AI Engine – The Chatbot, AI Framework & MCP for WordPress

AI meets WordPress. Your site can now chat, write poetry, solve problems, and maybe make you coffee.

v3.5.5Jordy MeowUpdated Added 100k+ installs98% rating100% support resolved
23
Score
413
Errors
559
Warnings
+0
Change

Category Scores

Security0
Repo90
Performance98
Maintainability0

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

972 findings

Security

451

9 issue groups

Maintainability

438

13 issue groups

I18n

32

3 issue groups

WARNINGMaintainabilityerror log error logerror_log() found. Debug code should not normally be used in production.281
Category
Maintainability
Occurrences
281
Severity
warning

Sample message

error_log() found. Debug code should not normally be used in production.

ERRORSecurityNot PreparedUse placeholders and $wpdb->prepare(); found $args162
Category
Security
Occurrences
162
Severity
error

Sample message

Use placeholders and $wpdb->prepare(); found $args

ERRORSecurityException Not EscapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"$service: "'.91
Category
Security
Occurrences
91
Severity
error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"$service: "'.

WARNINGSecurityInterpolated Not PreparedUse placeholders and $wpdb->prepare(); found interpolated variable $column at "ALTER TABLE {$this->table_tasks} DROP COLUMN $column"72
Category
Security
Occurrences
72
Severity
warning

Sample message

Use placeholders and $wpdb->prepare(); found interpolated variable $column at "ALTER TABLE {$this->table_tasks} DROP COLUMN $column"

ERRORMaintainabilitydate datedate() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.35
Category
Maintainability
Occurrences
35
Severity
error

Sample message

date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.

WARNINGSecurityRecommendedProcessing form data without nonce verification.32
Category
Security
Occurrences
32
Severity
warning

Sample message

Processing form data without nonce verification.

WARNINGSecurityInput Not SanitizedDetected usage of a non-sanitized input variable: $_COOKIE['mwai_session_id']28
Category
Security
Occurrences
28
Severity
warning

Sample message

Detected usage of a non-sanitized input variable: $_COOKIE['mwai_session_id']

WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.27
Category
Maintainability
Occurrences
27
Severity
warning

Sample message

Use of a direct database call is discouraged.

WARNINGSecurityMissing Unslash$_COOKIE['mwai_session_id'] not unslashed before sanitization. Use wp_unslash() or similar27
Category
Security
Occurrences
27
Severity
warning

Sample message

$_COOKIE['mwai_session_id'] not unslashed before sanitization. Use wp_unslash() or similar

WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().25
Category
Maintainability
Occurrences
25
Severity
warning

Sample message

Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().

Show 15 more issue groups
ERRORI18nNon Singular String Literal Domain21
Category
I18n
Occurrences
21
Severity
error

Sample message

The $domain parameter must be a single text string literal. Found: $this->domain

ERRORSecurityOutput Not Escaped16
Category
Security
Occurrences
16
Severity
error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"event: {$event}\n"'.

ERRORMaintainabilityunlink unlink15
Category
Maintainability
Occurrences
15
Severity
error

Sample message

unlink() is discouraged. Use wp_delete_file() to delete a file.

ERRORMaintainabilitymissing direct file access protection15
Category
Maintainability
Occurrences
15
Severity
error

Sample message

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

WARNINGSecurityMissing14
Category
Security
Occurrences
14
Severity
warning

Sample message

Processing form data without nonce verification.

ERRORSecurityUnescaped DBParameter9
Category
Security
Occurrences
9
Severity
error

Sample message

Unescaped parameter $countSql used in $wpdb->get_var()\n$countSql used without escaping.

ERRORMaintainabilityparse url parse url7
Category
Maintainability
Occurrences
7
Severity
error

Sample message

parse_url() is discouraged because of inconsistency in the output across PHP versions; use wp_parse_url() instead.

ERRORMaintainabilityrand mt rand7
Category
Maintainability
Occurrences
7
Severity
error

Sample message

mt_rand() is discouraged. Use the far less predictable wp_rand() instead.

ERRORI18nText Domain Mismatch7
Category
I18n
Occurrences
7
Severity
error

Sample message

Mismatched text domain. Expected 'ai-engine' but got 'meowapps'.

WARNINGMaintainabilityDiscouraged6
Category
Maintainability
Occurrences
6
Severity
warning

Sample message

The use of function ini_set() is discouraged

WARNINGMaintainabilityNon Prefixed Class Found6
Category
Maintainability
Occurrences
6
Severity
warning

Sample message

Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "MeowKit_MWAI_Admin".

WARNINGMaintainabilityslow db query meta key5
Category
Maintainability
Occurrences
5
Severity
warning

Sample message

Detected usage of meta_key, possible slow query.

WARNINGMaintainabilityslow db query meta value5
Category
Maintainability
Occurrences
5
Severity
warning

Sample message

Detected usage of meta_value, possible slow query.

WARNINGMaintainabilityNon Prefixed Hookname Found4
Category
Maintainability
Occurrences
4
Severity
warning

Sample message

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "litespeed_control_set_nocache".

ERRORI18nMissing Translators Comment4
Category
I18n
Occurrences
4
Severity
error

Sample message

A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.

Score History

2 score snapshots

+0
1007550250Jun 20, 2026, 12:24 AM UTC Score 23/100 Plugin v3.5.4 Plugin Check 2.0.0 411 errors, 559 warningsJun 20, 2026, 09:21 AM UTC Score 23/100 Plugin v3.5.5 Plugin Check 2.0.0 413 errors, 559 warningsJun 20, 2026Jun 20, 2026

v3.5.5

23

Latest

Findings
972
Errors
413
Warnings
559
Check
2.0.0

v3.5.4

23

Score

Findings
970
Errors
411
Warnings
559
Check
2.0.0

Related Plugins