Name: XT Visitor Counter
Rating: 4.2
Author: xtrsyz

Issues Details

227 issues found in latest scan

	Code	Message	Location	Category
ERROR	`WordPress.Security.EscapeOutput.UnsafePrintingFunction`	All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.	`134:15`	Security
ERROR	`PluginCheck.Security.DirectDB.UnescapedDBParameter`	Unescaped parameter $date used in $wpdb->get_var("SELECT SUM(`views`) FROM `". XT_VC_TABLE_NAME . "` WHERE `date` = '$date'")\n$date assigned unsafely at line 80:\n $date = date("Y-m-d")	`95:18`	Security
ERROR	`WordPress.DB.PreparedSQL.NotPrepared`	Use placeholders and $wpdb->prepare(); found XT_VC_TABLE_NAME	`95:57`	Security
ERROR	`WordPress.DB.PreparedSQL.NotPrepared`	Use placeholders and $wpdb->prepare(); found XT_VC_TABLE_NAME	`96:62`	Security
ERROR	`WordPress.DB.PreparedSQL.NotPrepared`	Use placeholders and $wpdb->prepare(); found XT_VC_TABLE_NAME	`97:65`	Security
ERROR	`PluginCheck.Security.DirectDB.UnescapedDBParameter`	Unescaped parameter $bataswaktu used in $wpdb->get_var("SELECT COUNT(`views`) FROM `". XT_VC_TABLE_NAME . "` WHERE `online` > '$bataswaktu'")\n$bataswaktu assigned unsafely at line 98:\n $bataswaktu = time() - 300	`99:29`	Security
ERROR	`WordPress.DB.PreparedSQL.NotPrepared`	Use placeholders and $wpdb->prepare(); found XT_VC_TABLE_NAME	`99:70`	Security
ERROR	`WordPress.WP.EnqueuedResources.NonEnqueuedStylesheet`	Stylesheets must be registered/enqueued via wp_enqueue_style()	`125:10`	Performance
ERROR	`WordPress.Security.EscapeOutput.OutputNotEscaped`	All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found 'plugins_url'.	`125:59`	Security
ERROR	`WordPress.Security.EscapeOutput.OutputNotEscaped`	All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$style'.	`132:33`	Security

227 total row(s)

XT Visitor Counter

Security205

Plugin Repository12

General4