Lockdown WP Admin

Lockdown WP Admin conceals the administration and login screen from intruders. It can hide WordPress Admin (/wp-admin/) and and login (/wp-login.

v2.3.2Sean FisherUpdated 2017-11-28Added Jan 11, 201110k+ installs78% rating
41
Score
20
Errors
50
Warnings
+0
Change

Category Scores

Security0
Repo83
Performance100
Maintainability93

Top Issues by Category

Issues Details

70 issues found in latest scan

WARNING17
WordPress.Security.ValidatedSanitizedInput.MissingUnslash

$_POST['_wpnonce'] not unslashed before sanitization. Use wp_unslash() or similar

WARNING16
WordPress.Security.ValidatedSanitizedInput.InputNotSanitized

Detected usage of a non-sanitized input variable: $_POST['_wpnonce']

ERROR10
WordPress.Security.EscapeOutput.OutputNotEscaped

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$this'.

WARNING8
WordPress.Security.ValidatedSanitizedInput.InputNotValidated

Detected usage of a possibly undefined superglobal array index: $_POST['_wpnonce']. Check that the array index exists before using it.

ERROR3
WordPress.Security.EscapeOutput.ExceptionNotEscaped

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '__'.

ERROR3
WordPress.WP.I18n.MissingTranslatorsComment

A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.

WARNING3
trademarked_term

The plugin name includes a restricted term. Your chosen plugin name - "Lockdown WP Admin" - contains the restricted term "wp" which cannot be used at all in your plugin name.

WARNING2
WordPress.Security.NonceVerification.Recommended

Processing form data without nonce verification.

ERROR2
missing_direct_file_access_protection

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

WARNING1
WordPress.PHP.DevelopmentFunctions.prevent_path_disclosure_error_reporting

error_reporting() can lead to full path disclosure.

WARNING1
WordPress.Security.NonceVerification.Missing

Processing form data without nonce verification.

ERROR1
no_license

Missing "License". Please update your readme with a valid GPLv2 (or later) compatible license.

ERROR1
outdated_tested_upto_header

Tested up to: 4.3 < 7.0. The "Tested up to" value in your plugin is not set to the current version of WordPress. This means your plugin will not show up in searches, as we require plugins to be compatible and documented as tested up to the most recent version of WordPress.

WARNING1
readme_parser_warnings_too_many_tags

One or more tags were ignored. Please limit your plugin to 5 tags.

WARNING1
readme_parser_warnings_trimmed_short_description

The "Short Description" section is too long and was truncated. A maximum of 150 characters is supported.

Latest Snapshot

Findings

70

Errors

20

Warnings

50

Score History

First score snapshot

First scan completed Jun 20, 2026

v2.3.2 · Plugin Check 2.0.0 · Model 2026.06-mvp-static-v2

Jun 20, 2026

v2.3.2

41

Latest

Findings
70
Errors
20
Warnings
50
Plugin Check
2.0.0
Model
2026.06-mvp-static-v2

Related Plugins