← Back to Leaderboard
Astra theme customizer offers several settings for header/footer layout, sidebar and blog designs, colors, backgrounds, typography and much more.
96
Score
2
Errors
12
Warnings
50K
Installs
Security10
Repo4
General0
Performance0
Accessibility0
Top Issues by Category
Issues organized by category, type, and rule family
Issues Details
14 issues found in latest scan
| Code | Message | Location | Category | |
|---|---|---|---|---|
| ERROR | plugin_header_no_license | Missing "License" in Plugin Header. Please update your Plugin Header with a valid GPLv2 (or later) compatible license. | — | Plugin Repo |
| ERROR | WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedFunctionFound | Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "aix_plugin_action_links". | 45:1 | Plugin Repo |
| WARNING | WordPress.Security.ValidatedSanitizedInput.MissingUnslash | $_GET['_wpnonce'] not unslashed before sanitization. Use wp_unslash() or similar | 160:60 | Security |
| WARNING | WordPress.Security.ValidatedSanitizedInput.InputNotSanitized | Detected usage of a non-sanitized input variable: $_GET['_wpnonce'] | 160:60 | Security |
| WARNING | WordPress.Security.ValidatedSanitizedInput.MissingUnslash | $_POST['astra_import_nonce'] not unslashed before sanitization. Use wp_unslash() or similar | 182:71 | Security |
| WARNING | WordPress.Security.ValidatedSanitizedInput.InputNotSanitized | Detected usage of a non-sanitized input variable: $_POST['astra_import_nonce'] | 182:71 | Security |
| WARNING | WordPress.Security.ValidatedSanitizedInput.InputNotSanitized | Detected usage of a non-sanitized input variable: $_FILES['import_file']['name'] | 193:58 | Security |
| WARNING | WordPress.Security.ValidatedSanitizedInput.InputNotValidated | Detected usage of a possibly undefined superglobal array index: $_FILES['import_file']['tmp_name']. Use isset() or empty() to check the index exists before using it | 213:19 | Security |
| WARNING | WordPress.Security.ValidatedSanitizedInput.InputNotSanitized | Detected usage of a non-sanitized input variable: $_FILES['import_file']['tmp_name'] | 213:19 | Security |
| WARNING | WordPress.Security.ValidatedSanitizedInput.MissingUnslash | $_POST['astra_export_nonce'] not unslashed before sanitization. Use wp_unslash() or similar | 281:71 | Security |
14 total row(s)
Scan History
1 scan recorded
| 13.11.2025, 01:20:58 | 9s | 96 | 2 | 12 |
1 total row(s)
Report an issue
Tell us if something in this report looks wrong or if you need a deeper audit for Import / Export Customizer Settings. We read every submission and typically reply within a day.