Easy MCP AI – Claude, ChatGPT & SEO Data Connector
Slug: easy-mcp-ai · EasyMCPAI · 1,000+
Overall Score
Good overall quality
What this score means
Scores are calculated on a 100-point scale by analysing six weighted categories: Security, WP.org Readiness, Performance, Code Quality, Accessibility, and Vulnerabilities.
-
Excellent The plugin follows best practices across every measured category. It is well-maintained, low-risk, and recommended for production use.
-
Good Strong overall quality with minor areas for improvement. Generally safe to use on most sites.
-
Needs Review Some areas of concern detected. Review the full issues report and weigh the risks before installing on production.
-
High Risk Significant quality or security problems found. Exercise caution — check the details carefully before using this plugin.
- Wordfence: May 22, 2026 2:34 am (11 minutes ago)
Score Breakdown
Why this score?
Top deductions are based on 1 affected rules, reducing this category by 32 total points.
| Rule | Hits | Impact | Share |
|---|---|---|---|
| Security issue: Warning | 8 | -32 | 100% |
Why this score?
Top deductions are based on 2 affected rules, reducing this category by 4 total points.
| Rule | Hits | Impact | Share |
|---|---|---|---|
| Tested up to version is behind current WordPress | 1 | -3 | 75% |
| Repo issue: Notice | 1 | -1 | 25% |
Why this score?
Top deductions are based on 1 affected rules, reducing this category by 6 total points.
| Rule | Hits | Impact | Share |
|---|---|---|---|
| Performance issue: Warning | 2 | -6 | 100% |
Why this score?
Top deductions are based on 0 affected rules, reducing this category by 0 total points.
No deductions were applied for this category in the latest score run.
Why this score?
Top deductions are based on 1 affected rules, reducing this category by 2 total points.
| Rule | Hits | Impact | Share |
|---|---|---|---|
| Accessibility issue: Warning | 1 | -2 | 100% |
Why this score?
Top deductions are based on 0 affected rules, reducing this category by 0 total points.
No deductions were applied for this category in the latest score run.
Plugin Details
- Version: 1.6.5
- Active Installs: 1,000+
- Last Updated: 2026-05-13 05:23:00
- Tested up to: 6.9.4
- Requires PHP: 7.4
- Rating: 5/5 (2 ratings)
- Support: 2/2 resolved (100%)
- View on WordPress.org
- Download Plugin
Scan Summary
- Errors: 0
- Warnings: 11
- Notices: 1
- Last Scanned: 2026-05-21 18:42:44
What Changed Since Last Scan
New Issues
No items in this category.
Resolved Issues
No items in this category.
Worsened Issues
No items in this category.
Detected Issues
| Severity | Category | Message | File | Fix Guidance |
|---|---|---|---|---|
| NOTICE | REPO | Plugin package does not include a license file. |
Quick
Add a LICENSE or COPYING file so distribution terms are explicit.
Moderate
Apply the same remediation pattern across repo findings and re-scan to confirm notice issues drop.
Advanced
Add automated linting, CI checks, and team review guidance so this issue class is prevented in future releases.
|
|
| WARNING | SECURITY | Direct database query detected without an immediately visible $wpdb->prepare() wrapper. | includes/auth/class-token-manager.php |
Quick
Wrap dynamic SQL arguments with $wpdb->prepare() in the flagged query.
Moderate
Refactor repeated SQL into repository/helper methods that enforce prepared statements by default.
Advanced
Add integration tests and static checks that fail builds when direct dynamic SQL is introduced.
|
| WARNING | SECURITY | Direct database query detected without an immediately visible $wpdb->prepare() wrapper. | includes/class-plugin.php |
Quick
Wrap dynamic SQL arguments with $wpdb->prepare() in the flagged query.
Moderate
Refactor repeated SQL into repository/helper methods that enforce prepared statements by default.
Advanced
Add integration tests and static checks that fail builds when direct dynamic SQL is introduced.
|
| WARNING | SECURITY | Direct database query detected without an immediately visible $wpdb->prepare() wrapper. | includes/admin/class-admin-page.php |
Quick
Wrap dynamic SQL arguments with $wpdb->prepare() in the flagged query.
Moderate
Refactor repeated SQL into repository/helper methods that enforce prepared statements by default.
Advanced
Add integration tests and static checks that fail builds when direct dynamic SQL is introduced.
|
| WARNING | SECURITY | Use of base64_decode() detected. | includes/semrush/class-semrush-client.php |
Quick
Ensure any encoded payloads are necessary, documented, and never used to obscure executable logic.
Moderate
Apply the same remediation pattern across security findings and re-scan to confirm warning issues drop.
Advanced
Add automated linting, CI checks, and team review guidance so this issue class is prevented in future releases.
|
| WARNING | SECURITY | Use of base64_decode() detected. | includes/class-abstract-google-client.php |
Quick
Ensure any encoded payloads are necessary, documented, and never used to obscure executable logic.
Moderate
Apply the same remediation pattern across security findings and re-scan to confirm warning issues drop.
Advanced
Add automated linting, CI checks, and team review guidance so this issue class is prevented in future releases.
|
| WARNING | PERFORMANCE | flush_rewrite_rules() detected. | includes/class-activator.php |
Quick
Only flush rewrite rules during activation or explicit maintenance flows.
Moderate
Apply the same remediation pattern across performance findings and re-scan to confirm warning issues drop.
Advanced
Add automated linting, CI checks, and team review guidance so this issue class is prevented in future releases.
|
| WARNING | SECURITY | Use of base64_decode() detected. | includes/dfs/class-dataforseo-client.php |
Quick
Ensure any encoded payloads are necessary, documented, and never used to obscure executable logic.
Moderate
Apply the same remediation pattern across security findings and re-scan to confirm warning issues drop.
Advanced
Add automated linting, CI checks, and team review guidance so this issue class is prevented in future releases.
|
| WARNING | ACCESSIBILITY | Image markup without an alt attribute detected. | includes/tools/media/class-delete-media.php |
Quick
Add alt attributes to the flagged image tags, or alt="" for decorative images.
Moderate
Audit all templates/components for missing alternative text and update content guidelines.
Advanced
Integrate accessibility testing in CI (axe/pa11y) and block releases with critical a11y violations.
|
| WARNING | SECURITY | Use of base64_decode() detected. | includes/tools/media/class-upload-media.php |
Quick
Ensure any encoded payloads are necessary, documented, and never used to obscure executable logic.
Moderate
Apply the same remediation pattern across security findings and re-scan to confirm warning issues drop.
Advanced
Add automated linting, CI checks, and team review guidance so this issue class is prevented in future releases.
|
| WARNING | PERFORMANCE | flush_rewrite_rules() detected. | includes/class-deactivator.php |
Quick
Only flush rewrite rules during activation or explicit maintenance flows.
Moderate
Apply the same remediation pattern across performance findings and re-scan to confirm warning issues drop.
Advanced
Add automated linting, CI checks, and team review guidance so this issue class is prevented in future releases.
|
| WARNING | SECURITY | Direct database query detected without an immediately visible $wpdb->prepare() wrapper. | uninstall.php |
Quick
Wrap dynamic SQL arguments with $wpdb->prepare() in the flagged query.
Moderate
Refactor repeated SQL into repository/helper methods that enforce prepared statements by default.
Advanced
Add integration tests and static checks that fail builds when direct dynamic SQL is introduced.
|
Score History
Range Change: -1 pts · All-Time High: 90/100