YMC Filter

A powerful and flexible plugin to filter and display posts, custom post types, and other content in beautifully designed grid layouts.

v3.12.3YMCUpdated Added 4k+ installs96% rating100% support resolved
24
Score
12
Errors
1,729
Warnings
+0
Change

Category Scores

Security0
Repo100
Performance91
Maintainability0

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

1,741 findings

Maintainability

1,695

15 issue groups

Security

39

8 issue groups

Performance

4

2 issue groups

WARNINGMaintainabilityNon Prefixed Variable FoundGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$all_class_active".1,296
Category
Maintainability
Occurrences
1,296
Severity
warning

Sample message

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$all_class_active".

WARNINGMaintainabilityNon Prefixed Hookname FoundHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "'ymc/filter/query/wp/allowed_callbacks_'.$filter_id".308
Category
Maintainability
Occurrences
308
Severity
warning

Sample message

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "'ymc/filter/query/wp/allowed_callbacks_'.$filter_id".

WARNINGMaintainabilityNon Prefixed Function FoundFunctions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "YMC".40
Category
Maintainability
Occurrences
40
Severity
warning

Sample message

Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "YMC".

WARNINGSecurityMissingProcessing form data without nonce verification.19
Category
Security
Occurrences
19
Severity
warning

Sample message

Processing form data without nonce verification.

WARNINGMaintainabilityNon Prefixed Namespace FoundNamespaces declared by a theme/plugin should start with the theme/plugin prefix. Found: "YMC_Smart_Filters".11
Category
Maintainability
Occurrences
11
Severity
warning

Sample message

Namespaces declared by a theme/plugin should start with the theme/plugin prefix. Found: "YMC_Smart_Filters".

WARNINGMaintainabilityslow db query meta queryDetected usage of meta_query, possible slow query.8
Category
Maintainability
Occurrences
8
Severity
warning

Sample message

Detected usage of meta_query, possible slow query.

WARNINGSecurityRecommendedProcessing form data without nonce verification.7
Category
Security
Occurrences
7
Severity
warning

Sample message

Processing form data without nonce verification.

WARNINGMaintainabilityslow db query meta keyDetected usage of meta_key, possible slow query.6
Category
Maintainability
Occurrences
6
Severity
warning

Sample message

Detected usage of meta_key, possible slow query.

WARNINGMaintainabilityslow db query tax queryDetected usage of tax_query, possible slow query.6
Category
Maintainability
Occurrences
6
Severity
warning

Sample message

Detected usage of tax_query, possible slow query.

WARNINGSecurityInput Not SanitizedDetected usage of a non-sanitized input variable: $_POST[$meta_key]5
Category
Security
Occurrences
5
Severity
warning

Sample message

Detected usage of a non-sanitized input variable: $_POST[$meta_key]

Show 15 more
WARNINGMaintainabilityDynamic Hookname Found4
Category
Maintainability
Occurrences
4
Severity
warning

Sample message

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "$hook_name".

WARNINGMaintainabilityslow db query meta value3
Category
Maintainability
Occurrences
3
Severity
warning

Sample message

Detected usage of meta_value, possible slow query.

WARNINGMaintainabilityNon Prefixed Constant Found3
Category
Maintainability
Occurrences
3
Severity
warning

Sample message

Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "YMC_SMART_FILTER_DIR".

WARNINGSecurityMissing Unslash3
Category
Security
Occurrences
3
Severity
warning

Sample message

$_POST['ymc_fg_filter_options'] not unslashed before sanitization. Use wp_unslash() or similar

ERRORMaintainabilitylibrary core files3
Category
Maintainability
Occurrences
3
Severity
error

Sample message

Library files that are already in the WordPress core are not permitted.

WARNINGSecurityInterpolated Not Prepared2
Category
Security
Occurrences
2
Severity
warning

Sample message

Use placeholders and $wpdb->prepare(); found interpolated variable $placeholders at "DELETE FROM {$postmeta_table} WHERE meta_key IN ($placeholders)"

ERRORMaintainabilitystrip tags strip tags2
Category
Maintainability
Occurrences
2
Severity
error

Sample message

strip_tags() is discouraged. Use the more comprehensive wp_strip_all_tags() instead.

WARNINGMaintainabilityMissing Version2
Category
Maintainability
Occurrences
2
Severity
warning

Sample message

Resource version not set in call to wp_register_style(). This means new versions of the style may not always be loaded due to browser caching.

ERRORMaintainabilityNon Enqueued Script2
Category
Maintainability
Occurrences
2
Severity
error

Sample message

Scripts must be registered/enqueued via wp_enqueue_script()

WARNINGPerformancePost Not In post not in2
Category
Performance
Occurrences
2
Severity
warning

Sample message

Using exclusionary parameters, like post__not_in, in calls to get_posts() should be done with caution, see https://wpvip.com/documentation/performance-improvements-by-removing-usage-of-post__not_in/ for more information.

ERRORPerformanceSuppress Filters suppress filters2
Category
Performance
Occurrences
2
Severity
error

Sample message

Setting `suppress_filters` to `true` is prohibited.

ERRORSecurityNot Prepared1
Category
Security
Occurrences
1
Severity
error

Sample message

Use placeholders and $wpdb->prepare(); found $sql

ERRORSecurityQuoted Simple Placeholder1
Category
Security
Occurrences
1
Severity
error

Sample message

Simple placeholders should not be quoted in the query string in $wpdb->prepare(). Found: '%s'.

WARNINGSecurityUnfinished Prepare1
Category
Security
Occurrences
1
Severity
warning

Sample message

Replacement variables found, but no valid placeholders found in the query.

WARNINGMaintainabilityNon Prefixed Class Found1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "YMC_Filter_Grids".

Score History

First score snapshot

v3.12.3

24

Latest

Findings
1,741
Errors
12
Warnings
1,729
Check
2.0.0

Related Plugins

Gridable

4k+ active installs

100
Simply Show Hooks

2k+ active installs

100
Filter for Divi

2k+ active installs

99
Enable CORS

6k+ active installs

98
Filter Gallery

3k+ active installs

98