ๅคๆ่ชชๆ
Plugin Check ๆฏๆธฌ่ฉฆไฝ ๆ้็ผ็ๅคๆๆฏๅฆ็ฌฆๅ WordPress.org ๅคๆ็ฎ้้ๆฑๆจๆบ็ๅทฅๅ ทใไฝฟ็จ้ๅๅคๆ๏ผไฝ ไพฟ่ฝๅท่กๅคงๅคๆธ็จๆผๅ จๆฐๆไบคๅคๆ็ๆชขๆฅๅทฅไฝ๏ผไธฆๆชขๆฅไฝ ๆ้็ผ็ๅคๆๆฏๅฆ็ฌฆๅ็ธ้้ๆฑใ
ๆญคๅค๏ผ้ๅๅทฅๅ ทๆไพๆ้็ผๆไฝณๅๆณๆจ็คบ้่ฆๆ็ผ็ๅ้ก็้ ็ฎ๏ผไพๅฆๅ้ๅๅฝๅผ็ๆญฃ็ขบไฝฟ็จๆนๅผๅ็ก้็คๅทฅๅ ทใๆ่ฝๅๅฎๅ จๆงๆไฝณๅๆณ็ญๅบๆฌ้ๆฑ้ฝๆ้ฒ่กๆชขๆฅใ
้ไบ้ ็ฎๅฏไฝฟ็จ WordPress ็ฎก็ๅพๅฐไฝฟ็จ่ ไป้ขๆ WP-CLI ้ฒ่กๆชขๆฅ๏ผ
- ๅฆๆ่ฆๅจ WordPress ็ฎก็ๅพๅฐๆชขๆฅๅคๆ๏ผ่ซๅๅพ [ๅทฅๅ ท]→[Plugin Check] ้ธๅฎ๏ผๅฟ ้ ๅ ทๅๅจ็ถฒ็ซไธ็ฎก็ๅคๆ็ๆฌ้๏ผๆ่ฝๅญๅ้ๅ็ซ้ขใ
- ๅฆๆ่ฆไฝฟ็จ WP-CLI ๆชขๆฅๅคๆ๏ผ่ซไฝฟ็จ
wp plugin checkๅฝไปคใ่ไพไพ่ชช๏ผๅท่กwp plugin check hello.phpไพฟ่ฝๆชขๆฅ Hello Dolly ๅคๆใ- ่ซๆณจๆ๏ผๅจ้ ่จญ็็ๆณไธไฝฟ็จ WP-CLI๏ผๅ
่ฝๅท่ก้ๆ
ๆชขๆฅ๏ผ็บไบๅๆ็ดๅ
ฅๅท่ก้ๆฎตๆชขๆฅ๏ผ็ฎๅ็ๅ ๆๆชๆฝๅฟ
้ ไฝฟ็จ WP-CLI ็
--requireๅผๆธ๏ผไปฅไพฟๅจ่ผๅ ฅ WordPress ๅๆๅ่ผๅ ฅๅคๆๆชขๆฅ็ฎ้ไธญ็cli.phpๆชๆกใๅฝไปค็ฏไพ๏ผwp plugin check hello.php --require=./wp-content/plugins/plugin-check/cli.php - ไฝ ๅฏไปฅไฝฟ็จไปปๆ่ทฏๅพๆ็ถฒๅไปฅๆชขๆฅๅคๆใ่ไพไพ่ชช๏ผไฝฟ็จ็ถฒๅๆชขๆฅๅคๆ๏ผ
wp plugin check https://example.com/plugin.zipๆไฝฟ็จ่ทฏๅพๆชขๆฅๅคๆ๏ผwp plugin check /path/to/plugin
- ่ซๆณจๆ๏ผๅจ้ ่จญ็็ๆณไธไฝฟ็จ WP-CLI๏ผๅ
่ฝๅท่ก้ๆ
ๆชขๆฅ๏ผ็บไบๅๆ็ดๅ
ฅๅท่ก้ๆฎตๆชขๆฅ๏ผ็ฎๅ็ๅ ๆๆชๆฝๅฟ
้ ไฝฟ็จ WP-CLI ็
ๆชขๆฅ้ ็ฎๅๅ็บๅนพๅ้กๅ๏ผไฝฟ็จ่ ๅฏไปฅไพๆ้ๆฑ็บๅคๆ่ช่จ่ฆ้ฒ่กๆชขๆฅ็้กๅใ
