WpStream is a Video Streaming Plugin that lets you broadcast live events and helps you sell tickets or recordings via WooCommerce.
24
Score
1,371
Errors
637
Warnings
+0
Change
Category Scores
Security0
Repo94
Performance94
Maintainability0
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
I18n
1,105
4 issue groups
Security
469
6 issue groups
Maintainability
409
15 issue groups
ERRORI18nText Domain MismatchMismatched text domain. Expected 'wpstream' but got 'hello-wpstream'.1,045
- Category
- I18n
- Occurrences
- 1,045
- Severity
- error
Sample message
Mismatched text domain. Expected 'wpstream' but got 'hello-wpstream'.
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$ajax_nonce".330
- Category
- Maintainability
- Occurrences
- 330
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$ajax_nonce".
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$admin_url_onboard'.236
- Category
- Security
- Occurrences
- 236
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$admin_url_onboard'.
WARNINGSecurityMissing nonce verificationProcessing form data without nonce verification.72
- Category
- Security
- Occurrences
- 72
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGSecurityRequest data is not unslashed$_GET['new_video_name'] not unslashed before sanitization. Use wp_unslash() or similar50
- Category
- Security
- Occurrences
- 50
- Severity
- warning
Sample message
$_GET['new_video_name'] not unslashed before sanitization. Use wp_unslash() or similar
ERRORI18nMissing Translators CommentA function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.48
- Category
- I18n
- Occurrences
- 48
- Severity
- error
Sample message
A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.
WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.45
- Category
- Security
- Occurrences
- 45
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGSecurityInput is not validatedDetected usage of a possibly undefined superglobal array index: $_FILES['aaiu_upload_file']['error']. Check that the array index exists before using it.34
- Category
- Security
- Occurrences
- 34
- Severity
- warning
Sample message
Detected usage of a possibly undefined superglobal array index: $_FILES['aaiu_upload_file']['error']. Check that the array index exists before using it.
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_FILES['aaiu_upload_file']['error']32
- Category
- Security
- Occurrences
- 32
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_FILES['aaiu_upload_file']['error']
WARNINGMaintainabilityNon-prefixed functionFunctions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "activate_wpstream".13
- Category
- Maintainability
- Occurrences
- 13
- Severity
- warning
Sample message
Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "activate_wpstream".
Show 15 moreShow less
WARNINGMaintainabilityDiscouraged PHP function10
- Category
- Maintainability
- Occurrences
- 10
- Severity
- warning
Sample message
wp_reset_query() is discouraged. Use wp_reset_postdata() instead.
ERRORI18nNon Singular String Literal Text9
- Category
- I18n
- Occurrences
- 9
- Severity
- error
Sample message
The $text parameter must be a single text string literal. Found: $button_type_label . ' button style'
ERRORMaintainabilityparse url parse url8
- Category
- Maintainability
- Occurrences
- 8
- Severity
- error
Sample message
parse_url() is discouraged because of inconsistency in the output across PHP versions; use wp_parse_url() instead.
WARNINGMaintainabilityslow db query meta query6
- Category
- Maintainability
- Occurrences
- 6
- Severity
- warning
Sample message
Detected usage of meta_query, possible slow query.
WARNINGMaintainabilityslow db query tax query6
- Category
- Maintainability
- Occurrences
- 6
- Severity
- warning
Sample message
Detected usage of tax_query, possible slow query.
WARNINGMaintainabilityNon-prefixed hook name6
- Category
- Maintainability
- Occurrences
- 6
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "bp_core_template_plugin".
WARNINGMaintainabilityDirect Query5
- Category
- Maintainability
- Occurrences
- 5
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGMaintainabilityNo Caching5
- Category
- Maintainability
- Occurrences
- 5
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
WARNINGMaintainabilityNon-prefixed class4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- warning
Sample message
Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "WC_Product_Live_Stream".
ERRORMaintainabilityrand rand4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- error
Sample message
rand() is discouraged. Use the far less predictable wp_rand() instead.
WARNINGMaintainabilityDynamic hook name3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "$hook".
WARNINGMaintainabilityerror log error log3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
error_log() found. Debug code should not normally be used in production.
ERRORMaintainabilityfile system operations rmdir3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: rmdir().
