Take control of your WordPress core XML Sitemap and add a Google News Sitemap.
47
Score
270
Errors
224
Warnings
+0
Change
Category Scores
Security36
Repo89
Performance100
Maintainability19
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Maintainability
310
13 issue groups
I18n
168
3 issue groups
Security
14
4 issue groups
Repo Compliance
2
2 issue groups
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$_errors".140
- Category
- Maintainability
- Occurrences
- 140
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$_errors".
ERRORI18nMissing Arg DomainMissing $domain parameter in function call to esc_html__().99
- Category
- I18n
- Occurrences
- 99
- Severity
- error
Sample message
Missing $domain parameter in function call to esc_html__().
ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;75
- Category
- Maintainability
- Occurrences
- 75
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
ERRORMaintainabilitywp function not compatible with requires wpFunction "esc_xml()" requires WordPress 5.5.0, but your plugin minimum supported version is WordPress 4.4.0.45
- Category
- Maintainability
- Occurrences
- 45
- Severity
- error
Sample message
Function "esc_xml()" requires WordPress 5.5.0, but your plugin minimum supported version is WordPress 4.4.0.
WARNINGI18nLow Level Translation FunctionUse of the "translate()" function is reserved for low-level API usage.35
- Category
- I18n
- Occurrences
- 35
- Severity
- warning
Sample message
Use of the "translate()" function is reserved for low-level API usage.
ERRORI18nText Domain MismatchMismatched text domain. Expected 'xml-sitemap-feed' but got 'all-in-one-seo-pack'.34
- Category
- I18n
- Occurrences
- 34
- Severity
- error
Sample message
Mismatched text domain. Expected 'xml-sitemap-feed' but got 'all-in-one-seo-pack'.
WARNINGMaintainabilityNon-prefixed hook nameHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "get_firstpostdate".20
- Category
- Maintainability
- Occurrences
- 20
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "get_firstpostdate".
WARNINGMaintainabilityerror log error logerror_log() found. Debug code should not normally be used in production.7
- Category
- Maintainability
- Occurrences
- 7
- Severity
- warning
Sample message
error_log() found. Debug code should not normally be used in production.
WARNINGMaintainabilityNon-prefixed functionFunctions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "_get_post_time".6
- Category
- Maintainability
- Occurrences
- 6
- Severity
- warning
Sample message
Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "_get_post_time".
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$_id'.6
- Category
- Security
- Occurrences
- 6
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$_id'.
Show 12 moreShow less
WARNINGSecurityDatabase parameter is not escaped4
- Category
- Security
- Occurrences
- 4
- Severity
- warning
Sample message
Unescaped parameter $field used in $wpdb->get_var()\n$field used without escaping.
WARNINGMaintainabilityDirect Query4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
ERRORMaintainabilityfive star reviews detected4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- error
Sample message
Linking directly to 5 stars reviews is not allowed.
ERRORMaintainabilityparse url parse url3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- error
Sample message
parse_url() is discouraged because of inconsistency in the output across PHP versions; use wp_parse_url() instead.
ERRORSecuritySetting is missing a sanitization callback2
- Category
- Security
- Occurrences
- 2
- Severity
- error
Sample message
Sanitization missing for register_setting().
WARNINGMaintainabilityNon-prefixed constant2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "DONOTCACHEDB".
WARNINGMaintainabilityerror log print r2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
print_r() found. Debug code should not normally be used in production.
WARNINGSecurityNonce verification recommended2
- Category
- Security
- Occurrences
- 2
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGMaintainabilityDiscouraged PHP function1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
The use of function ini_set() is discouraged
WARNINGMaintainabilityNo Caching1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
ERRORRepo Complianceplugin header no license1
- Category
- Repo Compliance
- Occurrences
- 1
- Severity
- error
Sample message
Missing "License" in Plugin Header. Please update your Plugin Header with a valid GPLv2 (or later) compatible license.
ERRORRepo Compliancereadme mismatched header requires1
- Category
- Repo Compliance
- Occurrences
- 1
- Severity
- error
Sample message
Mismatched Requires at least: 4.6 != 4.4. "Requires at least" needs to be exactly the same with that in your main plugin file's header.
External Connections
Not analyzed yet.
Score History
First score snapshot
v5.7.7
47
Latest
- Findings
- 494
- Errors
- 270
- Warnings
- 224
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 47 | 494 | 270 | 224 | v5.7.7 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueRelated
Relationship links
Issue
Non-prefixed global variable140 findingsMissing Arg Domain99 findingsMissing direct file access protection75 findingswp function not compatible with requires wp45 findingsLow Level Translation Function35 findingsText Domain Mismatch34 findingsNon-prefixed hook name20 findingserror log error log7 findings
Related
LiteSpeed Cache35 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder39 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce21 scoreAkismet Anti-spam: Spam Protection35 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreWP Mail SMTP by WPForms – The Most Popular SMTP and Email Log Plugin30 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreAdvanced Custom Fields (ACF®)23 scoreMonsterInsights – Google Analytics Dashboard for WordPress (Website Stats Made Easy)25 scoreWP Sitemap Page49 scoreVK All in One Expansion Unit23 scoreSimple Sitemap – Responsive HTML Sitemap for WordPress46 score
Issue
Non-prefixed global variable140 findingsMissing Arg Domain99 findingsMissing direct file access protection75 findingswp function not compatible with requires wp45 findingsLow Level Translation Function35 findingsText Domain Mismatch34 findingsNon-prefixed hook name20 findingserror log error log7 findings
Related
LiteSpeed Cache35 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder39 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce21 scoreAkismet Anti-spam: Spam Protection35 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreWP Mail SMTP by WPForms – The Most Popular SMTP and Email Log Plugin30 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreAdvanced Custom Fields (ACF®)23 scoreMonsterInsights – Google Analytics Dashboard for WordPress (Website Stats Made Easy)25 scoreWP Sitemap Page49 scoreVK All in One Expansion Unit23 scoreSimple Sitemap – Responsive HTML Sitemap for WordPress46 score
Related Plugins
HTTP 410 (Gone) responses
4k+ active installs
100
Flex Posts – Responsive Posts Block
3k+ active installs
100
noindex SEO
3k+ active installs
100
Magic robots.txt
1k+ active installs
100
Disable WP Sitemaps
10k+ active installs
99
WP Simple HTML Sitemap
3k+ active installs
99