่ซๆณจๆ๏ผ้ๅๅคๆไธๆๅไปฃไบบๅทฅๅฏฉ้ฑๆต็จ๏ผไฝๅฏไปฅๅๅฉ้็ผ่ ๅ ๅฟซๅจ WordPress.org ๅคๆ็ฎ้ๆ ธๅไธๆถ็ๆต็จ๏ผไธฆๅๅฉ้็ผ่ ้ฟๅ ๆไบๅธธ่ฆ้ฏ่ชคใ
ๅณไฝฟไธฆๆฒๆ่ฆๅฐๅคๆไบค็ฑ WordPress.org ๅคๆ็ฎ้ไปฃ็ฎก๏ผไธๆจฃๆจ่ฆ้็ผ่ ไฝฟ็จ Plugin Check๏ผไปฅไพฟ่ฎๅคๆๆ้ตๅพช WordPress ๅคๆ็ๅบๆฌ่ฆๆฑๅๆไฝณๅๆณใ
ๅคๆๅฝๅๅทฅๅ ท
Plugin Check ๅ ๅ ฅไปฅ AI ไบบๅทฅๆบๆ ง็บๅฐๅ็ๅคๆๅฝๅๅทฅๅ ท (่ซๅๅพ [ๅทฅๅ ท]→[Plugin Check ๅฝๅๅทฅๅ ท])๏ผ้ๅๅทฅๅ ทๅฏไปฅๅๅฉ้็ผ่ ๅจๆไบคๅคๆๅ่ฉไผฐๅคๆๅ็จฑ๏ผไธฆๆชขๆฅไปฅไธ้ ็ฎ๏ผ
- ๅ็จฑๆฏๅฆ่ WordPress.org ๅคๆ็ฎ้ไธญ็พๆ็ๅคๆ็ธไผผ
- ่็ฅๅๅ็็ๆฝๅจๅๆจ่ก็ช
- ๆฏๅฆ้ตๅฎ WordPress ๅคๆ็ๅฝๅ่ฆ็ฏ
- ้ๆผๆฎ้ๆ้ๅบฆๅปฃๆณ็ๅฝๅๅ้ก
The Plugin Namer provides instant feedback with actionable suggestions, helping you choose a clear, unique, and policy-compliant name that stands out in the plugin directory. This feature requires WordPress 7.0+ and configured AI connectors.
ๆณจๆไบ้ ๏ผๅคๆๅฝๅๅทฅๅ ทๅ ๆไพๅ่ๆๅผ๏ผๅคๆ็ๅปบ่ญฐไธฆไธไปฃ่กจๅฏฉ้ฑๆ็ต็ตๆใๅ จ้จๅคๆๅ็จฑๅ้็ถ็ฑ WordPress.org ๅคๆๅ้็ๅฏฉ้ฑ่ ๅๅบๆๅพๅฏฉ้ฑๅๆ ธๅใ
Checks reviewed by AI
When AI analysis is enabled, Plugin Check can review selected results to help identify likely false positives. Related issues are grouped and analyzed with prompts tailored to the type of check, using the surrounding code as context. The AI review does not remove or change the original results, but adds an additional summary that highlights which findings may need human review before taking action.
