Slider by 10Web – Responsive Image Slider

Slider by 10Web plugin is the perfect slider solution for Wordpress.

v1.2.6210WebUpdated Added 10k+ installs90% rating
23
Score
5,814
Errors
976
Warnings
+0
Change

Category Scores

Security0
Repo86
Performance100
Maintainability0

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

6,790 findings

Security

4,499

10 issue groups

I18n

1,712

3 issue groups

Maintainability

512

12 issue groups

ERRORSecurityOutput Not EscapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$action'.3,006
Category
Security
Occurrences
3,006
Severity
error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$action'.

ERRORI18nNon Singular String Literal DomainThe $domain parameter must be a single text string literal. Found: $prefix1,538
Category
I18n
Occurrences
1,538
Severity
error

Sample message

The $domain parameter must be a single text string literal. Found: $prefix

ERRORSecurityUnsafe Printing FunctionAll output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.861
Category
Security
Occurrences
861
Severity
error

Sample message

All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.

WARNINGSecurityRecommendedProcessing form data without nonce verification.230
Category
Security
Occurrences
230
Severity
warning

Sample message

Processing form data without nonce verification.

WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.160
Category
Maintainability
Occurrences
160
Severity
warning

Sample message

Use of a direct database call is discouraged.

WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().151
Category
Maintainability
Occurrences
151
Severity
warning

Sample message

Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().

ERRORI18nText Domain MismatchMismatched text domain. Expected 'slider-wd' but got "tenweb-booster".138
Category
I18n
Occurrences
138
Severity
error

Sample message

Mismatched text domain. Expected 'slider-wd' but got "tenweb-booster".

WARNINGSecurityMissing Unslash$_GET[$key] not unslashed before sanitization. Use wp_unslash() or similar110
Category
Security
Occurrences
110
Severity
warning

Sample message

$_GET[$key] not unslashed before sanitization. Use wp_unslash() or similar

WARNINGMaintainabilitySchema ChangeAttempting a database schema change is discouraged.91
Category
Maintainability
Occurrences
91
Severity
warning

Sample message

Attempting a database schema change is discouraged.

WARNINGSecurityInput Not SanitizedDetected usage of a non-sanitized input variable: $_FILES[$this->options['param_name']]89
Category
Security
Occurrences
89
Severity
warning

Sample message

Detected usage of a non-sanitized input variable: $_FILES[$this->options['param_name']]

Show 15 more
WARNINGSecurityMissing67
Category
Security
Occurrences
67
Severity
warning

Sample message

Processing form data without nonce verification.

ERRORSecurityNot Prepared65
Category
Security
Occurrences
65
Severity
error

Sample message

Use placeholders and $wpdb->prepare(); found $default_array

ERRORI18nMissing Translators Comment36
Category
I18n
Occurrences
36
Severity
error

Sample message

A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.

ERRORSecurityUnescaped DBParameter33
Category
Security
Occurrences
33
Severity
error

Sample message

Unescaped parameter $fillmode used in $wpdb->query()\n$fillmode assigned unsafely at line 229.

WARNINGSecurityInput Not Validated24
Category
Security
Occurrences
24
Severity
warning

Sample message

Detected usage of a possibly undefined superglobal array index: $_REQUEST['file_namesML']. Check that the array index exists before using it.

WARNINGMaintainabilityNot In Footer23
Category
Maintainability
Occurrences
23
Severity
warning

Sample message

In footer ($in_footer) is not set explicitly wp_enqueue_script; It is recommended to load scripts in the footer. Please set this value to `true` to load it in the footer, or explicitly `false` if it should be loaded in the header.

ERRORMaintainabilityfile system operations mkdir22
Category
Maintainability
Occurrences
22
Severity
error

Sample message

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: mkdir().

ERRORSecurityQuoted Simple Placeholder14
Category
Security
Occurrences
14
Severity
error

Sample message

Simple placeholders should not be quoted in the query string in $wpdb->prepare(). Found: "%d".

ERRORMaintainabilitymissing direct file access protection11
Category
Maintainability
Occurrences
11
Severity
error

Sample message

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

WARNINGMaintainabilityMissing Version10
Category
Maintainability
Occurrences
10
Severity
warning

Sample message

Resource version not set in call to wp_enqueue_script(). This means new versions of the script may not always be loaded due to browser caching.

ERRORMaintainabilitywp function not compatible with requires wp10
Category
Maintainability
Occurrences
10
Severity
error

Sample message

Function "doing_filter()" requires WordPress 3.9.0, but your plugin minimum supported version is WordPress 3.4.0.

ERRORMaintainabilityfile system operations fopen9
Category
Maintainability
Occurrences
9
Severity
error

Sample message

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fopen().

ERRORMaintainabilityrand mt rand9
Category
Maintainability
Occurrences
9
Severity
error

Sample message

mt_rand() is discouraged. Use the far less predictable wp_rand() instead.

ERRORMaintainabilitydate date8
Category
Maintainability
Occurrences
8
Severity
error

Sample message

date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.

ERRORMaintainabilityfile system operations fclose8
Category
Maintainability
Occurrences
8
Severity
error

Sample message

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fclose().

Score History

First score snapshot

v1.2.62

23

Latest

Findings
6,790
Errors
5,814
Warnings
976
Check
2.0.0

Related Plugins