PluginScore

Jetpack Social

Write once, publish everywhere. Reach your target audience by sharing your content with Jetpack Social!

v9.0.3AutomatticUpdated Added 30k+ installs66% rating93% support resolved
auto sharesocial media automationsocial media marketingsocial media schedulingsocial sharing
48
Score
829
Errors
254
Warnings
+0
Change

Category Scores

Security34
Repo100
Performance97
Maintainability25

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

1,083 findings

I18n

800

1 issue group

Maintainability

234

16 issue groups

Security

47

2 issue groups

Performance

2

1 issue group

ERRORI18nText Domain MismatchMismatched text domain. Expected 'jetpack-social' but got 'jetpack-admin-ui'.800
Category
I18n
Occurrences
800
Severity
error

Sample message

Mismatched text domain. Expected 'jetpack-social' but got 'jetpack-admin-ui'.

WordPress.WP.I18n.TextDomainMismatchReference
WARNINGMaintainabilityNon-prefixed hook nameHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "'jitm_' . $envelope->CTA->hook".65
Category
Maintainability
Occurrences
65
Severity
warning

Sample message

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "'jitm_' . $envelope->CTA->hook".

WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedHooknameFound
WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.54
Category
Maintainability
Occurrences
54
Severity
warning

Sample message

Use of a direct database call is discouraged.

WordPress.DB.DirectDatabaseQuery.DirectQuery
WARNINGSecurityDatabase parameter is not escapedUnescaped parameter $custom_table_name used in $wpdb->get_row()\n$custom_table_name assigned unsafely at line 614.41
Category
Security
Occurrences
41
Severity
warning

Sample message

Unescaped parameter $custom_table_name used in $wpdb->get_row()\n$custom_table_name assigned unsafely at line 614.

PluginCheck.Security.DirectDB.UnescapedDBParameter
WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().37
Category
Maintainability
Occurrences
37
Severity
warning

Sample message

Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().

WordPress.DB.DirectDatabaseQuery.NoCaching
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$$global_name".21
Category
Maintainability
Occurrences
21
Severity
warning

Sample message

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$$global_name".

WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedVariableFound
ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;21
Category
Maintainability
Occurrences
21
Severity
error

Sample message

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

missing_direct_file_access_protectionReference
WARNINGMaintainabilityslow db query meta keyDetected usage of meta_key, possible slow query.11
Category
Maintainability
Occurrences
11
Severity
warning

Sample message

Detected usage of meta_key, possible slow query.

WordPress.DB.SlowDBQuery.slow_db_query_meta_key
WARNINGMaintainabilityslow db query meta valueDetected usage of meta_value, possible slow query.9
Category
Maintainability
Occurrences
9
Severity
warning

Sample message

Detected usage of meta_value, possible slow query.

WordPress.DB.SlowDBQuery.slow_db_query_meta_value
ERRORSecurityException output is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"Invalid field name: $field is not allowed"'.6
Category
Security
Occurrences
6
Severity
error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"Invalid field name: $field is not allowed"'.

WordPress.Security.EscapeOutput.ExceptionNotEscapedReference
Show 10 more
WARNINGMaintainabilityDiscouraged PHP function5
Category
Maintainability
Occurrences
5
Severity
warning

Sample message

The use of function ini_set() is discouraged

Squiz.PHP.DiscouragedFunctions.Discouraged
WARNINGMaintainabilitytrademarked term3
Category
Maintainability
Occurrences
3
Severity
warning

Sample message

The plugin name includes a restricted term. Your chosen plugin name - "Jetpack Social" - contains the restricted term "jetpack" and cannot be used to begin your plugin name. We disallow the use of certain terms in ways that are abused, or potentially infringe on and/or are misleading with regards to trademarks. You may use the term "jetpack" elsewhere in your plugin name, such as "... for jetpack".

trademarked_term
WARNINGPerformancePost Not In exclude2
Category
Performance
Occurrences
2
Severity
warning

Sample message

Using exclusionary parameters, like exclude, in calls to get_posts() should be done with caution, see https://wpvip.com/documentation/performance-improvements-by-removing-usage-of-post__not_in/ for more information.

