Using the power of AI, Kubio gives you a head start by generating a first draft of your website, which you can further customize to your liking.
Category Scores
Top Issues by Category
maintainability343
Issues Details
358 issues found in latest scan
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
Editor blocks must define "apiVersion" 3 or higher in block.json for WordPress 7.0+ iframe editor compatibility.
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "block_editor_settings_all".
Function "_build_block_template_result_from_file()" requires WordPress 5.9.0, but your plugin minimum supported version is WordPress 5.8.0.
Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "_kubio_add_template_part_area_info".
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$__kubio_plugin_cache__".
wp_redirect() found. Using wp_safe_redirect(), along with the "allowed_redirect_hosts" filter if needed, can help avoid any chances of malicious redirects within code. It is also important to remember to call exit() after a redirect so that no other unwanted code is executed.
Unescaped parameter $and used in $wpdb->get_results()\n$and assigned unsafely at line 385.
The use of function _cleanup_header_comment() is forbidden
Detected usage of meta_query, possible slow query.
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "$filter".
Detected usage of tax_query, possible slow query.
Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "WP_TEMPLATE_TYPES".
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$html'.
seems_utf8() has been deprecated since WordPress version 6.9.0. Use wp_is_valid_utf8() instead.
Plugin name "Kubio AI Page Builder" is different from the name declared in plugin header "Kubio".
| Code | Type | Message | Count |
|---|---|---|---|
| missing_direct_file_access_protection | ERROR | PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit; | 189 |
| block_api_version_too_low | ERROR | Editor blocks must define "apiVersion" 3 or higher in block.json for WordPress 7.0+ iframe editor compatibility. | 72 |
| WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedHooknameFound | WARNING | Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "block_editor_settings_all". | 33 |
| wp_function_not_compatible_with_requires_wp | ERROR | Function "_build_block_template_result_from_file()" requires WordPress 5.9.0, but your plugin minimum supported version is WordPress 5.8.0. | 17 |
| WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedFunctionFound | WARNING | Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "_kubio_add_template_part_area_info". | 13 |
| WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedVariableFound | WARNING | Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$__kubio_plugin_cache__". | 9 |
| WordPress.Security.SafeRedirect.wp_redirect_wp_redirect | WARNING | wp_redirect() found. Using wp_safe_redirect(), along with the "allowed_redirect_hosts" filter if needed, can help avoid any chances of malicious redirects within code. It is also important to remember to call exit() after a redirect so that no other unwanted code is executed. | 8 |
| PluginCheck.Security.DirectDB.UnescapedDBParameter | WARNING | Unescaped parameter $and used in $wpdb->get_results()\n$and assigned unsafely at line 385. | 6 |
| Generic.PHP.ForbiddenFunctions.Found | ERROR | The use of function _cleanup_header_comment() is forbidden | 2 |
| WordPress.DB.SlowDBQuery.slow_db_query_meta_query | WARNING | Detected usage of meta_query, possible slow query. | 2 |
| WordPress.NamingConventions.PrefixAllGlobals.DynamicHooknameFound | WARNING | Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "$filter". | 2 |
| WordPress.DB.SlowDBQuery.slow_db_query_tax_query | WARNING | Detected usage of tax_query, possible slow query. | 1 |
| WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedConstantFound | WARNING | Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "WP_TEMPLATE_TYPES". | 1 |
| WordPress.Security.EscapeOutput.OutputNotEscaped | ERROR | All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$html'. | 1 |
| WordPress.WP.DeprecatedFunctions.seems_utf8Found | WARNING | seems_utf8() has been deprecated since WordPress version 6.9.0. Use wp_is_valid_utf8() instead. | 1 |
| mismatched_plugin_name | WARNING | Plugin name "Kubio AI Page Builder" is different from the name declared in plugin header "Kubio". | 1 |
Latest Snapshot
Findings
358
Errors
281
Warnings
77
Score History
First score snapshot
First scan completed Jun 20, 2026
v2.8.1 · Plugin Check 2.0.0 · Model 2026.06-mvp-static-v2
Jun 20, 2026
v2.8.1
60
Latest
- Findings
- 358
- Errors
- 281
- Warnings
- 77
- Plugin Check
- 2.0.0
- Model
- 2026.06-mvp-static-v2
| Scan | Score | Findings | Errors | Warnings | Plugin | Plugin Check | Model |
|---|---|---|---|---|---|---|---|
| Jun 20, 2026Latest | 60 | 358 | 281 | 77 | v2.8.1 | 2.0.0 | 2026.06-mvp-static-v2 |
