84% vulnerable-plugin-checker

Code Review | Vulnerable Plugin Checker

WordPress plugin Vulnerable Plugin Checker scored84%from 54 tests.

About plugin

  • Plugin page: vulnerable-plugin...
  • Plugin version: 0.3.12
  • PHP version: 7.4.16
  • WordPress compatibility: 4.0-4.9
  • WordPress version: 6.3.1
  • First release: Apr 7, 2016
  • Latest release: Nov 16, 2017
  • Number of updates: 61
  • Update frequency: every 9.7 days
  • Top authors: stormrockwell (100%)

Code review

54 tests

User reviews

8 reviews

Install metrics

400+ active /7,436 total downloads

Benchmarks

Plugin footprint 83% from 16 tests

Installer Passed 1 test

🔺 Critical test (weight: 50) | The install procedure must perform silently
Installer ran successfully

Server metrics [RAM: ▲0.07MB] [CPU: ▲1.89ms] Passed 4 tests

A check of server-side resources used by Vulnerable Plugin Checker
This plugin has minimal impact on server resources
PageMemory (MB)CPU Time (ms)
Home /3.53 ▲0.0738.12 ▼7.26
Dashboard /wp-admin3.37 ▲0.0753.14 ▲3.62
Posts /wp-admin/edit.php3.49 ▲0.1353.24 ▲7.15
Add New Post /wp-admin/post-new.php5.95 ▲0.07101.85 ▲9.88
Media Library /wp-admin/upload.php3.30 ▲0.0740.01 ▲4.04
VPC Settings /wp-admin/options-general.php?page=vpc-settings3.2634.40

Server storage [IO: ▲0.04MB] [DB: ▲0.00MB] Passed 3 tests

A short overview of filesystem and database impact
No storage issues were detected
Filesystem: 5 new files
Database: no new tables, 8 new options
New WordPress options
can_compress_scripts
vpc-plugin-data
theysaidso_admin_options
vpc_allow_emails
widget_theysaidso_widget
widget_recent-comments
widget_recent-posts
db_upgraded

Browser metrics Passed 4 tests

Vulnerable Plugin Checker: an overview of browser usage
Minimal impact on browser resources
PageNodesMemory (MB)Script (ms)Layout (ms)
Home /2,793 ▲3214.51 ▲0.561.65 ▼0.3242.63 ▼2.72
Dashboard /wp-admin2,199 ▲195.52 ▼0.0581.28 ▼11.7238.07 ▼4.08
Posts /wp-admin/edit.php2,104 ▲42.01 ▼0.0039.42 ▲0.2335.88 ▼2.65
Add New Post /wp-admin/post-new.php1,529 ▲323.04 ▲0.08604.18 ▼83.6350.11 ▼18.80
Media Library /wp-admin/upload.php1,401 ▲14.19 ▲0.0397.25 ▼13.0046.66 ▼0.30
VPC Settings /wp-admin/options-general.php?page=vpc-settings7992.0023.6728.07

Uninstaller [IO: ▲0.00MB] [DB: ▲0.00MB] 75% from 4 tests

🔸 Tests weight: 35 | Checking the uninstaller removed all traces of the plugin
These items require your attention
  • Zombie WordPress options were found after uninstall: 7 options
    • theysaidso_admin_options
    • can_compress_scripts
    • db_upgraded
    • vpc_allow_emails
    • widget_theysaidso_widget
    • widget_recent-posts
    • widget_recent-comments

Smoke tests 75% from 4 tests

Server-side errors Passed 1 test

🔹 Test weight: 20 | A smoke test targeting server-side errors
Even though everything seems fine, this is not an exhaustive test

SRP 50% from 2 tests

🔹 Tests weight: 20 | A shallow check of the single-responsibility principle; PHP files should perform no action - including output of placeholder text - and trigger no errors when accessed directly
Please take a closer look at the following
  • 1× PHP files trigger server-side errors or warnings when accessed directly:
    • > PHP Fatal error
      Uncaught Error: Call to undefined function __() in wp-content/plugins/vulnerable-plugin-checker/vulnerable-plugin-checker.php:35

User-side errors Passed 1 test

🔹 Test weight: 20 | This is a smoke test targeting browser errors/issues
Everything seems fine on the user side

Optimizations

Plugin configuration Passed 29 tests

readme.txt Passed 16 tests

The readme.txt file is undoubtedly the most important file in your plugin, preparing it for public listing on WordPress.org
9 plugin tags: plugin, wpvulndb, plugins, wpscan, checker...

vulnerable-plugin-checker/vulnerable-plugin-checker.php Passed 13 tests

The main file in "Vulnerable Plugin Checker" v. 0.3.12 serves as a complement to information provided in readme.txt and as the entry point to the plugin
123 characters long description:
Automatically checks installed plugins for known vulnerabilities utilizing WPScan's API and provides optional email alerts.

Code Analysis Passed 3 tests

File types Passed 1 test

🔸 Test weight: 35 | An overview of files in this plugin; executable files are not allowed
There were no executable files found in this plugin254 lines of code in 2 files:
LanguageFilesBlank linesComment linesLines of code
PHP2126121254

PHP code Passed 2 tests

An short overview of logical lines of code, cyclomatic complexity, and other code metrics
Great job! No cyclomatic complexity issues were detected in this plugin
Cyclomatic complexity
Average complexity per logical line of code0.29
Average class complexity42.00
▷ Minimum class complexity42.00
▷ Maximum class complexity42.00
Average method complexity3.41
▷ Minimum method complexity1.00
▷ Maximum method complexity9.00
Code structure
Namespaces0
Interfaces0
Traits0
Classes1
▷ Abstract classes00.00%
▷ Concrete classes1100.00%
▷ Final classes00.00%
Methods17
▷ Static methods00.00%
▷ Public methods17100.00%
▷ Protected methods00.00%
▷ Private methods00.00%
Functions0
▷ Named functions00.00%
▷ Anonymous functions00.00%
Constants0
▷ Global constants00.00%
▷ Class constants00.00%
▷ Public constants00.00%

Plugin size Passed 2 tests

Image compression Passed 2 tests

All PNG images should be compressed to minimize bandwidth usage for end users
There were not PNG files found in your plugin