Get rid of duplicate posts and pages (any post type) on your blog with manual or automatic modes.
Category Scores
Top Issues by Category
maintainability34
security22
repo_compliance1
Issues Details
59 issues found in latest scan
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
Detected usage of a non-sanitized input variable: $_POST['_wpnonce']
Use placeholders and $wpdb->prepare(); found interpolated variable {$ddp_logtable} at "DELETE FROM {$ddp_logtable} WHERE id NOT IN (\n
Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "DDP_PLUGIN_DIR".
Processing form data without nonce verification.
Unescaped parameter $ddp_logtable used in $wpdb->get_var()\n$ddp_logtable assigned unsafely at line 116.
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$ddp_deleted_duplicates".
Unescaped parameter $thisquery used in $wpdb->get_results()\n$thisquery assigned unsafely at line 280.
Attempting a database schema change is discouraged.
A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.
Function "determine_locale()" requires WordPress 5.0.0, but your plugin minimum supported version is WordPress 4.7.0.
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "ddp_fs_loaded".
$_POST['checked_posts'] not unslashed before sanitization. Use wp_unslash() or similar
The "/vendor" directory using composer exists, but "composer.json" file is missing.
Missing "License" in Plugin Header. Please update your Plugin Header with a valid GPLv2 (or later) compatible license.
| Code | Type | Message | Count |
|---|---|---|---|
| WordPress.DB.DirectDatabaseQuery.DirectQuery | WARNING | Use of a direct database call is discouraged. | 11 |
| WordPress.DB.DirectDatabaseQuery.NoCaching | WARNING | Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete(). | 10 |
| WordPress.Security.ValidatedSanitizedInput.InputNotSanitized | WARNING | Detected usage of a non-sanitized input variable: $_POST['_wpnonce'] | 6 |
| WordPress.DB.PreparedSQL.InterpolatedNotPrepared | WARNING | Use placeholders and $wpdb->prepare(); found interpolated variable {$ddp_logtable} at "DELETE FROM {$ddp_logtable} WHERE id NOT IN (\n | 4 |
| WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedConstantFound | WARNING | Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "DDP_PLUGIN_DIR". | 4 |
| WordPress.Security.NonceVerification.Missing | WARNING | Processing form data without nonce verification. | 4 |
| PluginCheck.Security.DirectDB.UnescapedDBParameter | WARNING | Unescaped parameter $ddp_logtable used in $wpdb->get_var()\n$ddp_logtable assigned unsafely at line 116. | 3 |
| WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedVariableFound | WARNING | Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$ddp_deleted_duplicates". | 3 |
| PluginCheck.Security.DirectDB.UnescapedDBParameter | ERROR | Unescaped parameter $thisquery used in $wpdb->get_results()\n$thisquery assigned unsafely at line 280. | 2 |
| WordPress.DB.DirectDatabaseQuery.SchemaChange | WARNING | Attempting a database schema change is discouraged. | 2 |
| WordPress.DB.PreparedSQL.NotPrepared | ERROR | Use placeholders and $wpdb->prepare(); found $thisquery | 2 |
| WordPress.WP.I18n.MissingTranslatorsComment | ERROR | A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders. | 2 |
| wp_function_not_compatible_with_requires_wp | ERROR | Function "determine_locale()" requires WordPress 5.0.0, but your plugin minimum supported version is WordPress 4.7.0. | 2 |
| WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedHooknameFound | WARNING | Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "ddp_fs_loaded". | 1 |
| WordPress.Security.ValidatedSanitizedInput.MissingUnslash | WARNING | $_POST['checked_posts'] not unslashed before sanitization. Use wp_unslash() or similar | 1 |
| missing_composer_json_file | WARNING | The "/vendor" directory using composer exists, but "composer.json" file is missing. | 1 |
| plugin_header_no_license | ERROR | Missing "License" in Plugin Header. Please update your Plugin Header with a valid GPLv2 (or later) compatible license. | 1 |
Latest Snapshot
Findings
59
Errors
9
Warnings
50
Score History
First score snapshot
First scan completed Jun 20, 2026
v5.1 · Plugin Check 2.0.0 · Model 2026.06-mvp-static-v2
Jun 20, 2026
v5.1
47
Latest
- Findings
- 59
- Errors
- 9
- Warnings
- 50
- Plugin Check
- 2.0.0
- Model
- 2026.06-mvp-static-v2
| Scan | Score | Findings | Errors | Warnings | Plugin | Plugin Check | Model |
|---|---|---|---|---|---|---|---|
| Jun 20, 2026Latest | 47 | 59 | 9 | 50 | v5.1 | 2.0.0 | 2026.06-mvp-static-v2 |