PluginCheck.CodeAnalysis.ShortURL.Found
Code Analysis Short URL Found
The plugin contains a development-only URL, short URL, or local endpoint reference.
Why It Shows Up
Plugin Check found localhost references, short URLs, or offloaded content references that may not be appropriate in a distributed plugin.
Why It Matters
Local or opaque URLs can break for users, hide the true destination, or make repository review harder.
How to Fix
- Remove localhost and private-network URLs before release.
- Use full, transparent URLs for external resources.
- Bundle required assets locally when WordPress.org expects them to ship with the plugin.
Affected Plugins
| Rank | Plugin | Score | Errors | Warnings | Installs | Updated | Top Issue |
|---|---|---|---|---|---|---|---|
| #1 | Backup Migration | 21 | 981 | 1,093 | 80k+ | 2026-06-05 | Non Prefixed Variable Found |
| #2 | Comet Cache | 21 | 857 | 245 | 20k+ | 2025-07-02 | Output Not Escaped |
| #3 | Cost Calculator Builder | 21 | 322 | 765 | 30k+ | 2026-06-19 | Non Prefixed Variable Found |
| #4 | Revive Social – Social Media Auto Post and Scheduling Automation Plugin | 21 | 255 | 425 | 20k+ | 2026-05-21 | Non Prefixed Hookname Found |
| #5 | WP phpMyAdmin | 21 | 4,528 | 6,435 | 50k+ | 2025-10-17 | Missing Arg Domain |
| #6 | Clearfy Cache – WordPress optimization plugin, Minify HTML, CSS & JS, Defer | 22 | 2,858 | 1,270 | 50k+ | 2026-04-23 | Text Domain Mismatch |
| #7 | MailOptin – Popup, Optin Forms & Email Newsletters for Mailchimp, HubSpot, AWeber Etc. | 22 | 2,619 | 2,453 | 10k+ | 2026-06-19 | Output Not Escaped |
| #8 | NextScripts: Social Networks Auto-Poster | 22 | 2,408 | 1,133 | 30k+ | 2026-02-26 | Output Not Escaped |
| #9 | MasterStudy LMS WordPress Plugin – for Online Courses and Education | 23 | 1,419 | 4,875 | 10k+ | 2026-06-18 | Non Prefixed Variable Found |
| #10 | MaxButtons – Create buttons | 23 | 655 | 409 | 70k+ | 2025-09-15 | Output Not Escaped |
| #11 | MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar | 23 | 4,065 | 488 | 20k+ | 2026-04-17 | Text Domain Mismatch |
| #12 | Redirection | 23 | 523 | 457 | 100k+ | 2026-05-08 | Non Prefixed Variable Found |
| #13 | Schema | 23 | 1,173 | 245 | 40k+ | 2025-06-14 | Text Domain Mismatch |
| #14 | WP Ultimate CSV Importer – WordPress Import & Export for CSV, XML & Excel | 23 | 1,119 | 3,516 | 20k+ | 2026-06-18 | Interpolated Not Prepared |
| #15 | Product Feed Manager For WooCommerce – Sell on 200+ Online Marketplaces | 24 | 2,248 | 3,338 | 10k+ | 2026-06-11 | slow db query meta key |
| #16 | EmbedPress – PDF Embedder, Embed PDF viewer, YouTube Videos, 3D FlipBook, Social feeds & more | 24 | 668 | 1,560 | 100k+ | 2026-06-08 | Output Not Escaped |
| #17 | Simple Calendar – Google Calendar Plugin | 24 | 2,035 | 591 | 50k+ | 2026-06-18 | missing direct file access protection |
| #18 | Appointment Hour Booking – Booking Calendar | 25 | 261 | 1,254 | 10k+ | 2026-06-15 | Non Prefixed Variable Found |
| #19 | Site Kit by Google – Analytics, Search Console, AdSense, Speed | 25 | 1,304 | 242 | 5m+ | 2026-06-15 | missing direct file access protection |
| #20 | Social Media Share Buttons & Social Sharing Icons | 25 | 2,433 | 1,383 | 100k+ | 2026-06-12 | Unsafe Printing Function |
