SchedulePress – Auto Post & Publish, Auto Social Share, Schedule Posts with Editorial Calendar & Missed Schedule Post Publisher

Automate your WordPress content scheduling with a visual calendar, auto/manual schedulers, missed‑post handler, social sharing options & templates.

v5.3.0WPDeveloperUpdated 2026-05-17Added Mar 10, 201310k+ installs92% rating75% support resolved
24
Score
296
Errors
245
Warnings
+0
Change

Category Scores

Security0
Repo94
Performance100
Maintainability0

Top Issues by Category

security327
maintainability194

Issues Details

541 issues found in latest scan

ERROR96
WordPress.Security.EscapeOutput.OutputNotEscaped

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"<label><b>Profile Name:</b> {$profile->name}</label>"'.

WARNING82
WordPress.Security.ValidatedSanitizedInput.MissingUnslash

$_GET[&#039;_wpnonce&#039;] not unslashed before sanitization. Use wp_unslash() or similar

ERROR71
wp_function_not_compatible_with_requires_wp

Function "get_the_post_thumbnail_url()" requires WordPress 4.4.0, but your plugin minimum supported version is WordPress 4.0.0.

ERROR52
WordPress.Security.EscapeOutput.ExceptionNotEscaped

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"$name not found on class"'.

WARNING38
WordPress.Security.ValidatedSanitizedInput.InputNotSanitized

Detected usage of a non-sanitized input variable: $_GET[&#039;_wpnonce&#039;]

WARNING31
WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedConstantFound

Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: &quot;INTL_IDNA_VARIANT_2003&quot;.

WARNING30
WordPress.Security.NonceVerification.Recommended

Processing form data without nonce verification.

ERROR22
WordPress.WP.AlternativeFunctions.curl_curl_setopt

Using cURL functions is highly discouraged. Use wp_remote_get() instead.

ERROR15
missing_direct_file_access_protection

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

WARNING13
WordPress.Security.NonceVerification.Missing

Processing form data without nonce verification.

WARNING12
WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedFunctionFound

Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: &quot;idn_to_ascii&quot;.

ERROR10
WordPress.DateTime.RestrictedFunctions.date_date

date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.

WARNING8
WordPress.Security.ValidatedSanitizedInput.InputNotValidated

Detected usage of a possibly undefined superglobal array index: $_GET[&#039;nonce&#039;]. Check that the array index exists before using it.

ERROR8
WordPress.WP.AlternativeFunctions.rand_rand

rand() is discouraged. Use the far less predictable wp_rand() instead.

WARNING5
WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedHooknameFound

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: &quot;schedulepress_after_free_settings_save&quot;.

WARNING4
WordPress.DB.PreparedSQL.InterpolatedNotPrepared

Use placeholders and $wpdb-&gt;prepare(); found interpolated variable $post_type_placeholders at AND $wpdb-&gt;posts.post_type IN ($post_type_placeholders)\n

WARNING3
WordPress.DB.DirectDatabaseQuery.DirectQuery

Use of a direct database call is discouraged.

WARNING3
WordPress.DB.DirectDatabaseQuery.NoCaching

Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().

WARNING3
WordPress.DB.SlowDBQuery.slow_db_query_tax_query

Detected usage of tax_query, possible slow query.

ERROR3
WordPress.WP.AlternativeFunctions.curl_curl_close

Using cURL functions is highly discouraged. Use wp_remote_get() instead.

ERROR3
WordPress.WP.AlternativeFunctions.curl_curl_exec

Using cURL functions is highly discouraged. Use wp_remote_get() instead.

ERROR3
WordPress.WP.AlternativeFunctions.curl_curl_init

Using cURL functions is highly discouraged. Use wp_remote_get() instead.

ERROR2
PluginCheck.Security.DirectDB.UnescapedDBParameter

Unescaped parameter $post_type used in $wpdb->get_results()\n$post_type used without escaping.

WARNING2
WordPress.NamingConventions.PrefixAllGlobals.DynamicHooknameFound

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: &quot;$this-&gt;do_notice_action&quot;.

ERROR2
WordPress.Security.EscapeOutput.UnsafePrintingFunction

All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.

Latest Snapshot

Findings

541

Errors

296

Warnings

245

Score History

First score snapshot

First scan completed Jun 20, 2026

v5.3.0 · Plugin Check 2.0.0 · Model 2026.06-mvp-static-v2

Jun 20, 2026

v5.3.0

24

Latest

Findings
541
Errors
296
Warnings
245
Plugin Check
2.0.0
Model
2026.06-mvp-static-v2

Related Plugins