Public Post Preview

Allow anonymous users to preview a draft of a post before it is published.

v3.1.2Dominik SchillingUpdated Added 100k+ installs90% rating0% support resolved
57
Score
8
Errors
11
Warnings
+0
Change

Category Scores

Security24
Repo94
Performance100
Maintainability98

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

19 findings

Security

17

6 issue groups

Maintainability

1

1 issue group

Repo Compliance

1

1 issue group

WARNINGSecurityRecommendedProcessing form data without nonce verification.6
Category
Security
Occurrences
6
Severity
warning

Sample message

Processing form data without nonce verification.

ERRORSecurityUnsafe Printing FunctionAll output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.4
Category
Security
Occurrences
4
Severity
error

Sample message

All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.

ERRORSecurityOutput Not EscapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '__'.2
Category
Security
Occurrences
2
Severity
error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '__'.

WARNINGSecurityInput Not SanitizedDetected usage of a non-sanitized input variable: $_POST['checked']2
Category
Security
Occurrences
2
Severity
warning

Sample message

Detected usage of a non-sanitized input variable: $_POST['checked']

WARNINGSecurityMissing Unslash$_POST['checked'] not unslashed before sanitization. Use wp_unslash() or similar2
Category
Security
Occurrences
2
Severity
warning

Sample message

$_POST['checked'] not unslashed before sanitization. Use wp_unslash() or similar

WARNINGSecurityMissingProcessing form data without nonce verification.1
Category
Security
Occurrences
1
Severity
warning

Sample message

Processing form data without nonce verification.

ERRORMaintainabilitymissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;1
Category
Maintainability
Occurrences
1
Severity
error

Sample message

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

ERRORRepo Compliancemissing readme header testedThe "Tested up to" header is missing in the readme file.1
Category
Repo Compliance
Occurrences
1
Severity
error

Sample message

The "Tested up to" header is missing in the readme file.

Score History

First score snapshot

v3.1.2

57

Latest

Findings
19
Errors
8
Warnings
11
Check
2.0.0

Related Plugins

Essential Widgets

10k+ active installs

99
No Page Comment

10k+ active installs

98
WP Display Header

7k+ active installs

98
Hierarchical HTML Sitemap

4k+ active installs

97