ERRORMaintainabilityNon Enqueued Script3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- error
Sample message
Scripts must be registered/enqueued via wp_enqueue_script()
ERRORI18nUnordered Placeholders Text3
- Category
- I18n
- Occurrences
- 3
- Severity
- error
Sample message
Multiple placeholders in translatable strings should be ordered. Expected "%1$s, %2$s", but got "%s, %s" in 'By registering you agree to the %sPrivacy Policy%s'.
External Connections
Potential connections found in static code analysis.
Outbound calls
171
External assets
0
Incoming endpoints
55
Notable Domains
wpstream.net38 · outbound
svelte.dev16 · outbound
docs.wpstream.net5 · outbound
jsdelivr.com4 · outbound
youtu.be3 · outbound
img.youtube.com2 · outbound
Platform / Reference Domains
w3.org56 · platform/reference
codex.wordpress.org5 · platform/reference
github.com3 · platform/reference
opensource.org2 · platform/reference
api.wordpress.org1 · platform/reference
gnu.org1 · platform/reference
schema.org1 · platform/reference
wordpress.org1 · platform/reference
External Asset Domains
No external asset domains detected.
Incoming Endpoints
/wp-json/wpstream/v1/playback-session-verify(?:/(?P<productId>\d+))?REST
register_rest_route
wp_ajax_nopriv_handle_forgot_passpublic
wp_ajax
wp_ajax_nopriv_handle_loginpublic
wp_ajax
wp_ajax_nopriv_handle_registerpublic
wp_ajax
wp_ajax_nopriv_wpstream_ajax_contact_functionpublic
wp_ajax
wp_ajax_nopriv_wpstream_issue_playback_sessionpublic
wp_ajax
Admin AJAX endpoints43
wp_ajax_wpstream_get_videos_listauthenticated
wp_ajax
wp_ajax_aaiu_deleteauthenticated
wp_ajax
wp_ajax_handle_forgot_passauthenticated
wp_ajax
wp_ajax_handle_loginauthenticated
wp_ajax
wp_ajax_handle_registerauthenticated
wp_ajax
wp_ajax_wpstream_ajax_contact_functionauthenticated
wp_ajax
wp_ajax_wpstream_buddy_boss_select_channel_functionauthenticated
wp_ajax
wp_ajax_wpstream_check_event_statusauthenticated
wp_ajax
wp_ajax_wpstream_check_pending_videosauthenticated
wp_ajax
wp_ajax_wpstream_check_user_quotaauthenticated
wp_ajax
wp_ajax_wpstream_check_whipurlauthenticated
wp_ajax
wp_ajax_wpstream_complete_multipart_uploadauthenticated
wp_ajax
31 more hidden
Score History
8 score snapshots
v4.14.1
24
Latest
- Findings
- 2,008
- Errors
- 1,371
- Warnings
- 637
- Check
- 2.1.0
v4.14.0
24
Score
- Findings
- 2,008
- Errors
- 1,371
- Warnings
- 637
- Check
- 2.1.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 24 | 2,008 | 1,371 | 637 | v4.14.1 | 2.1.0 |
| 24 | 2,008 | 1,371 | 637 | v4.14.0 | 2.1.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Author
Category
Issue
Domain
Related
Instant Indexing for Google35 scoreBroadcast Live Video – Live Streaming : WebRTC, HLS, RTSP, RTMP99 scoreJock On Air Now (JOAN)38 scoreLive Shopping & Shoppable Videos For WooCommerce0 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder39 scoreLiteSpeed Cache35 scoreWooCommerce22 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreAkismet Anti-spam: Spam Protection35 scoreJetpack – WP Security, Backup, Speed, & Growth22 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 score
Author
Category
Issue
Domain
Related
Instant Indexing for Google35 scoreBroadcast Live Video – Live Streaming : WebRTC, HLS, RTSP, RTMP99 scoreJock On Air Now (JOAN)38 scoreLive Shopping & Shoppable Videos For WooCommerce0 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder39 scoreLiteSpeed Cache35 scoreWooCommerce22 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreAkismet Anti-spam: Spam Protection35 scoreJetpack – WP Security, Backup, Speed, & Growth22 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 score
Related Plugins
Broadcast Live Video – Live Streaming : WebRTC, HLS, RTSP, RTMP
400 active installs
99
Jock On Air Now (JOAN)
400 active installs
38
Instant Indexing for Google
200k+ active installs
35
Live Shopping & Shoppable Videos For WooCommerce
400 active installs
0