Accessibility by UserWay

UserWay’s Accessibility Widget creates a simpler and more accessible browsing experience for your users.

v2.6.6UserWayUpdated Added 80k+ installs80% rating
39
Score
22
Errors
35
Warnings
+0
Change

Category Scores

Security0
Repo89
Performance100
Maintainability80

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

57 findings

Maintainability

28

7 issue groups

Security

23

9 issue groups

I18n

4

1 issue group

Repo Compliance

2

2 issue groups

WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.10
Category
Maintainability
Occurrences
10
Severity
warning

Sample message

Use of a direct database call is discouraged.

WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().8
Category
Maintainability
Occurrences
8
Severity
warning

Sample message

Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().

WARNINGSecurityInterpolated SQL is not preparedUse placeholders and $wpdb->prepare(); found interpolated variable $table_name at "SELECT * FROM $table_name LIMIT 0, 1"6
Category
Security
Occurrences
6
Severity
warning

Sample message

Use placeholders and $wpdb->prepare(); found interpolated variable $table_name at "SELECT * FROM $table_name LIMIT 0, 1"

ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;5
Category
Maintainability
Occurrences
5
Severity
error

Sample message

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$account['account_id']'.4
Category
Security
Occurrences
4
Severity
error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$account['account_id']'.

ERRORI18nText Domain MismatchMismatched text domain. Expected 'userway-accessibility-widget' but got 'userway'.4
Category
I18n
Occurrences
4
Severity
error

Sample message

Mismatched text domain. Expected 'userway-accessibility-widget' but got 'userway'.

WARNINGSecurityDatabase parameter is not escapedUnescaped parameter $tableName used in $wpdb->get_row()\n$tableName assigned unsafely at line 23.3
Category
Security
Occurrences
3
Severity
warning

Sample message

Unescaped parameter $tableName used in $wpdb->get_row()\n$tableName assigned unsafely at line 23.

ERRORMaintainabilitydate datedate() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.2
Category
Maintainability
Occurrences
2
Severity
error

Sample message

date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.

ERRORSecurityUnsafe printing functionAll output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.2
Category
Security
Occurrences
2
Severity
error

Sample message

All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.

WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_SERVER['HTTP_HOST']2
Category
Security
Occurrences
2
Severity
warning

Sample message

Detected usage of a non-sanitized input variable: $_SERVER['HTTP_HOST']

Show 9 more
WARNINGSecurityInput is not validated2
Category
Security
Occurrences
2
Severity
warning

Sample message

Detected usage of a possibly undefined superglobal array index: $_SERVER['HTTP_HOST']. Check that the array index exists before using it.

WARNINGSecurityRequest data is not unslashed2
Category
Security
Occurrences
2
Severity
warning

Sample message

$_SERVER['HTTP_HOST'] not unslashed before sanitization. Use wp_unslash() or similar

ERRORMaintainabilityShort PHP open tag found1
Category
Maintainability
Occurrences
1
Severity
error

Sample message

Short PHP opening tag used with echo; expected "<?php echo get_site_url ..." but found "<?= get_site_url ..."

WARNINGMaintainabilityMixed line endings1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

File has mixed line endings; this may cause incorrect results

ERRORSecurityDatabase parameter is not escaped1
Category
Security
Occurrences
1
Severity
error

Sample message

Unescaped parameter $sql used in $wpdb->get_results()\n$sql assigned unsafely at line 33.

ERRORSecuritySQL query is not prepared1
Category
Security
Occurrences
1
Severity
error

Sample message

Use placeholders and $wpdb->prepare(); found $sql

WARNINGMaintainabilityMissing Version1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

Resource version not set in call to wp_register_style(). This means new versions of the style may not always be loaded due to browser caching.

ERRORRepo Complianceoutdated tested upto header1
Category
Repo Compliance
Occurrences
1
Severity
error

Sample message

Tested up to: 6.9 < 7.0. The "Tested up to" value in your plugin is not set to the current version of WordPress. This means your plugin will not show up in searches, as we require plugins to be compatible and documented as tested up to the most recent version of WordPress.

ERRORRepo Complianceplugin header no license1
Category
Repo Compliance
Occurrences
1
Severity
error

Sample message

Missing "License" in Plugin Header. Please update your Plugin Header with a valid GPLv2 (or later) compatible license.

External Connections

Not analyzed yet.

Score History

First score snapshot

v2.6.6

39

Latest

Findings
57
Errors
22
Warnings
35
Check
2.0.0

Relationship Map

Author, categories, issues, domains, and nearby plugins.

29 nodes

Related Plugins