Zotpress displays your Zotero citations on WordPress.
42
Score
10
Errors
403
Warnings
+3
Change
Category Scores
Security12
Repo100
Performance100
Maintainability53
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Maintainability
320
7 issue groups
Security
93
5 issue groups
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$access_token_endpoint".129
- Category
- Maintainability
- Occurrences
- 129
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$access_token_endpoint".
WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.88
- Category
- Security
- Occurrences
- 88
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.76
- Category
- Maintainability
- Occurrences
- 76
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().76
- Category
- Maintainability
- Occurrences
- 76
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
WARNINGMaintainabilitySchema ChangeAttempting a database schema change is discouraged.27
- Category
- Maintainability
- Occurrences
- 27
- Severity
- warning
Sample message
Attempting a database schema change is discouraged.
ERRORMaintainabilitywp function not compatible with requires wpFunction "sanitize_textarea_field()" requires WordPress 4.7.0, but your plugin minimum supported version is WordPress 3.6.0.9
- Category
- Maintainability
- Occurrences
- 9
- Severity
- error
Sample message
Function "sanitize_textarea_field()" requires WordPress 4.7.0, but your plugin minimum supported version is WordPress 3.6.0.
WARNINGMaintainabilityNon-prefixed constantGlobal constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "WP_USE_THEMES".2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "WP_USE_THEMES".
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_GET['subcollection_name']2
- Category
- Security
- Occurrences
- 2
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_GET['subcollection_name']
WARNINGSecurityUnfinished PrepareReplacement variables found, but no valid placeholders found in the query.1
- Category
- Security
- Occurrences
- 1
- Severity
- warning
Sample message
Replacement variables found, but no valid placeholders found in the query.
WARNINGMaintainabilityerror log var dumpvar_dump() found. Debug code should not normally be used in production.1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
var_dump() found. Debug code should not normally be used in production.
Show 2 moreShow less
ERRORSecurityOutput is not escaped1
- Category
- Security
- Occurrences
- 1
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$content'.
WARNINGSecuritywp redirect wp redirect1
- Category
- Security
- Occurrences
- 1
- Severity
- warning
Sample message
wp_redirect() found. Using wp_safe_redirect(), along with the "allowed_redirect_hosts" filter if needed, can help avoid any chances of malicious redirects within code. It is also important to remember to call exit() after a redirect so that no other unwanted code is executed.
External Connections
Potential connections found in static code analysis.
Outbound calls
64
External assets
0
Incoming endpoints
9
Notable Domains
zotero.org15 · outbound
api.zotero.org7 · outbound
doi.org7 · outbound
jqueryui.com5 · outbound
docs.jquery.com4 · outbound
jquery.org4 · outbound
Platform / Reference Domains
wordpress.org5 · platform/reference
w3.org3 · platform/reference
External Asset Domains
No external asset domains detected.
Incoming Endpoints
wp_ajax_nopriv_zpCiteViaAJAXpublic
wp_ajax
wp_ajax_nopriv_zpDLViaAJAXpublic
wp_ajax
wp_ajax_nopriv_zpRetrieveViaShortcodepublic
wp_ajax
Admin AJAX endpoints6
wp_ajax_zpAccountsViaAJAXauthenticated
wp_ajax
wp_ajax_zpCiteViaAJAXauthenticated
wp_ajax
wp_ajax_zpDLViaAJAXauthenticated
wp_ajax
wp_ajax_zpNoticesViaAJAXauthenticated
wp_ajax
wp_ajax_zpRetrieveViaShortcodeauthenticated
wp_ajax
wp_ajax_zpWidgetMetabox-submitauthenticated
wp_ajax
Score History
2 score snapshots
v7.4.3
42
Latest
- Findings
- 413
- Errors
- 10
- Warnings
- 403
- Check
- 2.0.0
v7.4.2
39
Score
- Findings
- 483
- Errors
- 80
- Warnings
- 403
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 42 | 413 | 10 | 403 | v7.4.3 | 2.0.0 |
| 39 | 483 | 80 | 403 | v7.4.2 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Plugin
Author
Category
Issue
Domain
Related
Footnotes Made Easy100 scoreteachPress23 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder39 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce21 scoreAkismet Anti-spam: Spam Protection35 scoreLiteSpeed Cache35 scoreAll-in-One WP Migration and Backup34 score
Plugin
Author
Category
Issue
Domain
Related
Footnotes Made Easy100 scoreteachPress23 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder39 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce21 scoreAkismet Anti-spam: Spam Protection35 scoreLiteSpeed Cache35 scoreAll-in-One WP Migration and Backup34 score
Related Plugins
Footnotes Made Easy
2k+ active installs
100
teachPress
2k+ active installs
23