Top Issues by Category
maintainability87
i18n17
security6
Issues Details
112 issues found in latest scan
Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "add_composite_products_cart".
Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "KL_Plugins_Screen_Updates".
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "'wck_option_' . $option".
Mismatched text domain. Expected 'klaviyo' but got 'klaviyo-checkout-block'.
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$my_plugin_file".
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
Processing form data without nonce verification.
Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "OLD_KLAVIYO_PLUGINS".
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
Namespaces declared by a theme/plugin should start with the theme/plugin prefix. Found: "WCK\Blocks".
$_POST['nonce'] not unslashed before sanitization. Use wp_unslash() or similar
strip_tags() is discouraged. Use the more comprehensive wp_strip_all_tags() instead.
wp_reset_query() is discouraged. Use wp_reset_postdata() instead.
The $text parameter must be a single text string literal. Found: ( 'Title:' )
Editor blocks must define "apiVersion" 3 or higher in block.json for WordPress 7.0+ iframe editor compatibility.
Missing "License" in Plugin Header. Please update your Plugin Header with a valid GPLv2 (or later) compatible license.
The "Domain Path" header in the plugin file must point to an existing folder. Found: "i18n/languages"
Plugin Updater detected. These are not permitted in WordPress.org hosted plugins. Detected: site_transient_update_plugins
The "Text Domain" header in the plugin file does not match the slug. Found "woocommerce-klaviyo", expected "klaviyo".
Plugin Updater detected. Detected code which may be altering WordPress update routines. Detected: _site_transient_update_plugins
| Code | Type | Message | Count |
|---|---|---|---|
| WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedFunctionFound | WARNING | Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "add_composite_products_cart". | 40 |
| WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedClassFound | WARNING | Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "KL_Plugins_Screen_Updates". | 10 |
| WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedHooknameFound | WARNING | Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "'wck_option_' . $option". | 10 |
| WordPress.WP.I18n.TextDomainMismatch | ERROR | Mismatched text domain. Expected 'klaviyo' but got 'klaviyo-checkout-block'. | 8 |
| WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedVariableFound | WARNING | Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$my_plugin_file". | 7 |
| WordPress.WP.I18n.MissingArgDomain | ERROR | Missing $domain parameter in function call to esc_html_e(). | 7 |
| missing_direct_file_access_protection | ERROR | PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit; | 6 |
| WordPress.Security.NonceVerification.Recommended | WARNING | Processing form data without nonce verification. | 4 |
| WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedConstantFound | WARNING | Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "OLD_KLAVIYO_PLUGINS". | 3 |
| WordPress.DB.DirectDatabaseQuery.DirectQuery | WARNING | Use of a direct database call is discouraged. | 2 |
| WordPress.DB.DirectDatabaseQuery.NoCaching | WARNING | Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete(). | 2 |
| WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedNamespaceFound | WARNING | Namespaces declared by a theme/plugin should start with the theme/plugin prefix. Found: "WCK\Blocks". | 2 |
| WordPress.Security.ValidatedSanitizedInput.MissingUnslash | WARNING | $_POST['nonce'] not unslashed before sanitization. Use wp_unslash() or similar | 2 |
| WordPress.WP.AlternativeFunctions.strip_tags_strip_tags | ERROR | strip_tags() is discouraged. Use the more comprehensive wp_strip_all_tags() instead. | 1 |
| WordPress.WP.DiscouragedFunctions.wp_reset_query_wp_reset_query | WARNING | wp_reset_query() is discouraged. Use wp_reset_postdata() instead. | 1 |
| WordPress.WP.I18n.NonSingularStringLiteralText | ERROR | The $text parameter must be a single text string literal. Found: ( 'Title:' ) | 1 |
| block_api_version_too_low | ERROR | Editor blocks must define "apiVersion" 3 or higher in block.json for WordPress 7.0+ iframe editor compatibility. | 1 |
| plugin_header_no_license | ERROR | Missing "License" in Plugin Header. Please update your Plugin Header with a valid GPLv2 (or later) compatible license. | 1 |
| plugin_header_nonexistent_domain_path | WARNING | The "Domain Path" header in the plugin file must point to an existing folder. Found: "i18n/languages" | 1 |
| plugin_updater_detected | ERROR | Plugin Updater detected. These are not permitted in WordPress.org hosted plugins. Detected: site_transient_update_plugins | 1 |
| textdomain_mismatch | WARNING | The "Text Domain" header in the plugin file does not match the slug. Found "woocommerce-klaviyo", expected "klaviyo". | 1 |
| update_modification_detected | WARNING | Plugin Updater detected. Detected code which may be altering WordPress update routines. Detected: _site_transient_update_plugins | 1 |
Latest Snapshot
Findings
112
Errors
26
Warnings
86
Score History
First score snapshot
First scan completed Jun 20, 2026
v3.8.0 · Plugin Check 2.0.0 · Model 2026.06-mvp-static-v2
Jun 20, 2026
v3.8.0
79
Latest
- Findings
- 112
- Errors
- 26
- Warnings
- 86
- Plugin Check
- 2.0.0
- Model
- 2026.06-mvp-static-v2
| Scan | Score | Findings | Errors | Warnings | Plugin | Plugin Check | Model |
|---|---|---|---|---|---|---|---|
| Jun 20, 2026Latest | 79 | 112 | 26 | 86 | v3.8.0 | 2.0.0 | 2026.06-mvp-static-v2 |
