A full-featured SEO plugin for WordPress that's lightweight, blazing fast with minimum configuration. No bloats and just works!
| Code | Message | Location | Category | |
|---|---|---|---|---|
| ERROR | WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedHooknameFound | Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "wpml_current_language". | 52:44 | Plugin Repo |
| ERROR | WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedHooknameFound | Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "wpml_object_id". | 75:45 | Plugin Repo |
| ERROR | WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedHooknameFound | Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "wpml_default_language". | 98:31 | Plugin Repo |
| ERROR | Generic.PHP.ForbiddenFunctions.Found | The use of function get_post_type_labels() is forbidden | 43:13 | — |
| ERROR | invalid_tested_upto_minor | Tested up to: 6.8.3 The version number should only include major versions 6.8. | — | Plugin Repo |
| ERROR | five_star_reviews_detected | Linking directly to 5 stars reviews is not allowed. | 25:23 | Plugin Repo |
| WARNING | WordPress.DB.PreparedSQL.InterpolatedNotPrepared | Use placeholders and $wpdb->prepare(); found interpolated variable $table at "SELECT seo FROM `$table` WHERE `url` = %s" | 28:42 | Security |
| WARNING | PluginCheck.Security.DirectDB.UnescapedDBParameter | Unescaped parameter $sql_query used in $wpdb->get_results($sql_query)\n$sql_query assigned unsafely at line 89:\n $sql_query .= " LIMIT {$limit} OFFSET {$offset}"\n$limit used without escaping.\n$offset used without escaping. | 93:17 | Security |
| WARNING | PluginCheck.Security.DirectDB.UnescapedDBParameter | Unescaped parameter $days used in $wpdb->query("DELETE FROM {$wpdb->slim_seo_404} WHERE updated_at < NOW() - INTERVAL {$days} DAY")\n$days used without escaping. | 114:10 | Security |
| WARNING | PluginCheck.Security.DirectDB.UnescapedDBParameter | Unescaped parameter $column used in $wpdb->get_var($wpdb->prepare( "SELECT $column FROM {$wpdb->prefix}aioseo_posts WHERE post_id = %d", $post->ID ))\n$column assigned unsafely at line 109:\n $column = $type === 'twitter' ? 'twitter_image_url' : 'og_image_url'\n$post->ID used without escaping. | 112:17 | Security |
| 11/13/2025, 1:16:46 AM | 28s | 97 | 6 | 10 |