Duplicate Post

Duplicate post

v1.5.4InisevUpdated Added 300k+ installs98% rating100% support resolved
27
Score
447
Errors
274
Warnings
+0
Change

Category Scores

Security0
Repo89
Performance96
Maintainability19

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

721 findings

Security

547

11 issue groups

Maintainability

147

13 issue groups

I18n

3

1 issue group

ERRORSecurityUnsafe Printing FunctionAll output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.329
Category
Security
Occurrences
329
Severity
error

Sample message

All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.

ERRORSecurityOutput Not EscapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$backupblissPricing'.73
Category
Security
Occurrences
73
Severity
error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$backupblissPricing'.

WARNINGSecurityMissingProcessing form data without nonce verification.58
Category
Security
Occurrences
58
Severity
warning

Sample message

Processing form data without nonce verification.

WARNINGMaintainabilityNon Prefixed Function FoundFunctions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "___analyst_init".50
Category
Maintainability
Occurrences
50
Severity
warning

Sample message

Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "___analyst_init".

WARNINGSecurityMissing Unslash$_GET['page'] not unslashed before sanitization. Use wp_unslash() or similar39
Category
Security
Occurrences
39
Severity
warning

Sample message

$_GET['page'] not unslashed before sanitization. Use wp_unslash() or similar

WARNINGMaintainabilityNon Prefixed Namespace FoundNamespaces declared by a theme/plugin should start with the theme/plugin prefix. Found: "Inisev\Subs".25
Category
Maintainability
Occurrences
25
Severity
warning

Sample message

Namespaces declared by a theme/plugin should start with the theme/plugin prefix. Found: "Inisev\Subs".

WARNINGMaintainabilityNon Prefixed Variable FoundGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$backupblissPricing".24
Category
Maintainability
Occurrences
24
Severity
warning

Sample message

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$backupblissPricing".

WARNINGSecurityInput Not ValidatedDetected usage of a possibly undefined superglobal array index: $_GET['page']. Check that the array index exists before using it.18
Category
Security
Occurrences
18
Severity
warning

Sample message

Detected usage of a possibly undefined superglobal array index: $_GET['page']. Check that the array index exists before using it.

WARNINGSecurityInput Not SanitizedDetected usage of a non-sanitized input variable: $_POST['auitd']12
Category
Security
Occurrences
12
Severity
warning

Sample message

Detected usage of a non-sanitized input variable: $_POST['auitd']

WARNINGMaintainabilityNon Prefixed Constant FoundGlobal constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "CDP_MODULES_DIR".11
Category
Maintainability
Occurrences
11
Severity
warning

Sample message

Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "CDP_MODULES_DIR".

Show 15 more
WARNINGMaintainabilityDirect Query6
Category
Maintainability
Occurrences
6
Severity
warning

Sample message

Use of a direct database call is discouraged.

WARNINGMaintainabilityNo Caching6
Category
Maintainability
Occurrences
6
Severity
warning

Sample message

Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().

ERRORMaintainabilitydate date5
Category
Maintainability
Occurrences
5
Severity
error

Sample message

date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.

WARNINGMaintainabilityNon Prefixed Hookname Found5
Category
Maintainability
Occurrences
5
Severity
warning

Sample message

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "cdp_loaded".

ERRORMaintainabilitymissing direct file access protection5
Category
Maintainability
Occurrences
5
Severity
error

Sample message

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

WARNINGSecurityInterpolated Not Prepared4
Category
Security
Occurrences
4
Severity
warning

Sample message

Use placeholders and $wpdb->prepare(); found interpolated variable {$id} at "SELECT post_id FROM {$prefix}postmeta WHERE meta_key = '_cdp_origin' AND meta_value = {$id} ORDER BY post_id DESC LIMIT 1"

ERRORSecurityNot Prepared4
Category
Security
Occurrences
4
Severity
error

Sample message

Use placeholders and $wpdb->prepare(); found $columns

ERRORSecurityUnsupported Identifier Placeholder4
Category
Security
Occurrences
4
Severity
error

Sample message

The %i modifier is only supported in WP 6.2 or higher. Found: "%i".

WARNINGSecurityRecommended4
Category
Security
Occurrences
4
Severity
warning

Sample message

Processing form data without nonce verification.

ERRORMaintainabilitywp function not compatible with requires wp4
Category
Maintainability
Occurrences
4
Severity
error

Sample message

Function "wp_doing_ajax()" requires WordPress 4.7.0, but your plugin minimum supported version is WordPress 4.6.0.

ERRORI18nMissing Translators Comment3
Category
I18n
Occurrences
3
Severity
error

Sample message

A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.

ERRORSecurityUnescaped DBParameter2
Category
Security
Occurrences
2
Severity
error

Sample message

Unescaped parameter $newestId used in $wpdb->get_results()\n$newestId assigned unsafely at line 717.

WARNINGMaintainabilityDiscouraged2
Category
Maintainability
Occurrences
2
Severity
warning

Sample message

The use of function ini_set() is discouraged

ERRORMaintainabilityfile system operations mkdir2
Category
Maintainability
Occurrences
2
Severity
error

Sample message

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: mkdir().

WARNINGMaintainabilityMissing Version2
Category
Maintainability
Occurrences
2
Severity
warning

Sample message

Resource version not set in call to wp_enqueue_script(). This means new versions of the script may not always be loaded due to browser caching.

Score History

First score snapshot

v1.5.4

27

Latest

Findings
721
Errors
447
Warnings
274
Check
2.0.0

Related Plugins

Clone Posts

10k+ active installs

98
WP Post Page Clone

80k+ active installs

96
Duplicate PP

10k+ active installs

90
Yoast Duplicate Post

4m+ active installs

69
Fast Page & Post Duplicator

60k+ active installs

55