ๅฎ่ฃๆนๅผ
่ชๅๅฎ่ฃ
- ๅๅพ [ๅคๆ]→[ๅฎ่ฃๅคๆ]ใ
- ๆๅฐใPlugin Checkใใ
- ๅฎ่ฃไธฆๅ็จ Plugin Check ๅคๆใ
ๆๅๅฎ่ฃ
- ๅฐๅคๆๅฎ่ฃๅฃ็ธฎๆช่งฃๅฃ็ธฎๆๅพ็
plugin-check่ณๆๅคพไธๅณ่ณ็ถฒ็ซ็/wp-content/plugins/็ฎ้ไธญใ - ๅๅพ [ๅคๆ] ้ ้ขใ
- ๅ็จ Plugin Check ๅคๆใ
ๅธธ่ฆๅ้ก้
-
ๅจไฝ่ๅฏไปฅ็บ้ๅๅฐๆกๅๅบ่ฒข็ป๏ผ
-
้ๅๅคๆ็ๅ จ้จ้็ผๅทฅไฝๅๅจ GitHub ๅญๆพๅบซไธ่็๏ผๅฆๆไปปไฝๅ้กๆๆๅ่ฆๆฑ๏ผ่ซ็ผไฝๅจๅคๆ็ GitHub ๅญๆพๅบซใ
-
ๅฆๆ้ๅๅคๆ็ๆญฃ็ขบ็ตๆๅปๅจๅ ฑๅไธญๅ็บใ้ฏ่ชคใๆใ่ญฆๅใ๏ผ่ฉฒๅฆไฝ่็๏ผ
-
ๆๅ้็ผ้ๅๅคๆๆๅทฒ็ถๆฅตๅ้ฟๅ ้็จฎ่ชคๅค็ๆณ๏ผๅฆๆไฝ ็ผ็พ้็จฎๅ้ก๏ผ่ซๅจๅคๆ็ GitHub ๅญๆพๅบซไธญๆๅบใๅฐๆผๆไบ่ชคๅค็ๆณ๏ผไพๅฆ PHPCodeSniffer ๅตๆธฌๅฐ็่ชคๅค็ๆณ๏ผ้็ผ่ ๅฏไปฅ็บ็จๅผ็ขผ้ฒ่ก่จป่งฃ๏ผไปฅๅฟฝ็ฅ็นๅฎ่ก่็จๅผ็ขผๆ็ข็็็นๅฎ้ฏ่ชคใ
-
็บไป้บผ้ๅๅคๆๆๅฐๆไบ้ ็ฎๆจ็คบ็บใไธ่ฏใ๏ผ
-
้ๅๅคๆไธฆๆฒๆๅฐไปปไฝ้ ็ฎๆจ็คบ็บใไธ่ฏใใPlugin Check ๆจๅจๆ็บๆธฌ่ฉฆๅคๆ็ไธ็จฎไปๅจๆ็บๆน้ฒ็ๆนๅผ๏ผๆธฌ่ฉฆๅคๆๆฏๅฆ็ฌฆๅๅคๆๅฏฉ้ฑ่ฆ็ฏ๏ผไพๅฆๆฏๅฆ็ฌฆๅ็ก้็คๅทฅๅ ทใๆ่ฝใๅฎๅ จๆงๅๅ ถไปๆน้ข็้็ผๆไฝณๅๆณ๏ผไฝไธฆ้ๅ จ้จๅคๆ้ฝๅฟ ้ ้ตๅฎ้ไบ่ฆ็ฏใๆชขๆฅๅทฅๅ ท็็ฎ็ๅจๆผ็ขบไฟไธๅณ่ณ WordPress.org ๅคๆ้ไธญๅญๆพๅบซ็ๅคๆ็ฌฆๅ WordPress ๅคๆ็ๆๆฐๆจๆบ๏ผไธฆๅฏไปฅๅจๅ็จฎ้กๅ็็ถฒ็ซไธๅท่กใ
่จฑๅค็ถฒ็ซๆไฝฟ็จ่ช่จๅคๆ๏ผ้ๅฎๅ จๆฒๆๅ้ก๏ผไฝๆฏไฝ็บๅ ฌ้ใไธๆไพๅคง้ไธๅ้กๅ็ถฒ็ซไฝฟ็จ็ๅคๆ๏ผๅฟ ้ ๅ ทๅๆไฝ็จๅบฆ็ๅ่ฝๆง๏ผไปฅ็ขบไฟๅจไธๅ็็ฐๅขไธญๅฏไปฅ้ ๅฉๅท่กใๅคๆๅฏฉ้ฑ่ฆ็ฏไพฟๆฏๅ ๆญค่็ใ
้ๅๅคๆๆชขๆฅ็จๅผไปๆช่ปๅฎๅ๏ผไนๅฏ่ฝๆฐธ้ ็กๆณๅฎๅ๏ผๅ ็บๅฎๅชๆฏๅๅฉๅคๆ้็ผ่ ๆไปปไฝๆณ่ฆ่ฎๅ ถๅคๆๆดๅผทๅคง็ไบบ็ๅทฅๅ ทใๆไบค่ณ WordPress.org ็ๅ จ้จๅคๆ้ฝๅฟ ้ ไบค็ฑๅฐๅฎถๅ้้ฒ่กไบบๅทฅๅฏฉ้ฑ๏ผ่ชๅๅๅคๆๆชขๆฅ็จๅผๅชไปฃ่กจๅฎๆฏๅฏฆ็จ็ๅทฅๅ ท๏ผ่้็ตๅฐ็ๆธฌ้็ณป็ตฑใ
-
ๅคๆๆฏๅฆ้่ฆ้้ๅ จ้จๆชขๆฅ้ ็ฎ๏ผๆ่ฝๅจ WordPress.org ๅคๆ็ฎ้ๆ ธๅไธๆถ๏ผ
-
ๅฆๆๅคๆ่ฆๅจ WordPress.org ๅคๆ็ฎ้ๆ ธๅไธๆถ๏ผๅฟ ้ ่ฆ้้ [ๅคๆๅญๆพๅบซ] ้กๅ็ๅ จ้จๆชขๆฅ้ ็ฎใๅ ถไปๆชขๆฅ้ ็ฎ็บ้กๅคๆชขๆฅ้ ็ฎ๏ผ่ฆๆ ๆณๅฏไปฅไธ้ๅ จ้จ้้ใ
็ก่ซๅฆไฝ๏ผ่ฝ้้้ๅๅทฅๅ ทๆไพ็ๆชขๆฅ้ ็ฎ๏ผๆๅฉๆผ้ ๅฉๅฎๆๅฏฉ้ฑ็จๅบ๏ผไฝไธฆไธไฟ่ญๅคๆ่ฝๅจ WordPress.org ๅคๆ็ฎ้ๆ ธๅไธๆถใ
ไฝฟ็จ่ ่ฉ่ซ
2026 ๅนด 5 ๆ 16 ๆฅ
Plugin Check has been really helpful for improving my plugin before publishing updates on WordPress.org.
The new option to download the issues as an Excel file is very useful and makes it much easier to review and fix everything step by step.
Thanks to the team for this great tool. I hope future updates add even easier options to make the workflow faster and smoother.
