Shortcode to show any current, past, and future date or time. Display this, previous, or next year, month, day, etc.
Category Scores
Top Issues by Category
security54
i18n32
maintainability14
Issues Details
102 issues found in latest scan
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$del_set_id'.
Mismatched text domain. Expected 'wp-date-and-time-shortcode' but got 'denra-plugins'.
date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.
Processing form data without nonce verification.
The plugin name includes a restricted term. Your chosen plugin name - "WP Date and Time Shortcode" - contains the restricted term "wp" which cannot be used at all in your plugin name.
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$plugin_class".
Detected usage of a non-sanitized input variable: $_GET['page']
$_GET['page'] not unslashed before sanitization. Use wp_unslash() or similar
A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.
The $domain parameter must be a single text string literal. Found: $this->text_domain
The $text parameter must be a single text string literal. Found: $this->data['Name']
The "Domain Path" header in the plugin file must start with forward slash.
Missing "License" in Plugin Header. Please update your Plugin Header with a valid GPLv2 (or later) compatible license.
The "Text Domain" header in the plugin file does not match the slug. Found "denra-wp-dt", expected "wp-date-and-time-shortcode".
Function "wp_timezone_string()" requires WordPress 5.3.0, but your plugin minimum supported version is WordPress 4.0.0.
| Code | Type | Message | Count |
|---|---|---|---|
| WordPress.Security.EscapeOutput.OutputNotEscaped | ERROR | All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$del_set_id'. | 49 |
| WordPress.WP.I18n.TextDomainMismatch | ERROR | Mismatched text domain. Expected 'wp-date-and-time-shortcode' but got 'denra-plugins'. | 28 |
| WordPress.DateTime.RestrictedFunctions.date_date | ERROR | date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead. | 8 |
| WordPress.Security.NonceVerification.Recommended | WARNING | Processing form data without nonce verification. | 3 |
| trademarked_term | WARNING | The plugin name includes a restricted term. Your chosen plugin name - "WP Date and Time Shortcode" - contains the restricted term "wp" which cannot be used at all in your plugin name. | 3 |
| WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedVariableFound | WARNING | Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$plugin_class". | 2 |
| WordPress.Security.ValidatedSanitizedInput.InputNotSanitized | WARNING | Detected usage of a non-sanitized input variable: $_GET['page'] | 1 |
| WordPress.Security.ValidatedSanitizedInput.MissingUnslash | WARNING | $_GET['page'] not unslashed before sanitization. Use wp_unslash() or similar | 1 |
| WordPress.WP.I18n.MissingTranslatorsComment | ERROR | A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders. | 1 |
| WordPress.WP.I18n.NonSingularStringLiteralDomain | ERROR | The $domain parameter must be a single text string literal. Found: $this->text_domain | 1 |
| WordPress.WP.I18n.NonSingularStringLiteralText | ERROR | The $text parameter must be a single text string literal. Found: $this->data['Name'] | 1 |
| plugin_header_invalid_domain_path | WARNING | The "Domain Path" header in the plugin file must start with forward slash. | 1 |
| plugin_header_no_license | ERROR | Missing "License" in Plugin Header. Please update your Plugin Header with a valid GPLv2 (or later) compatible license. | 1 |
| textdomain_mismatch | WARNING | The "Text Domain" header in the plugin file does not match the slug. Found "denra-wp-dt", expected "wp-date-and-time-shortcode". | 1 |
| wp_function_not_compatible_with_requires_wp | ERROR | Function "wp_timezone_string()" requires WordPress 5.3.0, but your plugin minimum supported version is WordPress 4.0.0. | 1 |
Latest Snapshot
Findings
102
Errors
90
Warnings
12
Score History
First score snapshot
First scan completed
v2.7.1 · Plugin Check 2.0.0 · Model 2026.06-mvp-static-v2
v2.7.1
40
Latest
- Findings
- 102
- Errors
- 90
- Warnings
- 12
- Plugin Check
- 2.0.0
- Model
- 2026.06-mvp-static-v2
| Scan | Score | Findings | Errors | Warnings | Plugin | Plugin Check | Model |
|---|---|---|---|---|---|---|---|
| Latest | 40 | 102 | 90 | 12 | v2.7.1 | 2.0.0 | 2026.06-mvp-static-v2 |