A visual editor to customize the CSS styling of anything on your site - from Google fonts to responsive layouts.
20
Score
1,004
Errors
1,699
Warnings
+0
Change
Category Scores
Security0
Repo69
Performance100
Maintainability0
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Maintainability
1,274
12 issue groups
Security
1,095
9 issue groups
I18n
196
4 issue groups
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$MTlicense".912
- Category
- Maintainability
- Occurrences
- 912
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$MTlicense".
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"<script id='$handle-js'%s%s>%s</script>\n"'.519
- Category
- Security
- Occurrences
- 519
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"<script id='$handle-js'%s%s>%s</script>\n"'.
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_COOKIE[$key]132
- Category
- Security
- Occurrences
- 132
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_COOKIE[$key]
WARNINGSecurityRequest data is not unslashed$_COOKIE[$key] not unslashed before sanitization. Use wp_unslash() or similar120
- Category
- Security
- Occurrences
- 120
- Severity
- warning
Sample message
$_COOKIE[$key] not unslashed before sanitization. Use wp_unslash() or similar
ERRORI18nMissing Translators CommentA function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.116
- Category
- I18n
- Occurrences
- 116
- Severity
- error
Sample message
A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.
ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;96
- Category
- Maintainability
- Occurrences
- 96
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.95
- Category
- Security
- Occurrences
- 95
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGSecurityInput is not validatedDetected usage of a possibly undefined superglobal array index: $_FILES['preferences_file']['error']. Check that the array index exists before using it.86
- Category
- Security
- Occurrences
- 86
- Severity
- warning
Sample message
Detected usage of a possibly undefined superglobal array index: $_FILES['preferences_file']['error']. Check that the array index exists before using it.
WARNINGSecurityMissing nonce verificationProcessing form data without nonce verification.65
- Category
- Security
- Occurrences
- 65
- Severity
- warning
Sample message
Processing form data without nonce verification.
ERRORI18nMissing Arg DomainMissing $domain parameter in function call to __().47
- Category
- I18n
- Occurrences
- 47
- Severity
- error
Sample message
Missing $domain parameter in function call to __().
Show 15 moreShow less
WARNINGMaintainabilityDynamic hook name42
- Category
- Maintainability
- Occurrences
- 42
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "$slugCheckFilter".
WARNINGSecurityInterpolated SQL is not prepared41
- Category
- Security
- Occurrences
- 41
- Severity
- warning
Sample message
Use placeholders and $wpdb->prepare(); found interpolated variable $as at \t\t\t\t VALUES $insertString $as\r\n
WARNINGMaintainabilityDirect Query40
- Category
- Maintainability
- Occurrences
- 40
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGMaintainabilityNo Caching39
- Category
- Maintainability
- Occurrences
- 39
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
WARNINGMaintainabilityNon-prefixed hook name32
- Category
- Maintainability
- Occurrences
- 32
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "afs-import_details".
WARNINGMaintainabilityerror log print r23
- Category
- Maintainability
- Occurrences
- 23
- Severity
- warning
Sample message
print_r() found. Debug code should not normally be used in production.
ERRORMaintainabilitystrip tags strip tags21
- Category
- Maintainability
- Occurrences
- 21
- Severity
- error
Sample message
strip_tags() is discouraged. Use the more comprehensive wp_strip_all_tags() instead.
ERRORSecurityException output is not escaped19
- Category
- Security
- Occurrences
- 19
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$importPath'.
ERRORMaintainabilityfile system operations fclose19
- Category
- Maintainability
- Occurrences
- 19
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fclose().
ERRORMaintainabilityfile system operations fopen19
- Category
- Maintainability
- Occurrences
- 19
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fopen().
WARNINGSecurityDatabase parameter is not escaped18
- Category
- Security
- Occurrences
- 18
- Severity
- warning
Sample message
Unescaped parameter $content_table used in $wpdb->get_results()\n$content_table assigned unsafely at line 54.
ERRORMaintainabilityunlink unlink18
- Category
- Maintainability
- Occurrences
- 18
- Severity
- error
Sample message
unlink() is discouraged. Use wp_delete_file() to delete a file.
ERRORI18nUnordered Placeholders Text18
- Category
- I18n
- Occurrences
- 18
- Severity
- error
Sample message
Multiple placeholders in translatable strings should be ordered. Expected "%1$s, %2$s", but got "%s, %s" in '%s could not be moved to %s'.
ERRORI18nText Domain Mismatch15
- Category
- I18n
- Occurrences
- 15
- Severity
- error
Sample message
Mismatched text domain. Expected 'microthemer' but got 'noun'.
ERRORMaintainabilityfile system operations fwrite13
- Category
- Maintainability
- Occurrences
- 13
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fwrite().
External Connections
Not analyzed yet.
Score History
First score snapshot
v7.5.3.9
20
Latest
- Findings
- 2,703
- Errors
- 1,004
- Warnings
- 1,699
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 20 | 2,703 | 1,004 | 1,699 | v7.5.3.9 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueRelated
Relationship links
Author
Issue
Non-prefixed global variable912 findingsOutput is not escaped519 findingsInput is not sanitized132 findingsRequest data is not unslashed120 findingsMissing Translators Comment116 findingsMissing direct file access protection96 findingsNonce verification recommended95 findingsInput is not validated86 findings
Related
Yoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce22 scoreAkismet Anti-spam: Spam Protection35 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder35 scoreClassic Editor63 scoreLiteSpeed Cache35 scoreAll-in-One WP Migration and Backup34 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWPCode – Insert Headers and Footers + Custom Code Snippets – WordPress Code Manager88 scoreCode Snippets36 scoreCustom Fonts – Host Your Fonts Locally77 scoreFonts Plugin | Google Fonts, Adobe Fonts & Upload Fonts35 scoreUse Any Font | Custom Font Uploader39 score
Author
Issue
Non-prefixed global variable912 findingsOutput is not escaped519 findingsInput is not sanitized132 findingsRequest data is not unslashed120 findingsMissing Translators Comment116 findingsMissing direct file access protection96 findingsNonce verification recommended95 findingsInput is not validated86 findings
Related
Yoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce22 scoreAkismet Anti-spam: Spam Protection35 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder35 scoreClassic Editor63 scoreLiteSpeed Cache35 scoreAll-in-One WP Migration and Backup34 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWPCode – Insert Headers and Footers + Custom Code Snippets – WordPress Code Manager88 scoreCode Snippets36 scoreCustom Fonts – Host Your Fonts Locally77 scoreFonts Plugin | Google Fonts, Adobe Fonts & Upload Fonts35 scoreUse Any Font | Custom Font Uploader39 score
Related Plugins
Block Editor: Reverse Columns on Mobile
500 active installs
100
Code Embed
10k+ active installs
100
Definitely allow mobile zooming
7k+ active installs
100
Disable Responsive Images Complete
2k+ active installs
100
Flex Posts – Responsive Posts Block
3k+ active installs
100
Options for Twenty Nineteen
700 active installs
100