2026 ๅนด 3 ๆ 19 ๆฅ
1 ๅ็่จ
The plugin review started with false positives and was not accurate.
2026 ๅนด 2 ๆ 3 ๆฅ
Useful tool for catching issues early. If you’re serious about plugin development, this is a must-have.
2026 ๅนด 1 ๆ 29 ๆฅ
Great tool to help finding issues with your plugin. The only thing I would like to see as a button that allows you to ignore certain messages, or mark them as fixed. So if you re-scan, it is easier to see, what still needs to be done. Also helpful would be a better indicator how serious a issue is. I know there are Errors and Warnings, but maybe with a score? And “Error” in red and “Warning” in orange for better accessibility.
2026 ๅนด 1 ๆ 15 ๆฅ
This plugin helped me identify areas of my plugin that I thought I had taken care of. When developing my first plugin. I learned a lot through the feedback given and was able to re-run and eventually remove of all errors.
On a side note, what I did discover was that a lot of the warnings were general and some were not really applicable to my plugin. It took time and research to work this out so don’t freak out if you get a heap of feedback from the plugin. Try to filter down to the errors, get them sorted and then move onto the warnings and fix what you can where applicable.Cheers.
2025 ๅนด 12 ๆ 5 ๆฅ
1 ๅ็่จ
By it’s nature this is going to flag false positives – potential issues that you’ve dealt with in different ways, or issues that don’t necessarily apply to your particular case – and it does. But it’s a really useful tool to run a quick check and uncover little omissions or improvements to be made.
ๅ่่ ๅ้็ผ่
ไปฅไธไบบๅกๅ่ไบ้ๆบ่ป้ซใPlugin Check (PCP)ใ็้็ผ็ธ้ๅทฅไฝใ
ๅ่่
ใPlugin Check (PCP)ใๅคๆ็ฎๅๅทฒๆ 15 ๅๆฌๅฐๅ่ช่จ็ๆฌใ ๆ่ฌๅ จ้จ่ญฏ่ ็บ้ๅๅคๆๅๅบ็่ฒข็ปใ
ๅฐใPlugin Check (PCP)ใๅคๆๆฌๅฐๅ็บๅฐ็ฃ็น้ซไธญๆ็
ๅฐ้็ผ็ธ้่ณ่จๆ่่ถฃ๏ผ
ไปปไฝไบบๅๅฏ็่ฆฝ็จๅผ็ขผใๆฅ็ SVN ๅญๆพๅบซ๏ผๆ้้ RSS ่จ้ฑ้็ผ่จ้ใ
่ฎๆด่จ้
2.0.0
- Enhancement – Add WordPress functions compatibility check to flag usage of functions unavailable in a plugin’s declared minimum WordPress version.
