Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Security
112
7 issue groups
Maintainability
33
11 issue groups
Repo Compliance
3
3 issue groups
I18n
1
1 issue group
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$baidu'.97
- Category
- Security
- Occurrences
- 97
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$baidu'.
ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;9
- Category
- Maintainability
- Occurrences
- 9
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
ERRORMaintainabilitydate datedate() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.7
- Category
- Maintainability
- Occurrences
- 7
- Severity
- error
Sample message
date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_POST[$this->key . '_nonce']4
- Category
- Security
- Occurrences
- 4
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_POST[$this->key . '_nonce']
ERRORMaintainabilityfile system operations chmodFile operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: chmod().4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: chmod().
WARNINGSecurityMissing nonce verificationProcessing form data without nonce verification.3
- Category
- Security
- Occurrences
- 3
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGSecurityRequest data is not unslashed$_POST[$this->key . '_nonce'] not unslashed before sanitization. Use wp_unslash() or similar3
- Category
- Security
- Occurrences
- 3
- Severity
- warning
Sample message
$_POST[$this->key . '_nonce'] not unslashed before sanitization. Use wp_unslash() or similar
WARNINGMaintainabilitytrademarked termThe plugin name includes a restricted term. Your chosen plugin name - "Wppao Sitemap" - contains the restricted term "wp" which cannot be used at all in your plugin name.3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
The plugin name includes a restricted term. Your chosen plugin name - "Wppao Sitemap" - contains the restricted term "wp" which cannot be used at all in your plugin name.
WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
Show 12 moreShow less
ERRORSecuritySQL query is not prepared2
- Category
- Security
- Occurrences
- 2
- Severity
- error
Sample message
Use placeholders and $wpdb->prepare(); found $sql_html
WARNINGSecurityInput is not validated2
- Category
- Security
- Occurrences
- 2
- Severity
- warning
Sample message
Detected usage of a possibly undefined superglobal array index: $_SERVER["PHP_SELF"]. Check that the array index exists before using it.
ERRORMaintainabilityfile system operations is writable2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: is_writable().
ERRORSecurityDatabase parameter is not escaped1
- Category
- Security
- Occurrences
- 1
- Severity
- error
Sample message
Unescaped parameter $sql_mini used in $wpdb->get_results()\n$sql_mini assigned unsafely at line 20.
WARNINGMaintainabilityDeprecated parameter: get_terms parameter 21
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
The parameter "'orderby=count&hide_empty=0'" at position #2 of get_terms() has been deprecated since WordPress version 4.5.0. Instead do not pass the parameter.
ERRORI18nText Domain Mismatch1
- Category
- I18n
- Occurrences
- 1
- Severity
- error
Sample message
Mismatched text domain. Expected 'wppao-sitemap' but got 'wppao_sitemap'.
ERRORRepo Complianceoutdated tested upto header1
- Category
- Repo Compliance
- Occurrences
- 1
- Severity
- error
Sample message
Tested up to: 5.4 < 7.0. The "Tested up to" value in your plugin is not set to the current version of WordPress. This means your plugin will not show up in searches, as we require plugins to be compatible and documented as tested up to the most recent version of WordPress.
ERRORMaintainabilityplugin updater detected1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
Plugin Updater detected. These are not permitted in WordPress.org hosted plugins. Detected: site_transient_update_plugins
ERRORRepo Compliancereadme description non official language1
- Category
- Repo Compliance
- Occurrences
- 1
- Severity
- error
Sample message
The readme description contains unofficial language. It must be written in standard English.
ERRORRepo Compliancereadme short description non official language1
- Category
- Repo Compliance
- Occurrences
- 1
- Severity
- error
Sample message
The readme short description contains unofficial language. It must be written in standard English.
ERRORMaintainabilitystable tag mismatch1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
Mismatched Stable Tag: 1.2 != 1.2.0. Your Stable Tag is meant to be the stable version of your plugin and it needs to be exactly the same with the Version in your main plugin file's header. Any mismatch can prevent users from downloading the correct plugin files from WordPress.org.
WARNINGMaintainabilityupdate modification detected1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Plugin Updater detected. Detected code which may be altering WordPress update routines. Detected: _site_transient_update_plugins
External Connections
Not analyzed yet.
Score History
First score snapshot
v1.2.0
36
Latest
- Findings
- 149
- Errors
- 128
- Warnings
- 21
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 36 | 149 | 128 | 21 | v1.2.0 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueRelated
Relationship links
Plugin
Author
Issue
Related
Yoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreLiteSpeed Cache35 scoreWooCommerce21 scoreAkismet Anti-spam: Spam Protection35 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder39 scoreClassic Editor63 scoreAll-in-One WP Migration and Backup34 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreRank Math SEO – AI SEO Tools to Dominate SEO Rankings30 scoreAll in One SEO – AI SEO Plugin to Boost SEO Rankings & Traffic (Schema, Local SEO, Sitemap & SEO Insights)92 scoreXML Sitemap Generator for Google37 scoreSpeedyCache – Cache, Optimization, Performance31 scoreDynamic Month & Year into Posts100 score
Plugin
Author
Issue
Related
Yoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreLiteSpeed Cache35 scoreWooCommerce21 scoreAkismet Anti-spam: Spam Protection35 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder39 scoreClassic Editor63 scoreAll-in-One WP Migration and Backup34 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreRank Math SEO – AI SEO Tools to Dominate SEO Rankings30 scoreAll in One SEO – AI SEO Plugin to Boost SEO Rankings & Traffic (Schema, Local SEO, Sitemap & SEO Insights)92 scoreXML Sitemap Generator for Google37 scoreSpeedyCache – Cache, Optimization, Performance31 scoreDynamic Month & Year into Posts100 score
Related Plugins
Dynamic Month & Year into Posts
8k+ active installs
100
noindex SEO
3k+ active installs
100
Unique Title Checker
1k+ active installs
100
Extend Link
1k+ active installs
100
Magic robots.txt
1k+ active installs
100
Meta Keywords for Each Page
800 active installs
100