Skip to main content
PluginScorePluginScore
← Back to Leaderboard
xo-security icon

XO Security

XO Security is a plugin to enhance login related security.

v3.10.8
ishitaka
Updated 06.12.2025, 00:29:00
Scanned 06.12.2025, 01:01:02
brute-forceloginmaintenancesecuritytwo-factor
99
Score
0
Errors
3
Warnings
30K
Installs
Security2
Repo1
General0
Performance0
Accessibility0
Top Issues by Category
Issues organized by category, type, and rule family

Top Issues by File
Files with the highest concentration of issues in the latest scan

Issues Details
3 issues found in latest scan
CodeMessageLocationCategory
WARNINGplugin_header_nonexistent_domain_path
The "Domain Path" header in the plugin file must point to an existing folder. Found: "languages"
xo-security.phpPlugin Repo
WARNINGPluginCheck.Security.DirectDB.UnescapedDBParameter
Unescaped parameter $where used in $wpdb->get_var("SELECT count(*) FROM {$wpdb->prefix}xo_security_loginlog {$where}")
inc/class-xo-login-log-list-table.php:237:33Security
WARNINGPluginCheck.Security.DirectDB.UnescapedDBParameter
Unescaped parameter $where used in $wpdb->get_results($wpdb->prepare(\n\t\t\t\t"SELECT id,success,login_time,ip_address,login_type,lang,user_agent,user_name FROM {$wpdb->prefix}xo_security_loginlog {$where} ORDER BY {$orderby} {$order} LIMIT %d, %d;", \t\t\t\t$start,\n\t\t\t\t$per_page\n\t\t\t))\n$orderby assigned unsafely at line 252:\n $orderby = 'login_time'\n$order assigned unsafely at line 255:\n $order = ( isset( $_REQUEST['order'] ) && 'asc' === $_REQUEST['order'] ) ? 'ASC' : 'DESC'\n$start assigned unsafely at line 257:\n $start = ( $this->get_pagenum() - 1 ) * $per_page
inc/class-xo-login-log-list-table.php:259:18Security
3 total row(s)
Scan History
3 scans recorded
06.12.2025, 01:01:0212s
99
0
3
23.11.2025, 11:00:1814s
99
0
3
13.11.2025, 05:27:0314s
98
4
3
3 total row(s)
Score Trend
Performance across 3 scans
Avg: 99
100
75
50
25
0
98.8
13.11
99.3
23.11
99.3
06.12
90-100
80-89
60-79
<60
Report an issue
Tell us if something in this report looks wrong or if you need a deeper audit for XO Security. We read every submission and typically reply within a day.
PluginScore — Plugin Analyzer for WordPress
© 2025 PluginScore.