The SEO Framework – Fast, Automated, Effortless.

The fastest feature-complete SEO plugin for professional WordPress websites. Secure, fast, unbranded, and automated SEO. Do less; get better results.

v5.1.4Sybre WaaijerUpdated 2025-12-10Added May 29, 2015200k+ installs98% rating19% support resolved
31
Score
363
Errors
609
Warnings
+0
Change

Category Scores

Security14
Repo94
Performance96
Maintainability0

Top Issues by Category

maintainability863
security61
i18n46
performance1
repo_compliance1

Issues Details

972 issues found in latest scan

WARNING445
WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedVariableFound

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$_ays_reset".

ERROR200
missing_direct_file_access_protection

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

ERROR133
Generic.PHP.DisallowShortOpenTag.EchoFound

Short PHP opening tag used with echo; expected "<?php echo $bstyle ..." but found "<?= $bstyle ..."

WARNING45
WordPress.WP.I18n.TextDomainMismatch

Mismatched text domain. Expected &#039;autodescription&#039; but got &#039;default&#039;.

WARNING28
WordPress.Security.ValidatedSanitizedInput.InputNotSanitized

Detected usage of a non-sanitized input variable: $_GET[&#039;lang&#039;]

WARNING25
WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedHooknameFound

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: &quot;bbp_raw_title&quot;.

WARNING24
WordPress.Security.ValidatedSanitizedInput.MissingUnslash

$_GET[&#039;lang&#039;] not unslashed before sanitization. Use wp_unslash() or similar

ERROR13
Generic.PHP.DiscourageGoto.Found

The "goto" language construct should not be used.

WARNING11
WordPress.DB.DirectDatabaseQuery.DirectQuery

Use of a direct database call is discouraged.

WARNING11
WordPress.DB.DirectDatabaseQuery.NoCaching

Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().

ERROR9
WordPress.WP.AlternativeFunctions.parse_url_parse_url

parse_url() is discouraged because of inconsistency in the output across PHP versions; use wp_parse_url() instead.

ERROR6
PluginCheck.CodeAnalysis.Heredoc.NotAllowed

Use of heredoc syntax (<<<) is not allowed; use standard strings or inline HTML instead

WARNING6
WordPress.Security.ValidatedSanitizedInput.InputNotValidated

Detected usage of a possibly undefined superglobal array index: $_POST[&#039;autodescription&#039;]. Check that the array index exists before using it.

WARNING3
PluginCheck.Security.DirectDB.UnescapedDBParameter

Unescaped parameter $indexes used in $wpdb-&gt;get_var()\n$indexes assigned unsafely at line 514.

WARNING2
Internal.NoCodeFound

No PHP code was found in this file and short open tags are not allowed by this install of PHP. This file may be using short open tags but PHP does not allow them.

WARNING2
Squiz.PHP.DiscouragedFunctions.Discouraged

The use of function set_time_limit() is discouraged

WARNING2
WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedFunctionFound

Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: &quot;tsf&quot;.

WARNING1
PluginCheck.CodeAnalysis.DiscouragedFunctions.load_plugin_textdomainFound

load_plugin_textdomain() has been discouraged since WordPress version 4.6. When your plugin is hosted on WordPress.org, you no longer need to manually include this function call for translations under your plugin slug. WordPress will automatically load the translations for you as needed.

WARNING1
WordPress.DB.SlowDBQuery.slow_db_query_tax_query

Detected usage of tax_query, possible slow query.

WARNING1
WordPress.NamingConventions.PrefixAllGlobals.DynamicHooknameFound

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: &quot;{$hook_name}_settings_page_boxes&quot;.

ERROR1
WordPressVIPMinimum.Performance.WPQueryParams.SuppressFilters_suppress_filters

Setting `suppress_filters` to `true` is prohibited.

WARNING1
mismatched_plugin_name

Plugin name "The SEO Framework – Fast, Automated, Effortless." is different from the name declared in plugin header "The SEO Framework".

ERROR1
outdated_tested_upto_header

Tested up to: 6.9 < 7.0. The "Tested up to" value in your plugin is not set to the current version of WordPress. This means your plugin will not show up in searches, as we require plugins to be compatible and documented as tested up to the most recent version of WordPress.

WARNING1
upgrade_notice_limit

The upgrade notice for "5.0.0" exceeds the limit of 300 characters.

Latest Snapshot

Findings

972

Errors

363

Warnings

609

Score History

First score snapshot

First scan completed Jun 19, 2026

v5.1.4 · Plugin Check 2.0.0 · Model 2026.06-mvp-static-v2

Jun 19, 2026

v5.1.4

31

Latest

Findings
972
Errors
363
Warnings
609
Plugin Check
2.0.0
Model
2026.06-mvp-static-v2

Related Plugins