for Elementor & Gutenberg24 scoreWebsite Builder by SeedProd — Theme Builder, Landing Page Builder, Coming Soon Page, Maintenance Mode29 scoreExtendify35 score
Related Plugins
Selection Lite
9k+ active installs
100
99
Animation Pack
900 active installs
99
Kitstarter
500 active installs
99
Genesis Portfolio Pro
5k+ active installs
97
Candid Advanced Toolset
1k+ active installs
97