Boost SEO 🚀 with powerful XML, HTML, Image, Video & Google News sitemaps for better search engine indexing.
Category Scores
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Security
113
8 issue groups
Maintainability
83
8 issue groups
I18n
10
3 issue groups
Repo Compliance
1
1 issue group
WARNINGSecurityMissing Unslash$_GET['lang'] not unslashed before sanitization. Use wp_unslash() or similar75
- Category
- Security
- Occurrences
- 75
- Severity
- warning
Sample message
$_GET['lang'] not unslashed before sanitization. Use wp_unslash() or similar
ERRORMaintainabilitymissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;61
- Category
- Maintainability
- Occurrences
- 61
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
WARNINGSecurityInput Not SanitizedDetected usage of a non-sanitized input variable: $_FILES['import_file']['tmp_name']23
- Category
- Security
- Occurrences
- 23
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_FILES['import_file']['tmp_name']
WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.8
- Category
- Maintainability
- Occurrences
- 8
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGSecurityUnescaped DBParameterUnescaped parameter $latest_post_query used in $wpdb->get_row()\n$latest_post_query assigned unsafely at line 564.6
- Category
- Security
- Occurrences
- 6
- Severity
- warning
Sample message
Unescaped parameter $latest_post_query used in $wpdb->get_row()\n$latest_post_query assigned unsafely at line 564.
WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().6
- Category
- Maintainability
- Occurrences
- 6
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
ERRORI18nText Domain MismatchMismatched text domain. Expected 'xml-sitemap-generator-for-google' but got 'google-sitemap-generator'.6
- Category
- I18n
- Occurrences
- 6
- Severity
- error
Sample message
Mismatched text domain. Expected 'xml-sitemap-generator-for-google' but got 'google-sitemap-generator'.
WARNINGMaintainabilityNo Code FoundNo PHP code was found in this file and short open tags are not allowed by this install of PHP. This file may be using short open tags but PHP does not allow them.4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- warning
Sample message
No PHP code was found in this file and short open tags are not allowed by this install of PHP. This file may be using short open tags but PHP does not allow them.
WARNINGSecurityInput Not ValidatedDetected usage of a possibly undefined superglobal array index: $_POST['vimeo_api_key']. Check that the array index exists before using it.3
- Category
- Security
- Occurrences
- 3
- Severity
- warning
Sample message
Detected usage of a possibly undefined superglobal array index: $_POST['vimeo_api_key']. Check that the array index exists before using it.
ERRORI18nMissing Translators CommentA function call to esc_html__() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.3
- Category
- I18n
- Occurrences
- 3
- Severity
- error
Sample message
A function call to esc_html__() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.
Show 10 moreShow less
WARNINGSecurityMissing2
- Category
- Security
- Occurrences
- 2
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGSecurityRecommended2
- Category
- Security
- Occurrences
- 2
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGI18nload plugin textdomain Found1
- Category
- I18n
- Occurrences
- 1
- Severity
- warning
Sample message
load_plugin_textdomain() has been discouraged since WordPress version 4.6. When your plugin is hosted on WordPress.org, you no longer need to manually include this function call for translations under your plugin slug. WordPress will automatically load the translations for you as needed.
ERRORSecurityregister setting Missing1
- Category
- Security
- Occurrences
- 1
- Severity
- error
Sample message
Sanitization missing for register_setting().
ERRORSecurityOutput Not Escaped1
- Category
- Security
- Occurrences
- 1
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '" data-{$attr}='"'.
ERRORMaintainabilitystrip tags strip tags1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
strip_tags() is discouraged. Use the more comprehensive wp_strip_all_tags() instead.
ERRORMaintainabilitylibrary core files1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
Library files that are already in the WordPress core are not permitted.
WARNINGMaintainabilitymismatched plugin name1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Plugin name "Dynamic XML Sitemaps Generator for Google" is different from the name declared in plugin header "Google XML Sitemaps Generator".
WARNINGRepo Compliancereadme parser warnings too many tags1
- Category
- Repo Compliance
- Occurrences
- 1
- Severity
- warning
Sample message
One or more tags were ignored. Please limit your plugin to 5 tags.
WARNINGMaintainabilitytrademarked term1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
The plugin name includes a restricted term. Your chosen plugin name - "Google XML Sitemaps Generator" - contains the restricted term "google" and cannot be used to begin your plugin name. We disallow the use of certain terms in ways that are abused, or potentially infringe on and/or are misleading with regards to trademarks. You may use the term "google" elsewhere in your plugin name, such as "... for google".
Score History
First score snapshot
v2.3.2
38
Latest
- Findings
- 207
- Errors
- 74
- Warnings
- 133
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 38 | 207 | 74 | 133 | v2.3.2 | 2.0.0 |
Related Plugins
10k+ active installs
10k+ active installs
2k+ active installs
3k+ active installs
4k+ active installs
30k+ active installs