WordPress Plugin and Theme Code Review
Check a custom plugin for safety and maintainability.
The Open buttons send the prompt text as currently shown below to that site only when you click. Fill in the placeholders first.
[VERIFY] is an editorial flag, not a blank to fill. Wherever the prompt shows [VERIFY], check that item against a reliable source before you use it.
Review a custom WordPress plugin or theme. Paste the main files with secrets removed: [WP_CODE]. What it does and who uses the site: [PURPOSE_USERS]. WordPress version and hosting: [WP_HOSTING]. Check escaping of output, sanitising of input, nonces and capability checks, direct database queries, hooks used, performance of queries on every page, file access, update safety and compatibility. Explain risks in plain language. Return a table with File, Issue, Severity (red, amber, green) and Fix, rewritten snippets for the top issues, and a test list on a staging site. Keep advice defensive. Also suggest how to keep the plugin updated, how to test with the most popular other plugins, and how to document the settings for site editors. Add a list of capabilities and options that should be removed on uninstall, with a backup before deletion. Prioritise by realistic risk to the business, explain each fix in plain language, and avoid fear-based wording. Mark vendor-specific behaviour [VERIFY] against current documentation.
Fill in before use
Optional: type your details and the prompt above updates. Nothing is saved or sent.
Replace each bracketed placeholder with your own details, then paste into Any AI or another assistant.