Breadcrumb NavXT

Adds breadcrumb navigation showing the visitor's path to their current location.

v7.5.1John HavlikUpdated 2025-12-22Added Dec 1, 2007800k+ installs92% rating0% support resolved
36
Score
102
Errors
111
Warnings
+0
Change

Category Scores

Security0
Repo94
Performance100
Maintainability59

Top Issues by Category

maintainability113
i18n51
security48
repo_compliance1

Issues Details

213 issues found in latest scan

ERROR50
WordPress.WP.I18n.NonSingularStringLiteralDomain

The $domain parameter must be a single text string literal. Found: $this->identifier

WARNING39
WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedHooknameFound

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "bcn_add_post_type_arg".

ERROR27
missing_direct_file_access_protection

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

ERROR22
WordPress.Security.EscapeOutput.OutputNotEscaped

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$extras_escaped'.

WARNING15
WordPress.NamingConventions.PrefixAllGlobals.DynamicHooknameFound

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "$this->unique_prefix . '_after_settings_tab_general'".

WARNING12
WordPress.Security.NonceVerification.Missing

Processing form data without nonce verification.

WARNING11
WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedVariableFound

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$breadcrumb_navxt".

WARNING9
WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedFunctionFound

Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "bcn_display".

WARNING8
WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedClassFound

Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "bcn_admin".

WARNING6
WordPress.Security.ValidatedSanitizedInput.InputNotSanitized

Detected usage of a non-sanitized input variable: $_FILES[$this->unique_prefix . '_admin_import_file']['tmp_name']

WARNING3
WordPress.Security.NonceVerification.Recommended

Processing form data without nonce verification.

WARNING3
WordPress.Security.ValidatedSanitizedInput.MissingUnslash

$_POST[$this->unique_prefix . '_options'] not unslashed before sanitization. Use wp_unslash() or similar

WARNING2
WordPress.PHP.DevelopmentFunctions.error_log_var_export

var_export() found. Debug code should not normally be used in production.

WARNING2
WordPress.Security.ValidatedSanitizedInput.InputNotValidated

Detected usage of a possibly undefined superglobal array index: $_POST['uid']. Check that the array index exists before using it.

WARNING1
WordPress.PHP.DevelopmentFunctions.error_log_set_error_handler

set_error_handler() found. Debug code should not normally be used in production.

ERROR1
WordPress.WP.I18n.TextDomainMismatch

Mismatched text domain. Expected 'breadcrumb-navxt' but got 'mtekk_adminKit'.

ERROR1
outdated_tested_upto_header

Tested up to: 6.9 < 7.0. The "Tested up to" value in your plugin is not set to the current version of WordPress. This means your plugin will not show up in searches, as we require plugins to be compatible and documented as tested up to the most recent version of WordPress.

ERROR1
wp_function_not_compatible_with_requires_wp

Function "wp_is_serving_rest_request()" requires WordPress 6.5.0, but your plugin minimum supported version is WordPress 5.8.0.

Latest Snapshot

Findings

213

Errors

102

Warnings

111

Score History

First score snapshot

First scan completed Jun 19, 2026

v7.5.1 · Plugin Check 2.0.0 · Model 2026.06-mvp-static-v2

Jun 19, 2026

v7.5.1

36

Latest

Findings
213
Errors
102
Warnings
111
Plugin Check
2.0.0
Model
2026.06-mvp-static-v2

Related Plugins