- Enhancement – Add Write File check to detect plugins saving data in the plugin folder instead of the uploads directory or database.
- Enhancement – Add batched AI false positive detection with check-specific prompts and AI model selection for WP-CLI.
- Enhancement – Add CTRF export support for check results.
- Enhancement – Add an error count summary to the Plugin Check UI.
- Enhancement – Improve Direct File Access detection for library-style files.
- Enhancement – Adjust checks for update mode.
- Fix – Relax Update URI header validation for WordPress.org plugin URLs.
- Fix – Improve WordPress functions compatibility detection to avoid PHP serialization false positives.
- Fix – Respect
wp_supports_ai()and text-capable model filtering in the Plugin Namer. - Fix – Show Plugin Namer token usage in results.
- Fix – Recognize EUPL as a GPL-compatible license.
- Fix – Improve internationalization for emoji-prefixed labels.
- Fix – Update PHPCS sniffer repository links.
- Tweak – Update WP-CLI runtime checks documentation.
- Chore – Add automated WordPress function compatibility data generation.
- Chore – Add AI usage disclosure to the pull request template.
- Chore – Add AI coding agent instructions.
- Chore – Clean up wp-env development and test configuration warnings.
- Chore – Show a WordPress Playground preview button on pull requests.
- Chore – Update development and CI dependencies.
1.9.0
- Enhancement – Use the WordPress 7.0 core AI connectors.
- Enhancement – Add External Admin Menu Links check to detect external URLs in top-level admin menus.
- Enhancement – Add and refine the block metadata compatibility check to require
apiVersion3+ for WordPress 7.0+ iframe editor compatibility, including adjusted severity by mode. - Enhancement – Improve Plugin Updater detection to identify Plugin Update Checker (PUC) calls.
- Enhancement – Accept WTFPL as a GPL-compatible license.
- Fix – Improve PayPal donation URL validation for complex query strings.
- Fix – Ensure AI Check uses the configured model preference.
- Fix – Show a clear Plugin Namer error message when AI connector status is unavailable.
- Fix – Update the Plugin Namer connector settings page link.
- Tweak – Convert the
load_plugin_textdomain()check from error to warning severity. - Fix – Improve readme contributors validation when trailing commas are present.
- Fix – Make markdown file checks case-insensitive.
- Tweak – Refine escaping sniff error messages for clearer guidance.
- Chore – Update development dependencies, including
@wordpress/scripts,simple-git,basic-ftp,svgo,immutable, and@wp-playground/cli. - Tweak – Update WordPress.org Plugins Team naming for consistency.
1.8.0
- Enhancement – Add AI-powered Plugin Namer tool to evaluate plugin names for trademark conflicts and naming best practices.
- Enhancement – Add AI Instructions Detection Check to identify AI tool configuration files and development-only directories.
- Enhancement – Add support for exporting check results in CSV, JSON, and Markdown formats.
- Enhancement – Add check type filter to allow filtering results by errors and warnings.
- Enhancement – Add Direct File Access check to ensure proper security validation with ABSPATH constant.
- Enhancement – Add check for mismatched “Tested up to” header between plugin header and readme.txt.
- Enhancement – Update trademark check to remove acronym exceptions and improve flexibility.
- Enhancement – Add heredoc sniff to detect and restrict heredoc usage (nowdoc allowed).
- Fix – Update Playground integration blueprint for compatibility.
- Fix – Force correct plugin slug detection in WP-CLI command.
1.7.0
- Enhancement – Add Minified File Detection Check to identify and handle minified files in plugins.
- Enhancement – Implement check for insecure use of wp_verify_nonce() to improve security validation.
- Enhancement – Add direct database query sniff to detect direct database calls without using WordPress functions.
- Enhancement – Add prefixing check to ensure proper function and class name prefixing.
