84% wpvulnerability

Code Review | WPVulnerability

WordPress plugin WPVulnerability scored84%from 54 tests.

About plugin

  • Plugin page: wpvulnerability
  • Plugin version: 2.2.1
  • PHP compatiblity: 5.6+
  • PHP version: 7.4.16
  • WordPress compatibility: 4.1-6.4
  • WordPress version: 6.3.1
  • First release: May 6, 2022
  • Latest release: Oct 2, 2023
  • Number of updates: 32
  • Update frequency: every 16.1 days
  • Top authors: JavierCasares (62.5%)closetechnology (40.63%)

Code review

54 tests

User reviews

11 reviews

Install metrics

5,000+ active /29,377 total downloads

Benchmarks

Plugin footprint 83% from 16 tests

Installer Passed 1 test

🔺 Critical test (weight: 50) | Verifying that this plugin installs correctly without errors
This plugin's installer ran successfully

Server metrics [RAM: ▲0.25MB] [CPU: ▼0.68ms] Passed 4 tests

This is a short check of server-side resources used by WPVulnerability
This plugin does not affect your website's performance
PageMemory (MB)CPU Time (ms)
Home /3.47 ▲0.0138.59 ▲0.82
Dashboard /wp-admin3.64 ▲0.3448.64 ▲1.87
Posts /wp-admin/edit.php3.76 ▲0.4046.44 ▼3.15
Add New Post /wp-admin/post-new.php6.22 ▲0.3387.22 ▼2.28
Media Library /wp-admin/upload.php3.57 ▲0.3337.61 ▲3.45
WPVulnerability /wp-admin/options-general.php?page=wpvulnerability-options3.5331.85

Server storage [IO: ▲0.37MB] [DB: ▲0.00MB] Passed 3 tests

How much does this plugin use your filesystem and database?
The plugin installed successfully
Filesystem: 26 new files
Database: no new tables, 6 new options
New WordPress options
widget_recent-comments
widget_theysaidso_widget
can_compress_scripts
db_upgraded
widget_recent-posts
theysaidso_admin_options

Browser metrics Passed 4 tests

Checking browser requirements for WPVulnerability
Normal browser usage
PageNodesMemory (MB)Script (ms)Layout (ms)
Home /2,850 ▲8914.37 ▲0.011.69 ▲0.0443.46 ▲5.34
Dashboard /wp-admin2,256 ▲765.52 ▼0.0881.63 ▼3.4040.00 ▼4.31
Posts /wp-admin/edit.php2,106 ▲31.98 ▼0.0534.64 ▼8.4035.99 ▼4.61
Add New Post /wp-admin/post-new.php1,536 ▲723.19 ▼0.12617.49 ▼61.8958.00 ▼0.10
Media Library /wp-admin/upload.php1,406 ▲124.17 ▼0.0596.18 ▲1.5743.27 ▼2.96
WPVulnerability /wp-admin/options-general.php?page=wpvulnerability-options8621.9922.6728.88

Uninstaller [IO: ▲0.00MB] [DB: ▲0.00MB] 75% from 4 tests

🔸 Tests weight: 35 | All plugins must uninstall correctly, removing their source code and extra database tables they might have created
The following items require your attention
  • This plugin did not uninstall successfully, leaving 6 options in the database
    • can_compress_scripts
    • db_upgraded
    • widget_recent-posts
    • widget_recent-comments
    • widget_theysaidso_widget
    • theysaidso_admin_options

Smoke tests 75% from 4 tests

Server-side errors Passed 1 test

🔹 Test weight: 20 | This is a shallow check for server-side errors
Everything seems fine, however this is by no means an exhaustive test

SRP 50% from 2 tests

🔹 Tests weight: 20 | A shallow check of the single-responsibility principle; PHP files should perform no action - including output of placeholder text - and trigger no errors when accessed directly
Please take a closer look at the following
  • 11× PHP files output non-empty strings when accessed directly via GET requests (only 10 are shown):
    • > /wp-content/plugins/wpvulnerability/wpvulnerability-core.php
    • > /wp-content/plugins/wpvulnerability/wpvulnerability.php
    • > /wp-content/plugins/wpvulnerability/wpvulnerability-sitehealth.php
    • > /wp-content/plugins/wpvulnerability/wpvulnerability-admin.php
    • > /wp-content/plugins/wpvulnerability/wpvulnerability-plugins.php
    • > /wp-content/plugins/wpvulnerability/wpvulnerability-cli.php
    • > /wp-content/plugins/wpvulnerability/wpvulnerability-notifications.php
    • > /wp-content/plugins/wpvulnerability/wpvulnerability-process.php
    • > /wp-content/plugins/wpvulnerability/wpvulnerability-themes.php
    • > /wp-content/plugins/wpvulnerability/wpvulnerability-run.php

User-side errors Passed 1 test

🔹 Test weight: 20 | This is just a short smoke test looking for browser issues
Everything seems fine, but this is not an exhaustive test

Optimizations

Plugin configuration Passed 29 tests

readme.txt Passed 16 tests

Don't ignore readme.txt as it is the file that instructs WordPress.org on how to present your plugin to the world
6 plugin tags: theme security, vulnerability, plugin security, wordpress security, security...

wpvulnerability/wpvulnerability.php Passed 13 tests

The main file in "WPVulnerability" v. 2.2.1 serves as a complement to information provided in readme.txt and as the entry point to the plugin
120 characters long description:
Check WordPress core, plugins, and theme vulnerabilities with information from the WordPress Vulnerability Database API.

Code Analysis Passed 3 tests

File types Passed 1 test

🔸 Test weight: 35 | A short glimpse at programming languages used with this plugin and a check that no dangerous files are present
Success! There were no dangerous files found in this plugin1,967 lines of code in 13 files:
LanguageFilesBlank linesComment linesLines of code
PHP125348831,902
CSS11265

PHP code Passed 2 tests

This plugin's cyclomatic complexity and code structure detailed below
No cyclomatic complexity issues were detected for this plugin
Cyclomatic complexity
Average complexity per logical line of code0.48
Average class complexity0.00
▷ Minimum class complexity0.00
▷ Maximum class complexity0.00
Average method complexity0.00
▷ Minimum method complexity0.00
▷ Maximum method complexity0.00
Code structure
Namespaces0
Interfaces0
Traits0
Classes0
▷ Abstract classes00.00%
▷ Concrete classes00.00%
▷ Final classes00.00%
Methods0
▷ Static methods00.00%
▷ Public methods00.00%
▷ Protected methods00.00%
▷ Private methods00.00%
Functions60
▷ Named functions60100.00%
▷ Anonymous functions00.00%
Constants7
▷ Global constants7100.00%
▷ Class constants00.00%
▷ Public constants00.00%

Plugin size Passed 2 tests

Image compression Passed 2 tests

PNG files should be compressed to save space and minimize bandwidth usage
10 PNG files occupy 0.25MB with 0.07MB in potential savings
Potential savings
Compression of 5 random PNG files using pngquant
FileSize - originalSize - compressedSavings
assets/screenshot-2.png62.98KB31.44KB▼ 50.07%
assets/banner-772x250.png10.91KB11.52KB0.00%
assets/icon-158x158.png5.54KB5.78KB0.00%
assets/screenshot-3.png71.26KB35.23KB▼ 50.56%
assets/logo64.png4.43KB2.33KB▼ 47.32%