XO Security is a plugin to enhance login related security.
85
Score
1
Errors
8
Warnings
-9
Change
Category Scores
Security74
Repo97
Performance100
Maintainability98
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Security
7
3 issue groups
Maintainability
1
1 issue group
Repo Compliance
1
1 issue group
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_POST['redirect_to']4
- Category
- Security
- Occurrences
- 4
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_POST['redirect_to']
WARNINGSecurityDatabase parameter is not escapedUnescaped parameter $where used in $wpdb->get_results()\n$orderby assigned unsafely at line 256.2
- Category
- Security
- Occurrences
- 2
- Severity
- warning
Sample message
Unescaped parameter $where used in $wpdb->get_results()\n$orderby assigned unsafely at line 256.
WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.1
- Category
- Security
- Occurrences
- 1
- Severity
- warning
Sample message
Processing form data without nonce verification.
ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
WARNINGRepo Complianceplugin header nonexistent domain pathThe "Domain Path" header in the plugin file must point to an existing folder. Found: "languages"1
- Category
- Repo Compliance
- Occurrences
- 1
- Severity
- warning
Sample message
The "Domain Path" header in the plugin file must point to an existing folder. Found: "languages"
External Connections
Potential connections found in static code analysis.
Outbound calls
22
External assets
0
Incoming endpoints
1
Notable Domains
d-project.com2 · outbound
xakuro.com2 · outbound
api.qrserver.com1 · outbound
blog.ircmaxell.com1 · outbound
code.google.com1 · outbound
denso-wave.com1 · outbound
Platform / Reference Domains
w3.org7 · platform/reference
core.trac.wordpress.org1 · platform/reference
github.com1 · platform/reference
opensource.org1 · platform/reference
External Asset Domains
No external asset domains detected.
Incoming Endpoints
No public endpoints detected.
Admin AJAX endpoints1
wp_ajax_xo_security_dashboardauthenticated
wp_ajax
Score History
2 score snapshots
v3.11.0
85
Latest
- Findings
- 9
- Errors
- 1
- Warnings
- 8
- Check
- 2.0.0
v3.10.9
94
Score
- Findings
- 8
- Errors
- 5
- Warnings
- 3
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 85 | 9 | 1 | 8 | v3.11.0 | 2.0.0 |
| 94 | 8 | 5 | 3 | v3.10.9 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Plugin
Author
Issue
Domain
Related
Wordfence Security – Firewall, Malware Scan, and Login Security21 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce21 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder39 scoreLiteSpeed Cache35 scoreAll-in-One WP Migration and Backup34 scoreAkismet Anti-spam: Spam Protection35 scoreHostinger Tools82 scoreJetpack – WP Security, Backup, Speed, & Growth22 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreWPS Hide Login41 scoreAll-In-One Security (AIOS) – Security and Firewall24 score
Plugin
Author
Issue
Domain
Related
Wordfence Security – Firewall, Malware Scan, and Login Security21 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce21 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder39 scoreLiteSpeed Cache35 scoreAll-in-One WP Migration and Backup34 scoreAkismet Anti-spam: Spam Protection35 scoreHostinger Tools82 scoreJetpack – WP Security, Backup, Speed, & Growth22 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreWPS Hide Login41 scoreAll-In-One Security (AIOS) – Security and Firewall24 score
Related Plugins
Login Security Captcha
10k+ active installs
100
Stop XML-RPC Attacks
6k+ active installs
100
Simple Login Log
5k+ active installs
100
Shibboleth
3k+ active installs
100
Maintenance mode for WooCommerce
2k+ active installs
100
Dam Spam
2k+ active installs
100