WordPress阿里云对象存储插件（简称:WPOSS），基于阿里云OSS对象存储与WordPress实现静态资源到OSS存储。支持阿里云OSS图片编辑，水印、裁剪、压缩等。
19
Score
269
Errors
315
Warnings
+0
Change
Category Scores
Security0
Repo63
Performance100
Maintainability0
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Maintainability
453
20 issue groups
Security
106
4 issue groups
Supply Chain
3
1 issue group
WARNINGMaintainabilityNon-prefixed namespaceNamespaces declared by a theme/plugin should start with the theme/plugin prefix. Found: "OSS".115
- Category
- Maintainability
- Occurrences
- 115
- Severity
- warning
Sample message
Namespaces declared by a theme/plugin should start with the theme/plugin prefix. Found: "OSS".
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$acl".101
- Category
- Maintainability
- Occurrences
- 101
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$acl".
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '": initiateMultipartUpload, uploadPart - part#{$i} FAILED\n"'.74
- Category
- Security
- Occurrences
- 74
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '": initiateMultipartUpload, uploadPart - part#{$i} FAILED\n"'.
ERRORMaintainabilityNot AllowedUse of heredoc syntax (<<<) is not allowed; use standard strings or inline HTML instead45
- Category
- Maintainability
- Occurrences
- 45
- Severity
- error
Sample message
Use of heredoc syntax (<<<) is not allowed; use standard strings or inline HTML instead
WARNINGMaintainabilityNon-prefixed functionFunctions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "classLoader".45
- Category
- Maintainability
- Occurrences
- 45
- Severity
- warning
Sample message
Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "classLoader".
ERRORMaintainabilitycurl curl setoptUsing cURL functions is highly discouraged. Use wp_remote_get() instead.42
- Category
- Maintainability
- Occurrences
- 42
- Severity
- error
Sample message
Using cURL functions is highly discouraged. Use wp_remote_get() instead.
ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;39
- Category
- Maintainability
- Occurrences
- 39
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
ERRORSecurityException output is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$details'.16
- Category
- Security
- Occurrences
- 16
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$details'.
WARNINGMaintainabilityerror log var dumpvar_dump() found. Debug code should not normally be used in production.14
- Category
- Maintainability
- Occurrences
- 14
- Severity
- warning
Sample message
var_dump() found. Debug code should not normally be used in production.
WARNINGMaintainabilityerror log error logerror_log() found. Debug code should not normally be used in production.10
- Category
- Maintainability
- Occurrences
- 10
- Severity
- warning
Sample message
error_log() found. Debug code should not normally be used in production.
Show 15 moreShow less
ERRORMaintainabilityunlink unlink9
- Category
- Maintainability
- Occurrences
- 9
- Severity
- error
Sample message
unlink() is discouraged. Use wp_delete_file() to delete a file.
WARNINGSecurityInput is not sanitized8
- Category
- Security
- Occurrences
- 8
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_GET['_wpnonce']
WARNINGSecurityRequest data is not unslashed8
- Category
- Security
- Occurrences
- 8
- Severity
- warning
Sample message
$_GET['_wpnonce'] not unslashed before sanitization. Use wp_unslash() or similar
ERRORMaintainabilitycurl curl getinfo5
- Category
- Maintainability
- Occurrences
- 5
- Severity
- error
Sample message
Using cURL functions is highly discouraged. Use wp_remote_get() instead.
ERRORMaintainabilityrand rand5
- Category
- Maintainability
- Occurrences
- 5
- Severity
- error
Sample message
rand() is discouraged. Use the far less predictable wp_rand() instead.
ERRORMaintainabilityfile system operations fclose4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fclose().
ERRORMaintainabilityfile system operations fopen4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fopen().
ERRORMaintainabilityparse url parse url3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- error
Sample message
parse_url() is discouraged because of inconsistency in the output across PHP versions; use wp_parse_url() instead.
ERRORSupply ChainHidden files included3
- Category
- Supply Chain
- Occurrences
- 3
- Severity
- error
Sample message
Hidden files are not permitted.
WARNINGMaintainabilitytrademarked term3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
The plugin name includes a restricted term. Your chosen plugin name - "WPOSS(阿里云对象存储)" - contains the restricted term "wp" which cannot be used at all in your plugin name.
WARNINGMaintainabilityNon-prefixed class2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "Common".
ERRORMaintainabilityfile system operations fread2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fread().
ERRORMaintainabilityfile system operations fwrite2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fwrite().
ERRORMaintainabilityNon Enqueued Stylesheet2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
Stylesheets must be registered/enqueued via wp_enqueue_style()
ERRORMaintainabilityScanner exception1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
An error occurred during processing; checking has been aborted. The error message was: PHPCSUtils\Utils\PassedParameters::hasParameters(): Argument #2 ($stackPtr) must be of type function call, array, isset, unset or exit; T_THROW given.\nThe error originated in the WordPress.Security.EscapeOutput sniff on line 270.
External Connections
Potential connections found in static code analysis.
Outbound calls
92
External assets
0
Incoming endpoints
0
Notable Domains
help.aliyun.com15 · outbound
a.com11 · outbound
b.com10 · outbound
layui.com9 · outbound
bucket.oss-cn-hangzhou.aliyuncs.com7 · outbound
aliyun.com6 · outbound
Platform / Reference Domains
opensource.org1 · platform/reference
External Asset Domains
No external asset domains detected.
Incoming Endpoints
No public endpoints detected.
Score History
First score snapshot
v5.0
19
Latest
- Findings
- 584
- Errors
- 269
- Warnings
- 315
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 19 | 584 | 269 | 315 | v5.0 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Plugin
Author
Issue
Domain
Related
One Stop Shop for WooCommerce68 scoreOSS Aliyun41 scoreWPTurbo -WordPress性能优化插件38 scoreSync QCloud COS36 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder35 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreLiteSpeed Cache35 scoreWooCommerce22 scoreAkismet Anti-spam: Spam Protection35 scoreAdvanced Custom Fields (ACF®)23 scoreUltimate Addons for Elementor33 scoreWordPress Importer25 scoreStarter Templates – AI-Powered Templates for Elementor & Gutenberg24 score
Plugin
Author
Issue
Domain
Related
One Stop Shop for WooCommerce68 scoreOSS Aliyun41 scoreWPTurbo -WordPress性能优化插件38 scoreSync QCloud COS36 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder35 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreLiteSpeed Cache35 scoreWooCommerce22 scoreAkismet Anti-spam: Spam Protection35 scoreAdvanced Custom Fields (ACF®)23 scoreUltimate Addons for Elementor33 scoreWordPress Importer25 scoreStarter Templates – AI-Powered Templates for Elementor & Gutenberg24 score
Related Plugins
One Stop Shop for WooCommerce
10k+ active installs
68
OSS Aliyun
4k+ active installs
41
WPTurbo -WordPress性能优化插件
700 active installs
38
Sync QCloud COS
600 active installs
36