Email Address Encoder

A lightweight plugin that protects email addresses from email-harvesting robots, by encoding them into decimal and hexadecimal entities.

v1.0.25Till KrüssUpdated Added 100k+ installs84% rating100% support resolved
41
Score
109
Errors
8
Warnings
+0
Change

Category Scores

Security0
Repo100
Performance100
Maintainability79

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

117 findings

Maintainability

64

4 issue groups

Security

52

6 issue groups

I18n

1

1 issue group

ERRORMaintainabilitywp function not compatible with requires wpFunction "__()" requires WordPress 2.1.0, but your plugin minimum supported version is WordPress 2.0.0.61
Category
Maintainability
Occurrences
61
Severity
error

Sample message

Function "__()" requires WordPress 2.1.0, but your plugin minimum supported version is WordPress 2.0.0.

ERRORSecurityUnsafe printing functionAll output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.36
Category
Security
Occurrences
36
Severity
error

Sample message

All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.

ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"\n<style type=\"text/css\">{$styles}</style>\n"'.10
Category
Security
Occurrences
10
Severity
error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"\n<style type=\"text/css\">{$styles}</style>\n"'.

WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_POST[&#039;_wpnonce&#039;]2
Category
Security
Occurrences
2
Severity
warning

Sample message

Detected usage of a non-sanitized input variable: $_POST[&#039;_wpnonce&#039;]

WARNINGSecurityRequest data is not unslashed$_POST[&#039;_wpnonce&#039;] not unslashed before sanitization. Use wp_unslash() or similar2
Category
Security
Occurrences
2
Severity
warning

Sample message

$_POST[&#039;_wpnonce&#039;] not unslashed before sanitization. Use wp_unslash() or similar

WARNINGSecurityMissing nonce verificationProcessing form data without nonce verification.1
Category
Security
Occurrences
1
Severity
warning

Sample message

Processing form data without nonce verification.

WARNINGSecurityInput is not validatedDetected usage of a possibly undefined superglobal array index: $_POST[&#039;notice&#039;]. Check that the array index exists before using it.1
Category
Security
Occurrences
1
Severity
warning

Sample message

Detected usage of a possibly undefined superglobal array index: $_POST[&#039;notice&#039;]. Check that the array index exists before using it.

WARNINGMaintainabilityMissing VersionResource version not set in call to wp_enqueue_script(). This means new versions of the script may not always be loaded due to browser caching.1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

Resource version not set in call to wp_enqueue_script(). This means new versions of the script may not always be loaded due to browser caching.

WARNINGMaintainabilityNot In FooterIn footer ($in_footer) is not set explicitly wp_enqueue_script; It is recommended to load scripts in the footer. Please set this value to `true` to load it in the footer, or explicitly `false` if it should be loaded in the header.1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

In footer ($in_footer) is not set explicitly wp_enqueue_script; It is recommended to load scripts in the footer. Please set this value to `true` to load it in the footer, or explicitly `false` if it should be loaded in the header.

ERRORI18nMissing Arg DomainMissing $domain parameter in function call to _e().1
Category
I18n
Occurrences
1
Severity
error

Sample message

Missing $domain parameter in function call to _e().

Show 1 more
ERRORMaintainabilityMissing direct file access protection1
Category
Maintainability
Occurrences
1
Severity
error

Sample message

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

External Connections

Not analyzed yet.

Score History

First score snapshot

v1.0.25

41

Latest

Findings
117
Errors
109
Warnings
8
Check
2.0.0

Relationship Map

Author, categories, issues, domains, and nearby plugins.

29 nodes

Related Plugins