Tutor LMS Elementor Addons

Get 35+ Elementor widgets to create an entire eLearning site with Tutor LMS and design custom course pages, course carousels, listings, and more.

v3.0.2ThemeumUpdated 2026-02-24Added Jan 4, 202130k+ installs70% rating
31
Score
227
Errors
457
Warnings
+0
Change

Category Scores

Security0
Repo89
Performance100
Maintainability38

Top Issues by Category

maintainability467
security179
i18n36
repo_compliance2

Issues Details

684 issues found in latest scan

WARNING378
WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedVariableFound

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$_method".

ERROR126
WordPress.Security.EscapeOutput.OutputNotEscaped

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$animation_class'.

ERROR55
missing_direct_file_access_protection

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

WARNING15
WordPress.Security.ValidatedSanitizedInput.MissingUnslash

$_GET['current_page'] not unslashed before sanitization. Use wp_unslash() or similar

WARNING13
WordPress.Security.ValidatedSanitizedInput.InputNotSanitized

Detected usage of a non-sanitized input variable: $_SERVER['HTTP_HOST']

ERROR13
WordPress.WP.I18n.TextDomainMismatch

Mismatched text domain. Expected 'tutor-lms-elementor-addons' but got 'elementor'.

WARNING11
WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedHooknameFound

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "active_plugins".

ERROR11
WordPress.WP.I18n.MissingArgDomain

Missing $domain parameter in function call to __().

WARNING10
WordPress.Security.ValidatedSanitizedInput.InputNotValidated

Detected usage of a possibly undefined superglobal array index: $_POST['slug']. Check that the array index exists before using it.

ERROR9
WordPress.Security.EscapeOutput.UnsafePrintingFunction

All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.

WARNING7
WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedFunctionFound

Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "camel2dashed".

ERROR6
WordPress.WP.I18n.NonSingularStringLiteralText

The $text parameter must be a single text string literal. Found: $settings['section_title_text']

WARNING4
WordPress.DB.DirectDatabaseQuery.DirectQuery

Use of a direct database call is discouraged.

WARNING4
WordPress.DB.DirectDatabaseQuery.NoCaching

Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().

WARNING3
WordPress.Security.NonceVerification.Missing

Processing form data without nonce verification.

WARNING3
WordPress.Security.NonceVerification.Recommended

Processing form data without nonce verification.

WARNING3
WordPress.WP.EnqueuedResourceParameters.NotInFooter

In footer ($in_footer) is not set explicitly wp_enqueue_script; It is recommended to load scripts in the footer. Please set this value to `true` to load it in the footer, or explicitly `false` if it should be loaded in the header.

ERROR3
WordPress.WP.I18n.MissingTranslatorsComment

A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.

WARNING2
WordPress.DB.SlowDBQuery.slow_db_query_tax_query

Detected usage of tax_query, possible slow query.

ERROR2
WordPress.DateTime.RestrictedFunctions.date_date

date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.

WARNING2
WordPress.WP.I18n.NoHtmlWrappedStrings

Translatable string should not be wrapped in HTML. Found: '<strong style="color: #03bd24">Documentation</strong>'

WARNING1
PluginCheck.CodeAnalysis.DiscouragedFunctions.load_plugin_textdomainFound

load_plugin_textdomain() has been discouraged since WordPress version 4.6. When your plugin is hosted on WordPress.org, you no longer need to manually include this function call for translations under your plugin slug. WordPress will automatically load the translations for you as needed.

WARNING1
WordPress.DB.SlowDBQuery.slow_db_query_meta_key

Detected usage of meta_key, possible slow query.

ERROR1
license_mismatch

Your plugin has a different license declared in the readme file and plugin header. Please update your readme with a valid GPL license identifier.

ERROR1
outdated_tested_upto_header

Tested up to: 6.9 < 7.0. The "Tested up to" value in your plugin is not set to the current version of WordPress. This means your plugin will not show up in searches, as we require plugins to be compatible and documented as tested up to the most recent version of WordPress.

Latest Snapshot

Findings

684

Errors

227

Warnings

457

Score History

First score snapshot

First scan completed Jun 20, 2026

v3.0.2 · Plugin Check 2.0.0 · Model 2026.06-mvp-static-v2

Jun 20, 2026

v3.0.2

31

Latest

Findings
684
Errors
227
Warnings
457
Plugin Check
2.0.0
Model
2026.06-mvp-static-v2

Related Plugins