Captcha protection against spam comments & brute force login attacks using Google reCAPTCHA.
Category Scores
Top Issues by Category
maintainability16
Issues Details
18 issues found in latest scan
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$config".
load_plugin_textdomain() has been discouraged since WordPress version 4.6. When your plugin is hosted on WordPress.org, you no longer need to manually include this function call for translations under your plugin slug. WordPress will automatically load the translations for you as needed.
Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "wf_flyout".
Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "WP_USE_THEMES".
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "wp_authenticate_user".
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
Mismatched Requires PHP: 5.6 != 5.2. "Requires PHP" needs to be exactly the same with that in your main plugin file's header.
| Code | Type | Message | Count |
|---|---|---|---|
| WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedVariableFound | WARNING | Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$config". | 11 |
| PluginCheck.CodeAnalysis.DiscouragedFunctions.load_plugin_textdomainFound | WARNING | load_plugin_textdomain() has been discouraged since WordPress version 4.6. When your plugin is hosted on WordPress.org, you no longer need to manually include this function call for translations under your plugin slug. WordPress will automatically load the translations for you as needed. | 1 |
| WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedClassFound | WARNING | Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "wf_flyout". | 1 |
| WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedConstantFound | WARNING | Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "WP_USE_THEMES". | 1 |
| WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedHooknameFound | WARNING | Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "wp_authenticate_user". | 1 |
| library_core_files | ERROR | Library files that are already in the WordPress core are not permitted. | 1 |
| missing_direct_file_access_protection | ERROR | PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit; | 1 |
| readme_mismatched_header_requires_php | ERROR | Mismatched Requires PHP: 5.6 != 5.2. "Requires PHP" needs to be exactly the same with that in your main plugin file's header. | 1 |
Latest Snapshot
Findings
18
Errors
3
Warnings
15
Score History
First score snapshot
First scan completed Jun 19, 2026
v5.39 · Plugin Check 2.0.0 · Model 2026.06-mvp-static-v2
Jun 19, 2026
v5.39
97
Latest
- Findings
- 18
- Errors
- 3
- Warnings
- 15
- Plugin Check
- 2.0.0
- Model
- 2026.06-mvp-static-v2
| Scan | Score | Findings | Errors | Warnings | Plugin | Plugin Check | Model |
|---|---|---|---|---|---|---|---|
| Jun 19, 2026Latest | 97 | 18 | 3 | 15 | v5.39 | 2.0.0 | 2026.06-mvp-static-v2 |