WordPressVIPMinimum.Performance.WPQueryParams.PostNotIn_exclude
WARNINGMaintainabilityupdate modification detected2
Category
Maintainability
Occurrences
2
Severity
warning

Sample message

Plugin Updater detected. Detected code which may be altering WordPress update routines. Detected: _site_transient_update_plugins

update_modification_detectedReference
ERRORMaintainabilityForbidden PHP function found1
Category
Maintainability
Occurrences
1
Severity
error

Sample message

The use of function do_shortcode_tag() is forbidden

Generic.PHP.ForbiddenFunctions.Found
WARNINGMaintainabilityDynamic hook name1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "self::MODERNIZATION_FILTER".

WordPress.NamingConventions.PrefixAllGlobals.DynamicHooknameFound
WARNINGMaintainabilityNon-prefixed class1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "Social_Shares".

WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedClassFound
WARNINGMaintainabilityNon-prefixed constant1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "XMLRPC_REQUEST".

WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedConstantFound
WARNINGMaintainabilityNon-prefixed function1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "jp_the_social_shares".

WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedFunctionFound
ERRORMaintainabilityplugin updater detected1
Category
Maintainability
Occurrences
1
Severity
error

Sample message

Plugin Updater detected. These are not permitted in WordPress.org hosted plugins. Detected: site_transient_update_plugins

plugin_updater_detected

External Connections

Potential connections found in static code analysis.

79 domains

Outbound calls

227

External assets

2

Incoming endpoints

71

Notable Domains

darkvisitors.com13 · outbound
jetpack.com13 · outbound
public-api.wordpress.com12 · outbound
wordpress.com12 · outbound
developers.facebook.com7 · outbound
developers.google.com7 · outbound

Platform / Reference Domains

w3.org29 · platform/reference
github.com17 · platform/reference
wordpress.org7 · platform/reference
core.trac.wordpress.org6 · platform/reference
code.trac.wordpress.org1 · platform/reference
downloads.wordpress.org1 · platform/reference
gnu.org1 · platform/reference
plugins.trac.wordpress.org1 · platform/reference

External Asset Domains

widgets.wp.com6 · asset + outbound

Incoming Endpoints

/wp-json/jetpack/v4/connectionREST

register_rest_route

/wp-json/jetpack/v4/jitmREST

register_rest_route

/wp-json/jetpack/v4/social/connections/(?P<connection_id>\d+)REST

register_rest_route

/wp-json/my-jetpack/v1/site/recommendations/evaluation/result/REST

register_rest_route

/wp-json/jetpack-protect/v1/check-planREST

register_rest_route

/wp-json/jetpack-protect/v1/clear-scan-cacheREST

register_rest_route

Admin AJAX endpoints5
admin_post_jetpack_invite_user_to_wpcomauthenticated

admin_post

admin_post_jetpack_resend_invite_user_to_wpcomauthenticated

admin_post

admin_post_jetpack_revoke_invite_user_to_wpcomauthenticated

admin_post

wp_ajax_health-check-jetpack-connection-healthauthenticated

wp_ajax

wp_ajax_jetpack_tracksauthenticated

wp_ajax

Score History

3 score snapshots

-1
1007550250Jun 20, 2026, 03:11 AM UTC Score 49/100 Plugin v9.0.0 Plugin Check 2.0.0 812 errors, 239 warningsJun 24, 2026, 11:58 AM UTC Score 48/100 Plugin v9.0.2 Plugin Check 2.0.0 829 errors, 254 warningsJun 26, 2026, 10:57 AM UTC Score 48/100 Plugin v9.0.3 Plugin Check 2.0.0 829 errors, 254 warningsJun 20, 2026Jun 26, 2026

v9.0.3

48

Latest

Findings
1,083
Errors
829
Warnings
254
Check
2.0.0

v9.0.2

48

Score

Findings
1,083
Errors
829
Warnings
254
Check
2.0.0

Relationship Map

Author, categories, issues, domains, and nearby plugins.

37 nodes

Related Plugins

Bit Social – Social Media Auto Poster and Scheduler

6k+ active installs

98
Social Media Auto Poster – Schedule & Publish to Buffer

8k+ active installs

58
StoryChief

1k+ active installs

51
CoSchedule

3k+ active installs

46
Blog2Social: Social Media Auto Post & Scheduler

50k+ active installs

32
Social Web Suite – Social Media Auto Post, Social Media Auto Publish

500 active installs

27