Content Aware Sidebars – Fastest Widget Area Plugin

Display new sidebars on any post, page, category etc. Works with Classic Widgets, Block Widgets, and all themes!

v3.21.3Joachim JensenUpdated Added 30k+ installs98% rating0% support resolved
23
Score
993
Errors
1,738
Warnings
+0
Change

Category Scores

Security0
Repo89
Performance92
Maintainability0

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

2,731 findings

Maintainability

1,551

10 issue groups

Security

977

12 issue groups

I18n

161

3 issue groups

WARNINGMaintainabilityNon Prefixed Variable FoundGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$account_addon_ids".1,141
Category
Maintainability
Occurrences
1,141
Severity
warning

Sample message

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$account_addon_ids".

ERRORSecurityOutput Not EscapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '" <a href='{$skip_url}' class='button button-small button-secondary'>{$use_plugin_anonymously_text}</a>"'.667
Category
Security
Occurrences
667
Severity
error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '" <a href='{$skip_url}' class='button button-small button-secondary'>{$use_plugin_anonymously_text}</a>"'.

WARNINGMaintainabilityNon Prefixed Function FoundFunctions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: &quot;_fs_text&quot;.114
Category
Maintainability
Occurrences
114
Severity
warning

Sample message

Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: &quot;_fs_text&quot;.

WARNINGMaintainabilityNon Prefixed Constant FoundGlobal constants defined by a theme/plugin should start with the theme/plugin prefix. Found: &quot;CAS_IS_PLAYGROUND_PREVIEW&quot;.97
Category
Maintainability
Occurrences
97
Severity
warning

Sample message

Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: &quot;CAS_IS_PLAYGROUND_PREVIEW&quot;.

WARNINGMaintainabilityNon Prefixed Class FoundClasses declared by a theme/plugin should start with the theme/plugin prefix. Found: &quot;CASConditionPlaceholder&quot;.76
Category
Maintainability
Occurrences
76
Severity
warning

Sample message

Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: &quot;CASConditionPlaceholder&quot;.

ERRORI18nMissing Arg DomainMissing $domain parameter in function call to __().69
Category
I18n
Occurrences
69
Severity
error

Sample message

Missing $domain parameter in function call to __().

ERRORI18nNon Singular String Literal DomainThe $domain parameter must be a single text string literal. Found: WPCA_DOMAIN65
Category
I18n
Occurrences
65
Severity
error

Sample message

The $domain parameter must be a single text string literal. Found: WPCA_DOMAIN

ERRORSecurityUnsafe Printing FunctionAll output should be run through an escaping function (like echo esc_html_x() or echo esc_attr_x()), found '_ex'.59
Category
Security
Occurrences
59
Severity
error

Sample message

All output should be run through an escaping function (like echo esc_html_x() or echo esc_attr_x()), found '_ex'.

ERRORSecurityNot PreparedUse placeholders and $wpdb->prepare(); found !49
Category
Security
Occurrences
49
Severity
error

Sample message

Use placeholders and $wpdb->prepare(); found !

WARNINGSecurityRecommendedProcessing form data without nonce verification.46
Category
Security
Occurrences
46
Severity
warning

Sample message

Processing form data without nonce verification.

Show 15 more
WARNINGSecurityInput Not Sanitized45
Category
Security
Occurrences
45
Severity
warning

Sample message

Detected usage of a non-sanitized input variable: $_POST[$key]

WARNINGSecurityMissing Unslash45
Category
Security
Occurrences
45
Severity
warning

Sample message

$_POST[$key] not unslashed before sanitization. Use wp_unslash() or similar

WARNINGMaintainabilityNon Prefixed Hookname Found36
Category
Maintainability
Occurrences
36
Severity
warning

Sample message

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: &quot;&#039;wpca/modules/auto-select/&#039; . $this-&gt;category&quot;.

WARNINGMaintainabilityDirect Query30
Category
Maintainability
Occurrences
30
Severity
warning

Sample message

Use of a direct database call is discouraged.

WARNINGMaintainabilityNo Caching29
Category
Maintainability
Occurrences
29
Severity
warning

Sample message

Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().

ERRORI18nMissing Translators Comment27
Category
I18n
Occurrences
27
Severity
error

Sample message

A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.

WARNINGSecurityMissing23
Category
Security
Occurrences
23
Severity
warning

Sample message

Processing form data without nonce verification.

WARNINGSecurityInput Not Validated19
Category
Security
Occurrences
19
Severity
warning

Sample message

Detected usage of a possibly undefined superglobal array index: $_POST[&#039;conditions&#039;]. Check that the array index exists before using it.

ERRORMaintainabilitymissing direct file access protection18
Category
Maintainability
Occurrences
18
Severity
error

Sample message

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

ERRORSecurityUnescaped DBParameter8
Category
Security
Occurrences
8
Severity
error

Sample message

Unescaped parameter $group_id used in $wpdb->query()\n$group_id assigned unsafely at line 316.

ERRORSecurityException Not Escaped7
Category
Security
Occurrences
7
Severity
error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$message'.

ERRORSecurityQuoted Simple Placeholder5
Category
Security
Occurrences
5
Severity
error

Sample message

Simple placeholders should not be quoted in the query string in $wpdb->prepare(). Found: '%d'.

ERRORMaintainabilitystrip tags strip tags5
Category
Maintainability
Occurrences
5
Severity
error

Sample message

strip_tags() is discouraged. Use the more comprehensive wp_strip_all_tags() instead.

WARNINGMaintainabilityMissing Version5
Category
Maintainability
Occurrences
5
Severity
warning

Sample message

Resource version not set in call to wp_enqueue_script(). This means new versions of the script may not always be loaded due to browser caching.

WARNINGSecurityInterpolated Not Prepared4
Category
Security
Occurrences
4
Severity
warning

Sample message

Use placeholders and $wpdb-&gt;prepare(); found interpolated variable $exclude_query at $exclude_query\n

Score History

First score snapshot

v3.21.3

23

Latest

Findings
2,731
Errors
993
Warnings
1,738
Check
2.0.0

Related Plugins

98
Classic Widgets

2m+ active installs

97
Easy Custom Sidebars

10k+ active installs

97
Newpost Catch

10k+ active installs

97
Sidebar Login

10k+ active installs

97
Taxonomy Dropdown Widget

2k+ active installs

97