Create custom product labels and sale badges for WooCommerce products to highlight offers and promotions.
36
Score
90
Errors
48
Warnings
+0
Change
Category Scores
Security0
Repo94
Performance98
Maintainability59
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Maintainability
64
13 issue groups
Security
58
7 issue groups
I18n
13
3 issue groups
Performance
1
1 issue group
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$product'.29
- Category
- Security
- Occurrences
- 29
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$product'.
ERRORMaintainabilitydate datedate() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.16
- Category
- Maintainability
- Occurrences
- 16
- Severity
- error
Sample message
date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.
WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.11
- Category
- Maintainability
- Occurrences
- 11
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().11
- Category
- Maintainability
- Occurrences
- 11
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
ERRORI18nMissing Arg DomainMissing $domain parameter in function call to __().10
- Category
- I18n
- Occurrences
- 10
- Severity
- error
Sample message
Missing $domain parameter in function call to __().
ERRORSecurityUnescaped LiteralFound unescaped literal "%" character.7
- Category
- Security
- Occurrences
- 7
- Severity
- error
Sample message
Found unescaped literal "%" character.
ERRORSecurityDatabase parameter is not escapedUnescaped parameter $productID used in $wpdb->get_col()\n$productID assigned unsafely at line 1309.6
- Category
- Security
- Occurrences
- 6
- Severity
- error
Sample message
Unescaped parameter $productID used in $wpdb->get_col()\n$productID assigned unsafely at line 1309.
ERRORSecurityLike Wildcards In QuerySQL wildcards for a LIKE query should be passed in through a replacement parameter. Found: LIKE '%.6
- Category
- Security
- Occurrences
- 6
- Severity
- error
Sample message
SQL wildcards for a LIKE query should be passed in through a replacement parameter. Found: LIKE '%.
WARNINGMaintainabilityNon-prefixed hook nameHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "active_plugins".6
- Category
- Maintainability
- Occurrences
- 6
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "active_plugins".
ERRORSecuritySQL query is not preparedUse placeholders and $wpdb->prepare(); found $prodvalues4
- Category
- Security
- Occurrences
- 4
- Severity
- error
Sample message
Use placeholders and $wpdb->prepare(); found $prodvalues
Show 15 moreShow less
WARNINGMaintainabilityDynamic hook name4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "$post_type . '_labels'".
ERRORMaintainabilityMissing direct file access protection4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
WARNINGSecurityInterpolated SQL is not prepared3
- Category
- Security
- Occurrences
- 3
- Severity
- warning
Sample message
Use placeholders and $wpdb->prepare(); found interpolated variable $productID at "SELECT ID FROM {$wpdb->prefix}posts WHERE post_status = 'publish' AND post_parent IN ($productID) AND post_type = 'product_variation'"
ERRORSecurityQuoted Simple Placeholder3
- Category
- Security
- Occurrences
- 3
- Severity
- error
Sample message
Simple placeholders should not be quoted in the query string in $wpdb->prepare(). Found: '%s'.
WARNINGMaintainabilityslow db query meta query3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
Detected usage of meta_query, possible slow query.
WARNINGMaintainabilityslow db query tax query2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
Detected usage of tax_query, possible slow query.
WARNINGMaintainabilityNon-prefixed global variable2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$badge".
WARNINGMaintainabilityNot In Footer2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
In footer ($in_footer) is not set explicitly wp_enqueue_script; It is recommended to load scripts in the footer. Please set this value to `true` to load it in the footer, or explicitly `false` if it should be loaded in the header.
ERRORI18nNon Singular String Literal Context2
- Category
- I18n
- Occurrences
- 2
- Severity
- error
Sample message
The $context parameter must be a single text string literal. Found: $post_type
WARNINGI18nDiscouraged text-domain loading1
- Category
- I18n
- Occurrences
- 1
- Severity
- warning
Sample message
load_plugin_textdomain() has been discouraged since WordPress version 4.6. When your plugin is hosted on WordPress.org, you no longer need to manually include this function call for translations under your plugin slug. WordPress will automatically load the translations for you as needed.
ERRORMaintainabilityDeprecated parameter: get_terms parameter 21
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
The parameter "['taxonomy' => 'product_cat', 'hide_empty' => false, 'fields' => 'id=>name']" at position #2 of get_terms() has been deprecated since WordPress version 4.5.0. Instead do not pass the parameter.
WARNINGMaintainabilityMissing Version1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Resource version not set in call to wp_enqueue_script(). This means new versions of the script may not always be loaded due to browser caching.
WARNINGPerformancePost Not In post not in1
- Category
- Performance
- Occurrences
- 1
- Severity
- warning
Sample message
Using exclusionary parameters, like post__not_in, in calls to get_posts() should be done with caution, see https://wpvip.com/documentation/performance-improvements-by-removing-usage-of-post__not_in/ for more information.
WARNINGMaintainabilitymismatched plugin name1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Plugin name "Product Labels For Woocommerce (Sale Badges)" is different from the name declared in plugin header "Acowebs Product Labels For Woocommerce".
ERRORRepo Complianceplugin header no license1
- Category
- Repo Compliance
- Occurrences
- 1
- Severity
- error
Sample message
Missing "License" in Plugin Header. Please update your Plugin Header with a valid GPLv2 (or later) compatible license.
External Connections
Not analyzed yet.
Score History
First score snapshot
v1.5.14
36
Latest
- Findings
- 138
- Errors
- 90
- Warnings
- 48
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 36 | 138 | 90 | 48 | v1.5.14 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueRelated
Relationship links
Author
Category
Issue
Related
Follow Us Badges96 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce21 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreClassic Editor63 scoreAkismet Anti-spam: Spam Protection35 scoreAll-in-One WP Migration and Backup34 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreRank Math SEO – AI SEO Tools to Dominate SEO Rankings30 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreProduct Addons for Woocommerce – Product Options with Custom Fields33 scoreAdvanced Product Labels for WooCommerce23 scoreCheckout Field Editor for WooCommerce – Checkout Manager34 scoreAdvanced Woo Labels – Product Labels & Badges for WooCommerce39 score
Author
Category
Issue
Related
Follow Us Badges96 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce21 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreClassic Editor63 scoreAkismet Anti-spam: Spam Protection35 scoreAll-in-One WP Migration and Backup34 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreRank Math SEO – AI SEO Tools to Dominate SEO Rankings30 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreProduct Addons for Woocommerce – Product Options with Custom Fields33 scoreAdvanced Product Labels for WooCommerce23 scoreCheckout Field Editor for WooCommerce – Checkout Manager34 scoreAdvanced Woo Labels – Product Labels & Badges for WooCommerce39 score
Related Plugins
Trust Badges
400 active installs
98
Follow Us Badges
1k+ active installs
96
GamiPress – WooCommerce Points Per Purchase Total
400 active installs
90
Post Badges
400 active installs
54
GamiPress – Reset User
400 active installs
51
Better Badge – Custom Product Badges for WooCommerce
500 active installs
47