Get Premium level 50+ Free Elementor Widgets, 10+ Free Elementor Extensions, 500+ Free Themes & Templates for Elementor.
29
Score
28
Errors
827
Warnings
+0
Change
Category Scores
Security0
Repo100
Performance71
Maintainability35
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Maintainability
561
11 issue groups
Security
165
10 issue groups
Performance
120
2 issue groups
I18n
3
2 issue groups
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$after_image_markup".494
- Category
- Maintainability
- Occurrences
- 494
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$after_image_markup".
WARNINGPerformancePost Not In excludeUsing exclusionary parameters, like exclude, in calls to get_posts() should be done with caution, see https://wpvip.com/documentation/performance-improvements-by-removing-usage-of-post__not_in/ for more information.115
- Category
- Performance
- Occurrences
- 115
- Severity
- warning
Sample message
Using exclusionary parameters, like exclude, in calls to get_posts() should be done with caution, see https://wpvip.com/documentation/performance-improvements-by-removing-usage-of-post__not_in/ for more information.
WARNINGSecurityRequest data is not unslashed$_GET[$key] not unslashed before sanitization. Use wp_unslash() or similar49
- Category
- Security
- Occurrences
- 49
- Severity
- warning
Sample message
$_GET[$key] not unslashed before sanitization. Use wp_unslash() or similar
WARNINGSecurityInput is not validatedDetected usage of a possibly undefined superglobal array index: $_POST['captcha']. Check that the array index exists before using it.31
- Category
- Security
- Occurrences
- 31
- Severity
- warning
Sample message
Detected usage of a possibly undefined superglobal array index: $_POST['captcha']. Check that the array index exists before using it.
WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.24
- Category
- Security
- Occurrences
- 24
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_GET[$key]23
- Category
- Security
- Occurrences
- 23
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_GET[$key]
WARNINGMaintainabilityNon-prefixed hook nameHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "active_plugins".21
- Category
- Maintainability
- Occurrences
- 21
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "active_plugins".
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$classes'.15
- Category
- Security
- Occurrences
- 15
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$classes'.
WARNINGSecurityMissing nonce verificationProcessing form data without nonce verification.14
- Category
- Security
- Occurrences
- 14
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.10
- Category
- Maintainability
- Occurrences
- 10
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
Show 15 moreShow less
WARNINGMaintainabilityNo Caching9
- Category
- Maintainability
- Occurrences
- 9
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
WARNINGMaintainabilityslow db query meta key7
- Category
- Maintainability
- Occurrences
- 7
- Severity
- warning
Sample message
Detected usage of meta_key, possible slow query.
WARNINGMaintainabilityslow db query meta value5
- Category
- Maintainability
- Occurrences
- 5
- Severity
- warning
Sample message
Detected usage of meta_value, possible slow query.
WARNINGMaintainabilityNon-prefixed function5
- Category
- Maintainability
- Occurrences
- 5
- Severity
- warning
Sample message
Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "get_all_published_content_items".
WARNINGPerformancePost Not In post not in5
- Category
- Performance
- Occurrences
- 5
- Severity
- warning
Sample message
Using exclusionary parameters, like post__not_in, in calls to get_posts() should be done with caution, see https://wpvip.com/documentation/performance-improvements-by-removing-usage-of-post__not_in/ for more information.
ERRORSecuritySQL query is not prepared3
- Category
- Security
- Occurrences
- 3
- Severity
- error
Sample message
Use placeholders and $wpdb->prepare(); found $sql
WARNINGMaintainabilityslow db query meta query3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
Detected usage of meta_query, possible slow query.
WARNINGMaintainabilityslow db query tax query3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
Detected usage of tax_query, possible slow query.
WARNINGSecurityDatabase parameter is not escaped2
- Category
- Security
- Occurrences
- 2
- Severity
- warning
Sample message
Unescaped parameter $table used in $wpdb->query()
ERRORSecurityDatabase parameter is not escaped2
- Category
- Security
- Occurrences
- 2
- Severity
- error
Sample message
Unescaped parameter $sql used in $wpdb->get_var()\n$sql assigned unsafely at line 999.
WARNINGSecurityInterpolated SQL is not prepared2
- Category
- Security
- Occurrences
- 2
- Severity
- warning
Sample message
Use placeholders and $wpdb->prepare(); found interpolated variable $post_type_in_string at "SELECT ID FROM $wpdb->posts WHERE post_title = %s AND post_type IN ($post_type_in_string)"
ERRORMaintainabilityDeprecated parameter: get_terms parameter 22
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
The parameter "array(\n\t\t\t\t\t\t\t'hide_empty' => false,\n\t\t\t\t\t\t\t'orderby' => 'name',\n\t\t\t\t\t\t\t'order' => 'ASC',\n\t\t\t\t\t\t\t'include' => implode( ',', $ids ),\n\t\t\t\t\t\t)" at position #2 of get_terms() has been deprecated since WordPress version 4.5.0. Instead do not pass the parameter.
