83% vulnerabilities-check

Code Review | Vulnerabilities Check

WordPress plugin Vulnerabilities Check scored83%from 54 tests.

About plugin

  • Plugin page: vulnerabilities-c...
  • Plugin version: 0.1.1
  • PHP version: 7.4.16
  • WordPress compatibility: 3.3-4.4
  • WordPress version: 6.3.1
  • First release: Nov 18, 2015
  • Latest release: Dec 14, 2015
  • Number of updates: 10
  • Update frequency: every 2.7 days
  • Top authors: sensorete (100%)

Code review

54 tests

User reviews

1 review

Install metrics

10+ active /1,232 total downloads

Benchmarks

Plugin footprint 83% from 16 tests

Installer Passed 1 test

🔺 Critical test (weight: 50) | It is important to correctly install your plugin, without throwing errors or notices
Install script ran successfully

Server metrics [RAM: ▲0.04MB] [CPU: ▼10.33ms] Passed 4 tests

Server-side resources used by Vulnerabilities Check
Server-side resource usage in normal parameters
PageMemory (MB)CPU Time (ms)
Home /3.51 ▲0.0535.03 ▼4.81
Dashboard /wp-admin3.36 ▲0.0245.68 ▼13.64
Posts /wp-admin/edit.php3.41 ▲0.0645.09 ▼2.36
Add New Post /wp-admin/post-new.php5.94 ▲0.0687.52 ▼20.50
Media Library /wp-admin/upload.php3.28 ▲0.0532.46 ▼0.86

Server storage [IO: ▲0.07MB] [DB: ▲0.00MB] Passed 3 tests

Filesystem and database footprint
This plugin installed successfully
Filesystem: 7 new files
Database: no new tables, 6 new options
New WordPress options
db_upgraded
widget_recent-comments
widget_theysaidso_widget
theysaidso_admin_options
widget_recent-posts
can_compress_scripts

Browser metrics Passed 4 tests

An overview of browser requirements for Vulnerabilities Check
This plugin renders optimally with no browser resource issues detected
PageNodesMemory (MB)Script (ms)Layout (ms)
Home /2,816 ▲7013.28 ▼1.101.62 ▼0.1838.92 ▲0.36
Dashboard /wp-admin2,219 ▲284.83 ▼0.07110.27 ▲9.5542.16 ▲0.46
Posts /wp-admin/edit.php2,105 ▲162.05 ▲0.0440.77 ▲1.7237.00 ▼0.46
Add New Post /wp-admin/post-new.php1,559 ▲1718.24 ▼0.04591.59 ▼53.8473.76 ▲28.12
Media Library /wp-admin/upload.php1,407 ▲194.15 ▼0.0696.14 ▼11.7141.18 ▼11.91

Uninstaller [IO: ▲0.00MB] [DB: ▲0.00MB] 75% from 4 tests

🔸 Tests weight: 35 | Verifying that this plugin uninstalls completely without leaving any traces
Please fix the following items
  • This plugin does not fully uninstall, leaving 6 options in the database
    • can_compress_scripts
    • db_upgraded
    • theysaidso_admin_options
    • widget_recent-posts
    • widget_recent-comments
    • widget_theysaidso_widget

Smoke tests 75% from 4 tests

Server-side errors Passed 1 test

🔹 Test weight: 20 | A shallow check that no server-side errors were triggered
Good news, no errors were detected

SRP 50% from 2 tests

🔹 Tests weight: 20 | It is important to ensure that your PHP files perform no action when accessed directly, respecting the single-responsibility principle
The following issues need your attention
  • 1× GET requests to PHP files have triggered server-side errors or warnings:
    • > PHP Fatal error
      Uncaught Error: Call to undefined function add_action() in wp-content/plugins/vulnerabilities-check/index.php:18

User-side errors Passed 1 test

🔹 Test weight: 20 | This is a shallow check for browser errors
Everything seems fine, but this is not an exhaustive test

Optimizations

Plugin configuration 87% from 29 tests

readme.txt 88% from 16 tests

The readme.txt file is undoubtedly the most important file in your plugin, preparing it for public listing on WordPress.org
Please fix the following attributes:
  • Screenshots: Add images for these screenshots: #1 (List of wordpress vulnerability), #2 (List of plugins vulnerability), #3 (List of themes vulnerability), #4 (Page for assistance request)
  • Donate link: Please fix this invalid URI: ""
The official readme.txt might help

vulnerabilities-check/index.php 85% from 13 tests

The main PHP file in "Vulnerabilities Check" ver. 0.1.1 adds more information about the plugin and also serves as the entry point for this plugin
Please take the time to fix the following:
  • Main file name: Even though not officially enforced, the main plugin file should be the same as the plugin slug ("vulnerabilities-check.php" instead of "index.php")
  • Text Domain: The text domain is optional since WordPress version 4.6; if you do specify it, it must be the same as the plugin slug

Code Analysis Passed 3 tests

File types Passed 1 test

🔸 Test weight: 35 | Executable files are considered dangerous and should not be included with any WordPress plugin
No dangerous file extensions were detected275 lines of code in 3 files:
LanguageFilesBlank linesComment linesLines of code
PHP12119244
CSS20431

PHP code Passed 2 tests

A short review of cyclomatic complexity and code structure
Great job! No cyclomatic complexity issues were detected in this plugin
Cyclomatic complexity
Average complexity per logical line of code0.29
Average class complexity0.00
▷ Minimum class complexity0.00
▷ Maximum class complexity0.00
Average method complexity0.00
▷ Minimum method complexity0.00
▷ Maximum method complexity0.00
Code structure
Namespaces0
Interfaces0
Traits0
Classes0
▷ Abstract classes00.00%
▷ Concrete classes00.00%
▷ Final classes00.00%
Methods0
▷ Static methods00.00%
▷ Public methods00.00%
▷ Protected methods00.00%
▷ Private methods00.00%
Functions10
▷ Named functions10100.00%
▷ Anonymous functions00.00%
Constants1
▷ Global constants1100.00%
▷ Class constants00.00%
▷ Public constants00.00%

Plugin size Passed 2 tests

Image compression Passed 2 tests

PNG files should be compressed to save space and minimize bandwidth usage
3 PNG files occupy 0.03MB with 0.02MB in potential savings
Potential savings
Compression of 3 random PNG files using pngquant
FileSize - originalSize - compressedSavings
imgs/ko.png14.32KB5.80KB▼ 59.49%
imgs/ok.png13.11KB5.41KB▼ 58.71%
imgs/qm.png2.92KB1.74KB▼ 40.50%