Name: WP Ghost (Hide My WP Ghost) – Security & Firewall
Rating: 4.5
Author: John Darrel

Top Issues by File

Files with the highest concentration of issues in the latest scan

Issues Details

1446 issues found in latest scan

	Code	Message	Location	Category
ERROR	`WordPress.Security.EscapeOutput.OutputNotEscaped`	All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found 'HMWP_Classes_Tools'.	`view/Mapping.php:167:94`	Security
ERROR	`WordPress.Security.EscapeOutput.OutputNotEscaped`	All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found 'substr'.	`view/Mapping.php:167:153`	Security
ERROR	`WordPress.Security.EscapeOutput.OutputNotEscaped`	All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found 'HMWP_Classes_Tools'.	`view/Mapping.php:167:243`	Security
ERROR	`WordPress.Security.EscapeOutput.OutputNotEscaped`	All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found 'home_url'.	`view/Mapping.php:171:75`	Security
ERROR	`WordPress.Security.EscapeOutput.OutputNotEscaped`	All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found 'home_url'.	`view/Mapping.php:176:75`	Security
ERROR	`WordPress.Security.EscapeOutput.OutputNotEscaped`	All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found 'HMWP_Classes_Tools'.	`view/Mapping.php:176:94`	Security
ERROR	`WordPress.Security.EscapeOutput.OutputNotEscaped`	All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found 'home_url'.	`view/Mapping.php:180:75`	Security
ERROR	`WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedVariableFound`	Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$index".	`view/Mapping.php:186:76`	Plugin Repo
ERROR	`WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedVariableFound`	Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$row".	`view/Mapping.php:186:86`	Plugin Repo
ERROR	`WordPress.WP.I18n.MissingArgDomain`	Missing $domain parameter in function call to esc_html__().	`view/Mapping.php:189:141`	General

1446 total row(s)


12.02.2026, 07:31:01	39s	2	814	632
22.12.2025, 21:33:15	35s	2	810	632
09.12.2025, 09:00:40	35s	2	791	632
17.11.2025, 12:01:18	46s	2	791	632
12.11.2025, 19:17:47	51s	2	791	632

WP Ghost (Hide My WP Ghost) – Security & Firewall

Security838

General404

Plugin Repository176

Performance11

controllers/Firewall.php457 issues in this fileTotal: 457Warnings: 457

controllers/SecurityCheck.php165 issues in this fileTotal: 165Errors: 163Warnings: 2

view/Permalinks.php115 issues in this fileTotal: 115Errors: 115

view/Tweaks.php60 issues in this fileTotal: 60Errors: 60

models/Rewrite.php58 issues in this fileTotal: 58Errors: 24Warnings: 34

view/Brute.php56 issues in this fileTotal: 56Errors: 56

view/Mapping.php48 issues in this fileTotal: 48Errors: 48

classes/Tools.php47 issues in this fileTotal: 47Errors: 11Warnings: 36

view/Firewall.php44 issues in this fileTotal: 44Errors: 44

models/Compatibility.php35 issues in this fileTotal: 35Errors: 29Warnings: 6