Comprehensive school management plugin with attendance, classes, timetables, exams, grading, notifications, events and academic calendar.
20
Score
245
Errors
5,285
Warnings
+0
Change
Category Scores
Security0
Repo66
Performance100
Maintainability0
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Maintainability
3,137
11 issue groups
Security
2,358
13 issue groups
I18n
6
1 issue group
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$ID".2,084
- Category
- Maintainability
- Occurrences
- 2,084
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$ID".
WARNINGSecurityRequest data is not unslashed$_COOKIE[$rp_cookie] not unslashed before sanitization. Use wp_unslash() or similar540
- Category
- Security
- Occurrences
- 540
- Severity
- warning
Sample message
$_COOKIE[$rp_cookie] not unslashed before sanitization. Use wp_unslash() or similar
WARNINGSecurityInterpolated SQL is not preparedUse placeholders and $wpdb->prepare(); found interpolated variable $Student_table at "SELECT * FROM $Student_table WHERE parent_wp_usr_id = %d"497
- Category
- Security
- Occurrences
- 497
- Severity
- warning
Sample message
Use placeholders and $wpdb->prepare(); found interpolated variable $Student_table at "SELECT * FROM $Student_table WHERE parent_wp_usr_id = %d"
WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.473
- Category
- Maintainability
- Occurrences
- 473
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().432
- Category
- Maintainability
- Occurrences
- 432
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
WARNINGSecurityInput is not validatedDetected usage of a possibly undefined superglobal array index: $_GET['cid']. Check that the array index exists before using it.425
- Category
- Security
- Occurrences
- 425
- Severity
- warning
Sample message
Detected usage of a possibly undefined superglobal array index: $_GET['cid']. Check that the array index exists before using it.
WARNINGSecurityDatabase parameter is not escapedUnescaped parameter $Student_table used in $wpdb->get_results()\n$Student_table assigned unsafely at line 553.320
- Category
- Security
- Occurrences
- 320
- Severity
- warning
Sample message
Unescaped parameter $Student_table used in $wpdb->get_results()\n$Student_table assigned unsafely at line 553.
WARNINGSecurityMissing nonce verificationProcessing form data without nonce verification.219
- Category
- Security
- Occurrences
- 219
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.118
- Category
- Security
- Occurrences
- 118
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_COOKIE[$rp_cookie]85
- Category
- Security
- Occurrences
- 85
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_COOKIE[$rp_cookie]
Show 15 moreShow less
ERRORMaintainabilitydate date73
- Category
- Maintainability
- Occurrences
- 73
- Severity
- error
Sample message
date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.
ERRORSecurityDatabase parameter is not escaped51
- Category
- Security
- Occurrences
- 51
- Severity
- error
Sample message
Unescaped parameter $classQuery used in $wpdb->get_results()\n$classQuery assigned unsafely at line 13.
ERRORSecuritySQL query is not prepared47
- Category
- Security
- Occurrences
- 47
- Severity
- error
Sample message
Use placeholders and $wpdb->prepare(); found $classQuery
WARNINGMaintainabilityNon-prefixed hook name43
- Category
- Maintainability
- Occurrences
- 43
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "active_plugins".
ERRORSecurityOutput is not escaped31
- Category
- Security
- Occurrences
- 31
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$action'.
WARNINGSecurityUnfinished Prepare13
- Category
- Security
- Occurrences
- 13
- Severity
- warning
Sample message
Replacement variables found, but no valid placeholders found in the query.
WARNINGMaintainabilityNon-prefixed function10
- Category
- Maintainability
- Occurrences
- 10
- Severity
- warning
Sample message
Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "ajax_actions".
WARNINGSecuritywp redirect wp redirect7
- Category
- Security
- Occurrences
- 7
- Severity
- warning
Sample message
wp_redirect() found. Using wp_safe_redirect(), along with the "allowed_redirect_hosts" filter if needed, can help avoid any chances of malicious redirects within code. It is also important to remember to call exit() after a redirect so that no other unwanted code is executed.
ERRORMaintainabilityForbidden PHP function found6
- Category
- Maintainability
- Occurrences
- 6
- Severity
- error
Sample message
The use of function create_function() is forbidden
ERRORI18nMissing Arg Domain6
- Category
- I18n
- Occurrences
- 6
- Severity
- error
Sample message
Missing $domain parameter in function call to __().
ERRORSecurityQuoted Simple Placeholder5
- Category
- Security
- Occurrences
- 5
- Severity
- error
Sample message
Simple placeholders should not be quoted in the query string in $wpdb->prepare(). Found: '%d'.
WARNINGMaintainabilityDiscouraged PHP function5
- Category
- Maintainability
- Occurrences
- 5
- Severity
- warning
Sample message
wp_reset_query() is discouraged. Use wp_reset_postdata() instead.
WARNINGMaintainabilityDynamic hook name4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "$this->client->slug . '_tracker_data'".
ERRORMaintainabilitylibrary core files4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- error
Sample message
Library files that are already in the WordPress core are not permitted.
ERRORMaintainabilitybadly named files3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- error
Sample message
File and folder names must not contain spaces or special characters.
External Connections
Potential connections found in static code analysis.
Outbound calls
135
External assets
5
Incoming endpoints
79
Notable Domains
wpschoolpress.com14 · outbound
datatables.net5 · outbound
appsero.com4 · outbound
apache.org3 · outbound
jsperf.com3 · outbound
dangrossman.info2 · outbound
Platform / Reference Domains
github.com41 · platform/reference
w3.org12 · platform/reference
opensource.org6 · platform/reference
codex.wordpress.org2 · platform/reference
wordpress.org2 · platform/reference
gnu.org1 · platform/reference
External Asset Domains
Incoming Endpoints
No public endpoints detected.
Admin AJAX endpoints79
wp_ajax_AddClassauthenticated
wp_ajax
wp_ajax_addEventauthenticated
wp_ajax
wp_ajax_AddExamauthenticated
wp_ajax
wp_ajax_addLeaveDayauthenticated
wp_ajax
wp_ajax_addMarkauthenticated
wp_ajax
wp_ajax_addNotifyauthenticated
wp_ajax
wp_ajax_AddParentauthenticated
wp_ajax
wp_ajax_AddStudentauthenticated
wp_ajax
wp_ajax_addSubFieldauthenticated
wp_ajax
wp_ajax_AddSubjectauthenticated
wp_ajax
wp_ajax_AddTeacherauthenticated
wp_ajax
wp_ajax_addTransportauthenticated
wp_ajax
67 more hidden
Score History
6 score snapshots
v2.2.48
20
Latest
- Findings
- 5,530
- Errors
- 245
- Warnings
- 5,285
- Check
- 2.0.0
v2.2.47
20
Score
- Findings
- 5,631
- Errors
- 353
- Warnings
- 5,278
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 20 | 5,530 | 245 | 5,285 | v2.2.48 | 2.0.0 |
| 20 | 5,631 | 353 | 5,278 | v2.2.47 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Author
Category
Issue
Domain
Related
Yoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce22 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder39 scoreClassic Editor63 scoreLiteSpeed Cache35 scoreAkismet Anti-spam: Spam Protection35 scoreAll-in-One WP Migration and Backup34 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 score
Author
Category
Issue
Domain
Related
Yoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce22 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder39 scoreClassic Editor63 scoreLiteSpeed Cache35 scoreAkismet Anti-spam: Spam Protection35 scoreAll-in-One WP Migration and Backup34 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 score