- Enhancement – Update localhost sniff regex to improve detection of localhost URLs including *.local domains.
- Enhancement – Disallow runtime checks when custom user table constants are defined for better compatibility.
- Enhancement – Add forbidden functions check to detect usage of disallowed PHP functions.
- Enhancement – New check for wp_safe_redirect to encourage use of WordPress safe redirect function.
- Enhancement – Improve mismatched text domain check for better internationalization validation.
- Enhancement – Detect links that request five-star reviews to enforce plugin directory guidelines.
- Enhancement – Add The Unlicense to GPL-compatible license check.
- Enhancement – Improve localhost sniff code for more accurate detection.
- Fix – Ignore vendor_prefixed and vendor-prefixed folders in checks to prevent false positives.
- Fix – Handle possible empty element in scanner to prevent PHP warnings.
- Fix – Hide error output in scanner for cleaner output.
- Fix – Call ReflectionProperty::setAccessible() only in older PHP versions for better PHP 8.1+ compatibility.
- Fix – Prevent deletion of custom WordPress tables during cleanup in test environment.
1.6.0
- Enhancement – Support strict output format for CLI commands.
- Enhancement – Improve check for donate link in readme.
- Enhancement – Improve info check in Version utils.
- Enhancement – Improve URL validation for plugin header fields.
- Enhancement – Improve ruleset files.
- Enhancement – Increased severity for invalid plugin uri domain and plugin description checks in plugin header.
- Enhancement – Remove CallTimePassByReference as it’s deprecated rule.
- Enhancement – Disallow special characters in textdomain.
- Enhancement – Imported readme parser for preventing conflicts with wordpress.org. Use dotorg readme parser if available.
- Enhancement – Discourage the use of
load_plugin_textdomainfound in plugins as it’s not necessary in wordpress.org. - Enhancement – Upgrade severity for missing readme headers.
- Enhancement – Show tested up to minor check only when it is current major version.
- Enhancement – Added link in plugins page to run the plugin check.
- Fix – Dynamic WP Content folder.
- Fix – Fix test for special chars in file names giving problems to users after clone.
- Fix – Remove Image_Functions_Check as they were making false positives.
- Fix – Prevent WordPress version 10+ from being flagged as an error in the “Tested up to” check.
1.5.0
- Enhancement – Improve url validation to check duplicate protocol.
- Enhancement – Update severity for incorrect textdomains and i18n error codes.
- Enhancement – Now issues in URL Author check are ERROR instead of WARNING.
- Enhancement – New check for minor version in Tested up.
- Enhancement – Make sure headers are not empty in the requires header check.
- Enhancement – Include experimental option in admin.
- Enhancement – Add Behat test for experimental checks from addons.
- Enhancement – Improve license check for Apache.
- Enhancement – Warn if requires headers are not same in readme and plugin header.
- Fix – Remove warning for dynamic callback in register_setting check.
- Fix – Incorrect database tables being referenced on subsites in Multisite.
1.4.0
- Enhancement – Allow ISC license in the License check.
- Enhancement – Added check for use of settings with sanitization callback.
- Enhancement – Added –ignore-codes in CLI to introduce a mechanism to ignore specific error codes.
- Enhancement – New utils for fetching necessary version info details.
- Enhancement – Added check for unsupported plugin name in plugin header field.
- Enhancement – Segregate the severity of i18n checks. Make sure that is giving errors in the right context.
- Enhancement – Provide more detailed information about checks when the README does not include a tested version or a list of contributors.
- Enhancement – Added rules from WPCS to prevent issues with content being sent before headers and warn about the use of Call-time pass-by-reference.
- Enhancement – Give more context in the error of check wrong named files.
- Enhancement – Simplified PHPUnit setup. Now it does not depend of running inside a WordPress installation.
- Enhancement – Added new check for restricted contributors.
- Fix – Delete transients in unit tests to avoid false positives.
- Fix – Incorrect Tested up to version comparison will make error for two major versions up.
- Fix – Excluded the use of functions file_get_contents and file_put_contents in the check to prevent false positives.
- Fix – Duplicated error message in the check for wrong named files.
- Fix – Use of Json encode wasn’t firing the error message.
- Fix – Change error type of NonEnqueuedImage in ImageFunctions sniff from ERROR to WARNING.