ERRORMaintainabilityDeprecated parameter: wp_upload_bits parameter 22
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
The parameter "0" at position #2 of wp_upload_bits() has been deprecated since WordPress version 2.0.0. Instead do not pass the parameter.
ERRORI18nText Domain Mismatch2
- Category
- I18n
- Occurrences
- 2
- Severity
- error
Sample message
Mismatched text domain. Expected 'xpro-elementor-addons' but got 'xpro'.
WARNINGI18nDiscouraged text-domain loading1
- Category
- I18n
- Occurrences
- 1
- Severity
- warning
Sample message
load_plugin_textdomain() has been discouraged since WordPress version 4.6. When your plugin is hosted on WordPress.org, you no longer need to manually include this function call for translations under your plugin slug. WordPress will automatically load the translations for you as needed.
External Connections
Potential connections found in static code analysis.
Outbound calls
191
External assets
0
Incoming endpoints
27
Notable Domains
elementor.wpxpro.com17 · outbound
your-link.com11 · outbound
developers.facebook.com6 · outbound
twitter.com5 · outbound
facebook.com4 · outbound
player.vimeo.com4 · outbound
Platform / Reference Domains
w3.org16 · platform/reference
github.com7 · platform/reference
opensource.org3 · platform/reference
wordpress.org3 · platform/reference
codex.wordpress.org1 · platform/reference
developer.wordpress.org1 · platform/reference
gnu.org1 · platform/reference
schema.org1 · platform/reference
External Asset Domains
No external asset domains detected.
Incoming Endpoints
wp_ajax_nopriv_add_cart_single_product_ajaxpublic
wp_ajax
wp_ajax_nopriv_load_quick_view_product_datapublic
wp_ajax
wp_ajax_nopriv_xpro_elementor_contact_formpublic
wp_ajax
wp_ajax_nopriv_xpro_elementor_live_search_data_fetchpublic
wp_ajax
wp_ajax_nopriv_xpro_elementor_mailchimp_formpublic
wp_ajax
Admin AJAX endpoints22
wp_ajax_add_cart_single_product_ajaxauthenticated
wp_ajax
wp_ajax_complete_screenauthenticated
wp_ajax
wp_ajax_content_screenauthenticated
wp_ajax
wp_ajax_demo_download_and_unzipauthenticated
wp_ajax
wp_ajax_import_contentauthenticated
wp_ajax
wp_ajax_install_pluginauthenticated
wp_ajax
wp_ajax_load_quick_view_product_dataauthenticated
wp_ajax
wp_ajax_plugin_screenauthenticated
wp_ajax
wp_ajax_save_megamenu_settingsauthenticated
wp_ajax
wp_ajax_xpro_add_new_attributeauthenticated
wp_ajax
wp_ajax_xpro_elementor_addons_admin_actionauthenticated
wp_ajax
wp_ajax_xpro_elementor_contact_formauthenticated
wp_ajax
10 more hidden
Score History
4 score snapshots
v1.7.6
29
Latest
- Findings
- 855
- Errors
- 28
- Warnings
- 827
- Check
- 2.0.0
v1.7.5
29
Score
- Findings
- 855
- Errors
- 28
- Warnings
- 827
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 29 | 855 | 28 | 827 | v1.7.6 | 2.0.0 |
| 29 | 855 | 28 | 827 | v1.7.5 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Author
Category
Issue
Domain
Related
Elementor Website Builder – more than just a page builder39 scoreContact Form 769 scoreWooCommerce21 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreLiteSpeed Cache35 scoreAkismet Anti-spam: Spam Protection35 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreRank Math SEO – AI SEO Tools to Dominate SEO Rankings30 scoreJetpack – WP Security, Backup, Speed, & Growth22 scoreEssential Addons for Elementor – Popular Elementor Templates & Widgets31 scoreUltimate Addons for Elementor33 scoreElementsKit Elementor Addons – Advanced Widgets & Templates Addons for Elementor39 scoreStarter Templates – AI-Powered Templates for Elementor & Gutenberg24 scorePremium Addons for Elementor – Elementor Templates, Widgets & MCP Tools22 score
Author
Category
Issue
Domain
Related
Elementor Website Builder – more than just a page builder39 scoreContact Form 769 scoreWooCommerce21 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreLiteSpeed Cache35 scoreAkismet Anti-spam: Spam Protection35 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreRank Math SEO – AI SEO Tools to Dominate SEO Rankings30 scoreJetpack – WP Security, Backup, Speed, & Growth22 scoreEssential Addons for Elementor – Popular Elementor Templates & Widgets31 scoreUltimate Addons for Elementor33 scoreElementsKit Elementor Addons – Advanced Widgets & Templates Addons for Elementor39 scoreStarter Templates – AI-Powered Templates for Elementor & Gutenberg24 scorePremium Addons for Elementor – Elementor Templates, Widgets & MCP Tools22 score
Related Plugins
Input Mask For Elementor Form Fields
20k+ active installs
100
Selection Lite
9k+ active installs
100
Turbo Addons Elementor
3k+ active installs
100
Easy Elements for Elementor – Addons & Website Templates
1k+ active installs
100
100
Popup for Elementor
800 active installs
100