| #21 | Social Share Icons & Social Share Buttons | 25 | 2,365 | 1,357 | 10k+ | 2026-06-12 | Output Not Escaped |
| #22 | W3 Total Cache | 25 | 617 | 1,345 | 900k+ | 2026-05-19 | Non Prefixed Variable Found |
| #23 | Floating Chat Widget: Contact Chat Icons, Telegram Chat, Line Messenger, WeChat, Email, SMS, Call Button – Chaty | 26 | 113 | 671 | 400k+ | 2026-06-11 | Non Prefixed Variable Found |
| #24 | User Submitted Posts – Enable Users to Submit Posts from the Front End | 26 | 699 | 396 | 10k+ | 2026-06-08 | Text Domain Mismatch |
| #25 | Addon Elements for Elementor (formerly Elementor Addon Elements) | 27 | 4,065 | 103 | 90k+ | 2026-03-23 | Text Domain Mismatch |
| #26 | Duplicate Post | 27 | 447 | 274 | 300k+ | 2026-05-08 | Unsafe Printing Function |
| #27 | Reviews and Rating – Google Reviews | 28 | 343 | 219 | 20k+ | 2025-01-31 | Text Domain Mismatch |
| #28 | Connect Matomo – Analytics Dashboard for WordPress | 28 | 100 | 102 | 60k+ | 2026-06-18 | Missing Translators Comment |
| #29 | Subscribe2 – Form, Email Subscribers & Newsletters | 32 | 32 | 410 | 10k+ | 2025-12-29 | Direct Query |
| #30 | Video Gallery – YouTube Playlist, Channel Gallery by YotuWP | 33 | 278 | 101 | 20k+ | 2024-06-25 | Missing Arg Domain |
| #31 | Featured Video Plus | 34 | 99 | 105 | 10k+ | 2017-11-28 | Non Prefixed Variable Found |
| #32 | Orders Tracking for WooCommerce | 36 | 8 | 330 | 10k+ | 2026-01-20 | Missing Unslash |
| #33 | AddToAny Share Buttons | 37 | 123 | 164 | 300k+ | 2026-05-22 | Unsafe Printing Function |
| #34 | Additional Variation Images Gallery for WooCommerce | 39 | 61 | 127 | 20k+ | 2026-05-20 | Non Prefixed Variable Found |
| #35 | Auto Image Attributes From Filename With Bulk Updater (Add Alt Text, Image Title For Image SEO) | 41 | 175 | 26 | 100k+ | 2026-05-19 | Unsafe Printing Function |
| #36 | HTML Editor Syntax Highlighter | 42 | 30 | 21 | 50k+ | 2024-03-16 | Output Not Escaped |
| #37 | AMP | 43 | 63 | 362 | 400k+ | 2025-04-10 | Non Prefixed Hookname Found |
| #38 | Connect Contact Form 7 and Mailchimp | 53 | 236 | 52 | 50k+ | 2026-05-14 | Text Domain Mismatch |
| #39 | Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE | 54 | 344 | 93 | 300k+ | 2026-05-27 | Offloaded Content |
| #40 | Head Meta Data | 55 | 19 | 42 | 10k+ | 2026-04-21 | Non Prefixed Function Found |
| #41 | Search Exclude | 57 | 73 | 40 | 50k+ | 2026-05-22 | Text Domain Mismatch |
| #42 | GutenKit – Page Builder Blocks, Patterns, and Templates for Gutenberg Block Editor | 61 | 9 | 119 | 70k+ | 2026-06-16 | Non Prefixed Variable Found |
| #43 | Image Hover Effects – Elementor Addon | 63 | 118 | 7 | 40k+ | 2024-07-12 | Text Domain Mismatch |
| #44 | Thank You Page for WooCommerce – Custom Thank You Page & Redirect | 68 | 6 | 27 | 10k+ | 2026-06-09 | Non Prefixed Variable Found |
| #45 | WP Social Ninja – Embed Social Feeds, User Reviews & Chat Widgets | 80 | 26 | 18 | 30k+ | 2026-05-22 | missing direct file access protection |
| #46 | Popup builder with Gamification, Multi-Step Popups, Page-Level Targeting, and WooCommerce Triggers | 83 | 2 | 73 | 60k+ | 2026-06-16 | Direct Query |
| #47 | Hello Plus | 94 | 15 | 38 | 80k+ | 2026-05-19 | Post Not In exclude |
| #48 | Maps Widget for Google Maps | 99 | 1 | 2 | 30k+ | 2026-05-21 | Found |
