Meta Tag Manager

Easily add and manage custom meta tags to various parts of your site or on individual posts, such as Yahoo and Google verification tags.

v3.3Marcus (aka @msykes)Updated Added 80k+ installs96% rating
34
Score
142
Errors
321
Warnings
+0
Change

Category Scores

Security0
Repo94
Performance100
Maintainability50

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

463 findings

Security

224

6 issue groups

Maintainability

179

9 issue groups

I18n

59

4 issue groups

Repo Compliance

1

1 issue group

WARNINGSecurityRecommendedProcessing form data without nonce verification.91
Category
Security
Occurrences
91
Severity
warning

Sample message

Processing form data without nonce verification.

WARNINGMaintainabilityNon Prefixed Variable FoundGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$Admin_Notice".87
Category
Maintainability
Occurrences
87
Severity
warning

Sample message

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$Admin_Notice".

ERRORSecurityOutput Not EscapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"<a href='$tab_link#$tab_key' id='mtm-menu-$tab_key' class='nav-tab $active_class'>$tab_name</a>"'.62
Category
Security
Occurrences
62
Severity
error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"<a href='$tab_link#$tab_key' id='mtm-menu-$tab_key' class='nav-tab $active_class'>$tab_name</a>"'.

WARNINGMaintainabilityNon Prefixed Hookname FoundHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: &quot;&#039;mtm_admin_notice_&#039;.$this-&gt;name&quot;.52
Category
Maintainability
Occurrences
52
Severity
warning

Sample message

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: &quot;&#039;mtm_admin_notice_&#039;.$this-&gt;name&quot;.

WARNINGSecurityMissing Unslash$_COOKIE[&#039;mtm_notices&#039;] not unslashed before sanitization. Use wp_unslash() or similar39
Category
Security
Occurrences
39
Severity
warning

Sample message

$_COOKIE[&#039;mtm_notices&#039;] not unslashed before sanitization. Use wp_unslash() or similar

ERRORI18nMissing Translators CommentA function call to esc_html__() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.36
Category
I18n
Occurrences
36
Severity
error

Sample message

A function call to esc_html__() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.

WARNINGSecurityInput Not SanitizedDetected usage of a non-sanitized input variable: $_COOKIE[&#039;mtm_notices&#039;]26
Category
Security
Occurrences
26
Severity
warning

Sample message

Detected usage of a non-sanitized input variable: $_COOKIE[&#039;mtm_notices&#039;]

ERRORMaintainabilitymissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;15
Category
Maintainability
Occurrences
15
Severity
error

Sample message

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

ERRORI18nMissing Arg DomainMissing $domain parameter in function call to __().12
Category
I18n
Occurrences
12
Severity
error

Sample message

Missing $domain parameter in function call to __().

WARNINGMaintainabilityNon Prefixed Function FoundFunctions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: &quot;mtm_input_checkbox_items&quot;.8
Category
Maintainability
Occurrences
8
Severity
warning

Sample message

Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: &quot;mtm_input_checkbox_items&quot;.

Show 10 more
WARNINGMaintainabilityNot In Footer6
Category
Maintainability
Occurrences
6
Severity
warning

Sample message

In footer ($in_footer) is not set explicitly wp_enqueue_script; It is recommended to load scripts in the footer. Please set this value to `true` to load it in the footer, or explicitly `false` if it should be loaded in the header.

ERRORI18nUnordered Placeholders Text6
Category
I18n
Occurrences
6
Severity
error

Sample message

Multiple placeholders in translatable strings should be ordered. Expected "%1$s, %2$s", but got "%s, %s" in 'Enter a phone number in the international format, containing your %s. For example, in the US and Canada : %s'.

WARNINGSecurityInput Not Validated5
Category
Security
Occurrences
5
Severity
warning

Sample message

Detected usage of a possibly undefined superglobal array index: $_REQUEST[&#039;action&#039;]. Check that the array index exists before using it.

ERRORI18nText Domain Mismatch5
Category
I18n
Occurrences
5
Severity
error

Sample message

Mismatched text domain. Expected 'meta-tag-manager' but got 'events-manager'.

WARNINGMaintainabilityNon Prefixed Class Found3
Category
Maintainability
Occurrences
3
Severity
warning

Sample message

Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: &quot;MTM_Builder&quot;.

WARNINGMaintainabilityNon Prefixed Constant Found3
Category
Maintainability
Occurrences
3
Severity
warning

Sample message

Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: &quot;MTM_DIR&quot;.

ERRORMaintainabilitywp function not compatible with requires wp3
Category
Maintainability
Occurrences
3
Severity
error

Sample message

Function "determine_locale()" requires WordPress 5.0.0, but your plugin minimum supported version is WordPress 3.6.0.

ERRORMaintainabilityfive star reviews detected2
Category
Maintainability
Occurrences
2
Severity
error

Sample message

Linking directly to 5 stars reviews is not allowed.

WARNINGSecuritywp redirect wp redirect1
Category
Security
Occurrences
1
Severity
warning

Sample message

wp_redirect() found. Using wp_safe_redirect(), along with the &quot;allowed_redirect_hosts&quot; filter if needed, can help avoid any chances of malicious redirects within code. It is also important to remember to call exit() after a redirect so that no other unwanted code is executed.

ERRORRepo Complianceplugin header no license1
Category
Repo Compliance
Occurrences
1
Severity
error

Sample message

Missing "License" in Plugin Header. Please update your Plugin Header with a valid GPLv2 (or later) compatible license.

Score History

First score snapshot

v3.3

34

Latest

Findings
463
Errors
142
Warnings
321
Check
2.0.0

Related Plugins

Catch Web Tools

10k+ active installs

100
noindex SEO

3k+ active installs

100
wp_head() cleaner

2k+ active installs

100
AIKTP

3k+ active installs

99
Canonical Link

2k+ active installs

99
99