Maintenance Redirect

Display a maintenance mode page and allow invited visitors to bypass the functionality to preview the site.

v2.2.1Peter Hardy-vanDoornUpdated 2026-05-21Added Jun 13, 201010k+ installs98% rating
38
Score
244
Errors
132
Warnings
+0
Change

Category Scores

Security0
Repo94
Performance100
Maintainability71

Top Issues by Category

i18n173
security155
maintainability47
repo_compliance1

Issues Details

376 issues found in latest scan

ERROR172
WordPress.WP.I18n.MissingArgDomain

Missing $domain parameter in function call to __().

ERROR38
WordPress.Security.EscapeOutput.OutputNotEscaped

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$_SERVER["REQUEST_URI"]'.

WARNING24
WordPress.Security.ValidatedSanitizedInput.InputNotValidated

Detected usage of a possibly undefined superglobal array index: $_POST['wpjf3_mr_active_tab']. Check that the array index exists before using it.

WARNING23
WordPress.Security.ValidatedSanitizedInput.MissingUnslash

$_GET['wpjf3_mr_temp_access_key'] not unslashed before sanitization. Use wp_unslash() or similar

WARNING21
WordPress.Security.ValidatedSanitizedInput.InputNotSanitized

Detected usage of a non-sanitized input variable: $_GET['wpjf3_mr_temp_access_key']

WARNING18
WordPress.DB.DirectDatabaseQuery.DirectQuery

Use of a direct database call is discouraged.

WARNING18
WordPress.DB.DirectDatabaseQuery.NoCaching

Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().

ERROR14
PluginCheck.Security.DirectDB.UnescapedDBParameter

Unescaped parameter $sql used in $wpdb->get_results()\n$sql assigned unsafely at line 218.

ERROR14
WordPress.DB.PreparedSQL.NotPrepared

Use placeholders and $wpdb->prepare(); found $sql

WARNING8
WordPress.Security.NonceVerification.Missing

Processing form data without nonce verification.

WARNING5
WordPress.Security.NonceVerification.Recommended

Processing form data without nonce verification.

WARNING4
PluginCheck.Security.DirectDB.UnescapedDBParameter

Unescaped parameter $option_name used in $wpdb->query()\n$option_name assigned unsafely at line 6.

WARNING4
WordPress.DB.DirectDatabaseQuery.SchemaChange

Attempting a database schema change is discouraged.

WARNING4
WordPress.DB.PreparedSQL.InterpolatedNotPrepared

Use placeholders and $wpdb->prepare(); found interpolated variable $tbl at "SHOW TABLES LIKE '$tbl'"

WARNING3
WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedVariableFound

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$ajax_nonce".

ERROR1
WordPress.WP.AlternativeFunctions.rand_rand

rand() is discouraged. Use the far less predictable wp_rand() instead.

ERROR1
WordPress.WP.AlternativeFunctions.strip_tags_strip_tags

strip_tags() is discouraged. Use the more comprehensive wp_strip_all_tags() instead.

ERROR1
WordPress.WP.EnqueuedResources.NonEnqueuedStylesheet

Stylesheets must be registered/enqueued via wp_enqueue_style()

ERROR1
WordPress.WP.I18n.MissingTranslatorsComment

A function call to esc_html__() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.

ERROR1
mismatched_tested_up_to_header

Mismatched "Tested up to": 7.0 != 6.9. The "Tested up to" value in the readme file must match the "Tested up to" value in the plugin header. If the plugin header has a "Tested up to" value, it will override the readme value, which can cause confusion.

ERROR1
missing_direct_file_access_protection

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

Latest Snapshot

Findings

376

Errors

244

Warnings

132

Score History

First score snapshot

First scan completed Jun 20, 2026

v2.2.1 · Plugin Check 2.0.0 · Model 2026.06-mvp-static-v2

Jun 20, 2026

v2.2.1

38

Latest

Findings
376
Errors
244
Warnings
132
Plugin Check
2.0.0
Model
2026.06-mvp-static-v2

Related Plugins