1.3.1
- Enhancement – Add version utilities.
- Fix – Escape error messages.
- Fix – Renamed error type to ERROR_LOW_SEVERITY and WARNING_LOW_SEVERITY.
- Fix – Fix PHPCS checks on unwritable filesystems.
1.3.0
- Enhancement – Update disallowed domains for Plugin URI check.
- Enhancement – Added new checks for Plugin Header fields: missing plugin description, missing plugin version and invalid plugin version.
- Enhancement – New check for validation of donate link in the readme file.
- Enhancement – Increased severity for wrong Plugin Requires.
- Enhancement – Added check Restrict parse_str() without second argument.
- Enhancement – New check for Disallow usage of HEREDOC and NOWDOC.
- Enhancement – Added acronyms allowed in Trademark checks.
- Enhancement – Added option in CLI to add low severity errors and warnings.
- Enhancement – Change error type for License check error codes.
- Enhancement – Always use prefixed tables during runtime check requests.
- Enhancement – Created a new class for checking licenses.
- Enhancement – Added support for MPL-2.0 license.
- Enhancement – Implement gherkin linter in GH action.
- Enhancement – Update check for Contributors in markdown readme files.
- Enhancement – CLI: Fix confusing runtime environment setup order.
- Enhancement – Allow custom checks to provide installed_paths.
- Enhancement – Improved the use of localhost URLs in the Plugin.
- Enhancement – Documented checks in the plugin.
- Enhancement – Increased severity for Code obfuscation checks.
- Enhancement – Differentiate between non-existent readme and default readme file.
- Enhancement – Encourage developers to use native functions for loading images in templates.
- Enhancement – Added a check for not allowing include libraries already in WordPress core.
- Enhancement – Warning for usage of query_posts() in favor of WP_Query.
- Fix – Fix for the local environment is set up before testing.
- Fix – Fix addon checks not being executed when running runtime checks.
- Fix – Allow
defaultas a text domain in the text domain check. - Fix – Allow GitHub URLs in the Plugin URI field.
- Fix – Don’t flag Apache license. It’s allowed in the WordPress.org plugin repository.
- Fix – Removes the path before the plugin, so it won’t affect to badly named files.
1.2.0
- Enhancement – Added a check for badly used names in files.
- Enhancement – Increased severity for
BacktickOperator,DisallowShortOpenTag,DisallowAlternativePHPTags,RestrictedClasses, andRestrictedFunctions. - Enhancement – Added security checks to the Plugin repository category.
- Enhancement – Allowed
runtime-setin code sniffer checks. - Enhancement – Changed warnings to errors in plugin header checks.
- Enhancement – Detect forbidden plugin headers such as repository URIs in the Directory.
- Enhancement – Added a new check for development functions that are not allowed in final plugins.
- Enhancement – Created new images and icons for the plugin.
- Enhancement – Introduced a slug argument in the CLI.
- Enhancement – Added a check for discouraged PHP functions.
- Enhancement – Added validation for Contributors in the readme file.
- Enhancement – Added a warning for mismatched plugin names in the plugin header and readme file.
- Enhancement – Checked for validation of Plugin Header fields: Name, Plugin URI, Description, Author URI, Requires at least, Requires PHP, and Requires Plugins.
- Enhancement – Added a warning if the “Tested up to” value in the readme file exceeds the released version of WordPress.
- Fix – Display a success message if no errors or warnings are found.
- Fix – Made table results responsive.
- Fix – Prevent proceeding to the next check if the Stable Tag value is set to
trunk. - Fix – Allow runtime initialization even when only add-on checks are requested.
- Fix – Fixed an SPDX warning for the
GPL version 3license. - Fix – Prevent runtime checks in the CLI context when they cannot be used.
1.1.0
- Feature – New
Non_Blocking_Scripts_Check(non_blocking_scripts) runtime check to warn about enqueued scripts that use neitherdefernorasync. - Enhancement – Changed the namespace of included checks.
- Enhancement – Introduced severity levels for all errors and warnings.
- Enhancement – CLI: Support checking a plugin from a path or URL.
- Enhancement – Added short descriptions and URLs for each check.
- Enhancement – Improved messaging in check results.
- Enhancement – Updated code obfuscation check with more accurate results.
