A modern video and audio player for courses, landing pages, marketing, and testimonials — with captions, branding, and page-builder support.
Category Scores
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Maintainability
110
13 issue groups
Security
84
8 issue groups
I18n
40
4 issue groups
ERRORSecurityOutput Not EscapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"<div class='notice {$noticeLevel} is-dismissible'><p>{$message}</p></div>"'.32
- Category
- Security
- Occurrences
- 32
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"<div class='notice {$noticeLevel} is-dismissible'><p>{$message}</p></div>"'.
ERRORI18nMissing Arg DomainMissing $domain parameter in function call to __().32
- Category
- I18n
- Occurrences
- 32
- Severity
- error
Sample message
Missing $domain parameter in function call to __().
ERRORMaintainabilityblock api version too lowEditor blocks must define "apiVersion" 3 or higher in block.json for WordPress 7.0+ iframe editor compatibility.22
- Category
- Maintainability
- Occurrences
- 22
- Severity
- error
Sample message
Editor blocks must define "apiVersion" 3 or higher in block.json for WordPress 7.0+ iframe editor compatibility.
WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.14
- Category
- Maintainability
- Occurrences
- 14
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
ERRORMaintainabilitymissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;14
- Category
- Maintainability
- Occurrences
- 14
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
WARNINGSecurityUnescaped DBParameterUnescaped parameter $audio_table used in $wpdb->get_var()13
- Category
- Security
- Occurrences
- 13
- Severity
- warning
Sample message
Unescaped parameter $audio_table used in $wpdb->get_var()
WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().13
- Category
- Maintainability
- Occurrences
- 13
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
WARNINGMaintainabilityNon Prefixed Variable FoundGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$load_presto_js".12
- Category
- Maintainability
- Occurrences
- 12
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$load_presto_js".
WARNINGSecurityRecommendedProcessing form data without nonce verification.12
- Category
- Security
- Occurrences
- 12
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGMaintainabilityNon Prefixed Class FoundClasses declared by a theme/plugin should start with the theme/plugin prefix. Found: "BSF_Analytics".8
- Category
- Maintainability
- Occurrences
- 8
- Severity
- warning
Sample message
Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "BSF_Analytics".
Show 15 moreShow less
ERRORSecurityUnsafe Printing Function8
- Category
- Security
- Occurrences
- 8
- Severity
- error
Sample message
All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.
WARNINGSecurityMissing Unslash7
- Category
- Security
- Occurrences
- 7
- Severity
- warning
Sample message
$_POST['nonce'] not unslashed before sanitization. Use wp_unslash() or similar
WARNINGMaintainabilityDynamic Hookname Found5
- Category
- Maintainability
- Occurrences
- 5
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "$key . '_tracking_enabled'".
WARNINGMaintainabilityNon Prefixed Hookname Found5
- Category
- Maintainability
- Occurrences
- 5
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "bsf_core_stats".
WARNINGSecurityInput Not Sanitized5
- Category
- Security
- Occurrences
- 5
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_POST['nonce']
ERRORMaintainabilitywp function not compatible with requires wp5
- Category
- Maintainability
- Occurrences
- 5
- Severity
- error
Sample message
Function "utf8_decode()" requires WordPress 6.9.0, but your plugin minimum supported version is WordPress 6.3.0.
WARNINGSecurityInterpolated Not Prepared4
- Category
- Security
- Occurrences
- 4
- Severity
- warning
Sample message
Use placeholders and $wpdb->prepare(); found interpolated variable $columns at "CREATE TABLE IF NOT EXISTS $full_table_name ( $columns ) $table_options;"
WARNINGMaintainabilitySchema Change3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
Attempting a database schema change is discouraged.
ERRORSecurityNot Prepared3
- Category
- Security
- Occurrences
- 3
- Severity
- error
Sample message
Use placeholders and $wpdb->prepare(); found $name
WARNINGMaintainabilityslow db query meta query3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
Detected usage of meta_query, possible slow query.
WARNINGMaintainabilityNon Prefixed Constant Found3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "BSF_ANALYTICS_URI".
ERRORI18nMissing Translators Comment3
- Category
- I18n
- Occurrences
- 3
- Severity
- error
Sample message
A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.
ERRORI18nText Domain Mismatch3
- Category
- I18n
- Occurrences
- 3
- Severity
- error
Sample message
Mismatched text domain. Expected 'presto-player' but got 'nps-survey'.
WARNINGMaintainabilityunexpected markdown file3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
Unexpected markdown file "CLAUDE.md" detected in plugin root. Only specific markdown files are expected in production plugins.
WARNINGI18nText Domain Mismatch2
- Category
- I18n
- Occurrences
- 2
- Severity
- warning
Sample message
Mismatched text domain. Expected 'presto-player' but got 'default'.
Score History
First score snapshot
v4.2.3
27
Latest
- Findings
- 255
- Errors
- 131
- Warnings
- 124
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 27 | 255 | 131 | 124 | v4.2.3 | 2.0.0 |
Related Plugins
6k+ active installs
10k+ active installs
4k+ active installs
20k+ active installs
2k+ active installs
4k+ active installs