Disable default WordPress registration page, remove register link and stop registration spam, without disabling user registration.
| Code | Message | Location | Category | |
|---|---|---|---|---|
| ERROR | plugin_header_no_license | Missing "License" in Plugin Header. Please update your Plugin Header with a valid GPLv2 (or later) compatible license. | — | Plugin Repo |
| ERROR | WordPress.WP.AlternativeFunctions.parse_url_parse_url | parse_url() is discouraged because of inconsistency in the output across PHP versions; use wp_parse_url() instead. | 24:22 | Plugin Repo |
| ERROR | outdated_tested_upto_header | Tested up to: 6.5 < 6.8. The "Tested up to" value in your plugin is not set to the current version of WordPress. This means your plugin will not show up in searches, as we require plugins to be compatible and documented as tested up to the most recent version of WordPress. | — | Plugin Repo |
| WARNING | trademarked_term | The plugin slug includes a restricted term. Your plugin slug - "disable-wp-registration-page-spam" - contains the restricted term "wp" which can be used within the plugin slug, as long as you don't use the full name in the plugin name. For example: You can use WP but not WordPress. | — | Plugin Repo |
| WARNING | WordPress.Security.NonceVerification.Recommended | Processing form data without nonce verification. | 16:13 | Security |
| WARNING | WordPress.Security.NonceVerification.Recommended | Processing form data without nonce verification. | 16:33 | Security |
| WARNING | WordPress.Security.SafeRedirect.wp_redirect_wp_redirect | wp_redirect() found. Using wp_safe_redirect(), along with the "allowed_redirect_hosts" filter if needed, can help avoid any chances of malicious redirects within code. It is also important to remember to call exit() after a redirect so that no other unwanted code is executed. | 18:5 | Security |
| WARNING | trademarked_term | The plugin name includes a restricted term. Your plugin name - "Disable WP Registration Page Spam" - contains the restricted term "wp" which can be used , as long as you don't change it to the full name. For example: You can use WP but not WordPress. | — | Plugin Repo |
| WARNING | WordPress.Security.ValidatedSanitizedInput.InputNotValidated | Detected usage of a possibly undefined superglobal array index: $_SERVER['SCRIPT_NAME']. Use isset() or empty() to check the index exists before using it | 24:32 | Security |
| WARNING | WordPress.Security.ValidatedSanitizedInput.MissingUnslash | $_SERVER['SCRIPT_NAME'] not unslashed before sanitization. Use wp_unslash() or similar | 24:32 | Security |
| 15.11.2025, 02:09:21 | 10s | 97 | 3 | 12 |