- Enhancement – Updated plugin review check to flag missing input sanitization (
WordPress.Security.ValidatedSanitizedInput). - Fix – Improve readme checks to exclude invalid files.
- Fix – Only show edit link if files are actually editable.
1.0.2
- Feature – New
Enqueued_Scripts_Scope_Check(enqueued_scripts_scope),Enqueued_Styles_Size_Check(enqueued_styles_size) andEnqueued_Resources_Check(enqueued_resources) performance checks. - Enhancement – Improved readme check and added a new
wp_plugin_check_ignored_readme_warningsfilter. - Enhancement – New
wp_plugin_check_default_categoriesfilter to change the categories which are selected by default. - Enhancement – New
wp_plugin_check_ignore_filesfilter to allow ignoring specific files. - Fix – Correct detection of readme files in Windows by normalizing file paths.
1.0.1
- Fix – Add missing
test-contentfolder needed for runtime checks. - Fix – Do not send emails when setting up test environment.
- Fix – Prevent PHP warning when the
argvvariable isn’t set.
1.0.0
- Feature – Complete overhaul of the plugin, its architecture, and all checks.
- Feature – Added new WP-CLI commands for running checks and listing available options.
- Enhancement – Added option to only run checks for a specific category.
0.2.3
- Tweak – Use version 3.8.0 of the PHP_CodeSniffer library, moving away from
squizlabs/PHP_CodeSnifferto usePHPCSStandards/PHP_CodeSniffer. - Fix – Ensure the plugin works as expected on the WP playground environment to enable reviewers to use PCP. Props @tellyworth.
- Fix – Undefined array key “argv” when running the plugin check in certain environments. Props @afragen. #340
0.2.2
- Enhancement – Include support for Windows Servers.
- Enhancement – Avoid using PHP CLI directly, which enables plugin developers to use PCP in a variety of new environments.
- Fix – Remove dependency on
shell_execandexecfunctions, which enables plugin developers to use PCP in a variety of new environments. - Fix – Prevent problems with Readme parser warning related to
contributor_ignoredfor when running the check outside WP.org. Props @dev4press. #276 - Fix – Remove extra period on the end of the sentence for Phar warning. Props @pixolin. #275
0.2.1
- Added – ‘View in code editor’ link beneath each PHPCS error or warning. Props @EvanHerman, @westonruter, @felixarntz, @mukeshpanchal27 #262
- Fix – Ensure
readme.txthas priority overreadme.mdwhen both are present. Props @bordoni, @afragen #258 - Fix – Ensure that the PHPCS check runs even when the PHPCS binary is not executable. Props @bordoni, @shawn-digitalpoint, @mrfoxtalbot #254
- Fix – Readme changes and typos. Props @aaronjorbin. #261
- Fix – Long lines of code with PHPCS check no longer expand over the size of the notice. Props @bordoni, @felixarntz. #263
- Fix – Ensure that we have PHP 7.2 compatibility remove trailing comma. Props @bordoni, @leoloso. #265
- Fix – Include all strings that were missed in the previous release. Props @bordoni, @pixolin. #270
0.2.0
- Feature – Enable modification of the PHP Binary path used by the plugin with
PLUGIN_CHECK_PHP_BINconstant. - Feature – Include a check for the usage of
ALLOW_UNFILTERED_UPLOADSon any PHP files – Props EvanHerman at #45 - Feature – Include a check for the presence of the application files (
.a,.bin,.bpk,.deploy,.dist,.distz,.dmg,.dms,.DS_Store,.dump,.elc,.exe,.iso,.lha,.lrf,.lzh,.o,.obj,.phar,.pkg,.sh, ‘.so`) – Props EvanHerman at #43 - Feature – Include a check for the presence of the readme.txt or readme.md file – Props EvanHerman at #42
- Fix – Ensure that Readme parsing is included properly when a readme.md or readme.txt file is present. Props Bordoni #52
- Tweak – Disallow functions
move_uploaded_file,passthru,proc_open– Props alexsanford at #50 - Tweak – Change the message type for using functions WordPress already includes from Warning to Error. Props davidperezgar at #18
- Tweak – Change the message type for incorrect usage of Stable tag from Notice/Warning to Error. Props davidperezgar at #3
[0.1] 2011-09-04
Original version of the plugin check tool, not a released version of the plugin, this changelog is here for historical purposes only.