AGCA – Custom Dashboard & Login Page

CHANGE: admin menu, login page, admin bar, dashboard widgets, custom colors, custom CSS & JS, logo & images

v7.2.6cusminUpdated Added 20k+ installs90% rating
34
Score
350
Errors
44
Warnings
+0
Change

Category Scores

Security0
Repo75
Performance100
Maintainability66

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

394 findings

Security

350

9 issue groups

Maintainability

33

12 issue groups

I18n

6

3 issue groups

Supply Chain

2

1 issue group

ERRORSecurityUnsafe Printing FunctionAll output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.140
Category
Security
Occurrences
140
Severity
error

Sample message

All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.

ERRORSecurityOutput Not EscapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$blog_id'.95
Category
Security
Occurrences
95
Severity
error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$blog_id'.

ERRORSecurityregister setting MissingSanitization missing for register_setting().85
Category
Security
Occurrences
85
Severity
error

Sample message

Sanitization missing for register_setting().

WARNINGSecurityMissingProcessing form data without nonce verification.14
Category
Security
Occurrences
14
Severity
warning

Sample message

Processing form data without nonce verification.

ERRORMaintainabilitywp function not compatible with requires wpFunction "get_current_blog_id()" requires WordPress 3.1.0, but your plugin minimum supported version is WordPress 3.0.0.8
Category
Maintainability
Occurrences
8
Severity
error

Sample message

Function "get_current_blog_id()" requires WordPress 3.1.0, but your plugin minimum supported version is WordPress 3.0.0.

ERRORMaintainabilitystrip tags strip tagsstrip_tags() is discouraged. Use the more comprehensive wp_strip_all_tags() instead.7
Category
Maintainability
Occurrences
7
Severity
error

Sample message

strip_tags() is discouraged. Use the more comprehensive wp_strip_all_tags() instead.

WARNINGSecurityRecommendedProcessing form data without nonce verification.6
Category
Security
Occurrences
6
Severity
warning

Sample message

Processing form data without nonce verification.

WARNINGMaintainabilityNon Prefixed Class FoundClasses declared by a theme/plugin should start with the theme/plugin prefix. Found: "AcceptanceTester".4
Category
Maintainability
Occurrences
4
Severity
warning

Sample message

Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "AcceptanceTester".

WARNINGSecurityInput Not ValidatedDetected usage of a possibly undefined superglobal array index: $_FILES["settings_import_file"]["error"]. Check that the array index exists before using it.4
Category
Security
Occurrences
4
Severity
warning

Sample message

Detected usage of a possibly undefined superglobal array index: $_FILES["settings_import_file"]["error"]. Check that the array index exists before using it.

WARNINGSecurityInput Not SanitizedDetected usage of a non-sanitized input variable: $_FILES['settings_import_file']3
Category
Security
Occurrences
3
Severity
warning

Sample message

Detected usage of a non-sanitized input variable: $_FILES['settings_import_file']

Show 15 more
WARNINGMaintainabilityNot In Footer3
Category
Maintainability
Occurrences
3
Severity
warning

Sample message

In footer ($in_footer) is not set explicitly wp_enqueue_script; It is recommended to load scripts in the footer. Please set this value to `true` to load it in the footer, or explicitly `false` if it should be loaded in the header.

WARNINGI18nNo Html Wrapped Strings3
Category
I18n
Occurrences
3
Severity
warning

Sample message

Translatable string should not be wrapped in HTML. Found: '<strong>(but show Log Out button)</strong>'

ERRORMaintainabilitymissing direct file access protection3
Category
Maintainability
Occurrences
3
Severity
error

Sample message

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

WARNINGSecurityMissing Unslash2
Category
Security
Occurrences
2
Severity
warning

Sample message

$_POST['_agca_token'] not unslashed before sanitization. Use wp_unslash() or similar

WARNINGMaintainabilityMissing Version2
Category
Maintainability
Occurrences
2
Severity
warning

Sample message

Resource version not set in call to wp_enqueue_script(). This means new versions of the script may not always be loaded due to browser caching.

ERRORI18nMissing Arg Domain2
Category
I18n
Occurrences
2
Severity
error

Sample message

Missing $domain parameter in function call to __().

ERRORSupply Chainhidden files2
Category
Supply Chain
Occurrences
2
Severity
error

Sample message

Hidden files are not permitted.

ERRORMaintainabilitydate date1
Category
Maintainability
Occurrences
1
Severity
error

Sample message

date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.

WARNINGMaintainabilityNon Prefixed Function Found1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "c2c_no_update_nag".

WARNINGMaintainabilityNon Prefixed Variable Found1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$I".

WARNINGSecurityUsing FILE 1
Category
Security
Occurrences
1
Severity
warning

Sample message

Using __FILE__ for menu slugs risks exposing filesystem structure.

ERRORMaintainabilityfile system operations fclose1
Category
Maintainability
Occurrences
1
Severity
error

Sample message

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fclose().

ERRORMaintainabilityfile system operations fopen1
Category
Maintainability
Occurrences
1
Severity
error

Sample message

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fopen().

ERRORMaintainabilityfile system operations fread1
Category
Maintainability
Occurrences
1
Severity
error

Sample message

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fread().

ERRORI18nMissing Translators Comment1
Category
I18n
Occurrences
1
Severity
error

Sample message

A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.

Score History

First score snapshot

v7.2.6

34

Latest

Findings
394
Errors
350
Warnings
44
Check
2.0.0

Related Plugins