Get WordPress vulnerability alerts from the WPVulnerability Database API.
91
Score
11
Errors
7
Warnings
-5
Change
Category Scores
Security86
Repo100
Performance100
Maintainability91
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Maintainability
14
2 issue groups
Security
3
2 issue groups
I18n
1
1 issue group
ERRORMaintainabilitywp function not compatible with requires wpFunction "determine_locale()" requires WordPress 5.0.0, but your plugin minimum supported version is WordPress 4.7.0.11
- Category
- Maintainability
- Occurrences
- 11
- Severity
- error
Sample message
Function "determine_locale()" requires WordPress 5.0.0, but your plugin minimum supported version is WordPress 4.7.0.
WARNINGMaintainabilitytrademarked termThe plugin name includes a restricted term. Your chosen plugin name - "WPVulnerability" - contains the restricted term "wp" which cannot be used at all in your plugin name.3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
The plugin name includes a restricted term. Your chosen plugin name - "WPVulnerability" - contains the restricted term "wp" which cannot be used at all in your plugin name.
WARNINGSecurityRequest data is not unslashed$_SERVER['HTTP_ACCEPT'] not unslashed before sanitization. Use wp_unslash() or similar2
- Category
- Security
- Occurrences
- 2
- Severity
- warning
Sample message
$_SERVER['HTTP_ACCEPT'] not unslashed before sanitization. Use wp_unslash() or similar
WARNINGI18nDiscouraged text-domain loadingload_plugin_textdomain() has been discouraged since WordPress version 4.6. When your plugin is hosted on WordPress.org, you no longer need to manually include this function call for translations under your plugin slug. WordPress will automatically load the translations for you as needed.1
- Category
- I18n
- Occurrences
- 1
- Severity
- warning
Sample message
load_plugin_textdomain() has been discouraged since WordPress version 4.6. When your plugin is hosted on WordPress.org, you no longer need to manually include this function call for translations under your plugin slug. WordPress will automatically load the translations for you as needed.
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_POST['wpvulnerability-analyze']1
- Category
- Security
- Occurrences
- 1
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_POST['wpvulnerability-analyze']
External Connections
Potential connections found in static code analysis.
Outbound calls
87
External assets
0
Incoming endpoints
2
Notable Domains
wpvulnerability.com38 · outbound
robotstxt.es25 · outbound
hooks.slack.com4 · outbound
outlook.office.com4 · outbound
core.telegram.org2 · outbound
discord.com2 · outbound
Platform / Reference Domains
External Asset Domains
No external asset domains detected.
Incoming Endpoints
No public endpoints detected.
Admin AJAX endpoints1
wp_ajax_wpvulnerability_test_apiauthenticated
wp_ajax
Score History
4 score snapshots
v5.1.6
91
Latest
- Findings
- 18
- Errors
- 11
- Warnings
- 7
- Check
- 2.1.0
v5.1.2
96
Score
- Findings
- 5
- Errors
- 0
- Warnings
- 5
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 91 | 18 | 11 | 7 | v5.1.6 | 2.1.0 |
| 96 | 5 | 0 | 5 | v5.1.2 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Plugin
Author
Issue
Domain
Related
Elementor Website Builder – more than just a page builder39 scoreAkismet Anti-spam: Spam Protection35 scoreAll-in-One WP Migration and Backup34 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreClassic Editor63 scoreWooCommerce22 scoreWPForms – AI Form Builder for WordPress – Contact Forms, Payment Forms, Survey Form, Quiz & More29 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreHostinger Tools82 scoreJetpack – WP Security, Backup, Speed, & Growth22 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreAll-In-One Security (AIOS) – Security and Firewall24 scoreLimit Login Attempts Security – Login Security, 2FA, Firewall, Brute Force Prevention24 score
Plugin
Author
Issue
Domain
Related
Elementor Website Builder – more than just a page builder39 scoreAkismet Anti-spam: Spam Protection35 scoreAll-in-One WP Migration and Backup34 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreClassic Editor63 scoreWooCommerce22 scoreWPForms – AI Form Builder for WordPress – Contact Forms, Payment Forms, Survey Form, Quiz & More29 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreHostinger Tools82 scoreJetpack – WP Security, Backup, Speed, & Growth22 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreAll-In-One Security (AIOS) – Security and Firewall24 scoreLimit Login Attempts Security – Login Security, 2FA, Firewall, Brute Force Prevention24 score
Related Plugins
User Role Editor
700k+ active installs
100
Stop User Enumeration
50k+ active installs
100
Login Security Captcha
10k+ active installs
100
Stop XML-RPC Attacks
6k+ active installs
100
Dam Spam
3k+ active installs
100
Compromise Scanner for wp2shell
3k+ active installs
100