Social Sharing Plugin – Sassy Social Share

The Simplest and Optimized Social Share buttons. Facebook, X, Reddit, Pinterest, Whatsapp, Grok, ChatGPT, Gab, Gettr and over 100 more.

v3.3.79Heateor SupportUpdated 2025-09-15Added Dec 3, 2015100k+ installs96% rating0% support resolved
22
Score
1,689
Errors
233
Warnings
+0
Change

Category Scores

Security0
Repo83
Performance100
Maintainability0

Top Issues by Category

security1,027
maintainability849
i18n38

Issues Details

1,922 issues found in latest scan

ERROR715
wp_function_not_compatible_with_requires_wp

Function "admin_url()" requires WordPress 2.6.0, but your plugin minimum supported version is WordPress 2.5.0.

ERROR586
WordPress.Security.EscapeOutput.UnsafePrintingFunction

All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.

ERROR335
WordPress.Security.EscapeOutput.OutputNotEscaped

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$after_title'.

WARNING71
WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedVariableFound

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$border_color".

WARNING43
WordPress.Security.ValidatedSanitizedInput.MissingUnslash

$_GET['heateor_mastodon_share'] not unslashed before sanitization. Use wp_unslash() or similar

WARNING38
upgrade_notice_limit

The upgrade notice for "1.1" exceeds the limit of 300 characters.

WARNING28
WordPress.Security.ValidatedSanitizedInput.InputNotSanitized

Detected usage of a non-sanitized input variable: $_GET['heateor_mastodon_share']

WARNING21
WordPress.Security.ValidatedSanitizedInput.InputNotValidated

Detected usage of a possibly undefined superglobal array index: $_POST['post_type']. Check that the array index exists before using it.

ERROR18
WordPress.WP.I18n.MissingTranslatorsComment

A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.

WARNING14
WordPress.Security.NonceVerification.Recommended

Processing form data without nonce verification.

ERROR9
WordPress.WP.I18n.MissingArgDomain

Missing $domain parameter in function call to __().

ERROR6
WordPress.WP.I18n.UnorderedPlaceholdersText

Multiple placeholders in translatable strings should be ordered. Expected "%1$s, %2$s", but got "%s, %s" in '%s pixels from %s'.

ERROR5
WordPress.WP.EnqueuedResources.NonEnqueuedScript

Scripts must be registered/enqueued via wp_enqueue_script()

WARNING4
WordPress.DB.DirectDatabaseQuery.DirectQuery

Use of a direct database call is discouraged.

WARNING4
WordPress.DB.DirectDatabaseQuery.NoCaching

Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().

ERROR4
WordPress.WP.I18n.NonSingularStringLiteralText

The $text parameter must be a single text string literal. Found: 'Disable Floating Sharing interface on this ' . $postType

WARNING3
WordPress.WP.EnqueuedResourceParameters.NotInFooter

In footer ($in_footer) is not set explicitly wp_enqueue_script; It is recommended to load scripts in the footer. Please set this value to `true` to load it in the footer, or explicitly `false` if it should be loaded in the header.

WARNING2
WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedHooknameFound

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "active_plugins".

ERROR2
WordPress.WP.AlternativeFunctions.strip_tags_strip_tags

strip_tags() is discouraged. Use the more comprehensive wp_strip_all_tags() instead.

WARNING1
PluginCheck.CodeAnalysis.DiscouragedFunctions.load_plugin_textdomainFound

load_plugin_textdomain() has been discouraged since WordPress version 4.6. When your plugin is hosted on WordPress.org, you no longer need to manually include this function call for translations under your plugin slug. WordPress will automatically load the translations for you as needed.

ERROR1
PluginCheck.CodeAnalysis.Heredoc.NotAllowed

Use of heredoc syntax (<<<) is not allowed; use standard strings or inline HTML instead

ERROR1
PluginCheck.CodeAnalysis.WriteFile.PluginDirectoryWrite

Plugin folders are deleted when upgraded. Do not save data to the plugin folder using fwrite(). Detected usage of __FILE__ or __DIR__ magic constant. Use wp_upload_dir() to get the uploads directory path or save to the database instead.

ERROR1
WordPress.WP.AlternativeFunctions.file_system_operations_fclose

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fclose().

ERROR1
WordPress.WP.AlternativeFunctions.file_system_operations_fopen

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fopen().

ERROR1
WordPress.WP.AlternativeFunctions.file_system_operations_fwrite

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fwrite().

Latest Snapshot

Findings

1,922

Errors

1,689

Warnings

233

Score History

First score snapshot

First scan completed Jun 19, 2026

v3.3.79 · Plugin Check 2.0.0 · Model 2026.06-mvp-static-v2

Jun 19, 2026

v3.3.79

22

Latest

Findings
1,922
Errors
1,689
Warnings
233
Plugin Check
2.0.0
Model
2026.06-mvp-static-v2

Related Plugins