An AI-powered WordPress automation chatbot plugin that helps you automate support, engage visitors, and answer questions using OpenAI or Google Gemini
Prioritized issue groups from the latest Plugin Check scan
I18n
217
1 issue group
Maintainability
120
10 issue groups
Security
105
6 issue groups
Sample message
Mismatched text domain. Expected 'zeno-chatbot-ai' but got 'woocommerce'.
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"The bulk action $action does not have a callback method"'.
Sample message
Use of a direct database call is discouraged.
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
Sample message
Unescaped parameter $column_name used in $wpdb->get_var()
Sample message
Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "as_enqueue_async_action".
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "admin_memory_limit".
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "$hook".
Sample message
The use of function ini_set() is discouraged
Sample message
Use placeholders and $wpdb->prepare(); found interpolated variable {$order} at "SELECT action_id from {$wpdb->actionscheduler_actions} {$where} {$order} LIMIT %d FOR UPDATE{$skip_locked}"
Sample message
Function "wp_cache_flush_runtime()" requires WordPress 6.0.0, but your plugin minimum supported version is WordPress 5.9.0.
Sample message
Unescaped parameter $update_sql used in $wpdb->query()\n$update_sql assigned unsafely at line 1007.
Sample message
Use placeholders and $wpdb->prepare(); found $update_sql
Sample message
date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.
Sample message
Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "WP_Async_Request".
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found 'wc_help_tip'.
Potential connections found in static code analysis.
Outbound calls
299
External assets
0
Incoming endpoints
1
No external asset domains detected.
wp_ajax
First score snapshot
v1.5.2
36
Latest
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 36 | 442 | 311 | 131 | v1.5.2 | 2.0.0 |
Author, categories, issues, domains, and nearby plugins.