The most customizable extra product options builder for WooCommerce. You will love how many fields and features the free version has.
30
Score
112
Errors
210
Warnings
-1
Change
Category Scores
Security0
Repo100
Performance100
Maintainability25
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Maintainability
155
12 issue groups
Security
149
10 issue groups
I18n
8
3 issue groups
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$className".53
- Category
- Maintainability
- Occurrences
- 53
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$className".
WARNINGMaintainabilityNon-prefixed hook nameHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "'woo-extra-product-get-extension-runnable-'.$extension".37
- Category
- Maintainability
- Occurrences
- 37
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "'woo-extra-product-get-extension-runnable-'.$extension".
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '" field classes / $methodCount methods -> $outputFile\n"'.32
- Category
- Security
- Occurrences
- 32
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '" field classes / $methodCount methods -> $outputFile\n"'.
WARNINGSecurityMissing nonce verificationProcessing form data without nonce verification.25
- Category
- Security
- Occurrences
- 25
- Severity
- warning
Sample message
Processing form data without nonce verification.
ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;25
- Category
- Maintainability
- Occurrences
- 25
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_FILES[$name]24
- Category
- Security
- Occurrences
- 24
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_FILES[$name]
WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.20
- Category
- Security
- Occurrences
- 20
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGSecurityRequest data is not unslashed$_GET['_nonce'] not unslashed before sanitization. Use wp_unslash() or similar20
- Category
- Security
- Occurrences
- 20
- Severity
- warning
Sample message
$_GET['_nonce'] not unslashed before sanitization. Use wp_unslash() or similar
ERRORSecurityException output is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$currentOption'.13
- Category
- Security
- Occurrences
- 13
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$currentOption'.
WARNINGMaintainabilityMixed line endingsFile has mixed line endings; this may cause incorrect results9
- Category
- Maintainability
- Occurrences
- 9
- Severity
- warning
Sample message
File has mixed line endings; this may cause incorrect results
Show 15 moreShow less
ERRORMaintainabilitywp function not compatible with requires wp9
- Category
- Maintainability
- Occurrences
- 9
- Severity
- error
Sample message
Function "wp_get_upload_dir()" requires WordPress 4.5.0, but your plugin minimum supported version is WordPress 3.3.0.
ERRORSecuritySQL query is not prepared6
- Category
- Security
- Occurrences
- 6
- Severity
- error
Sample message
Use placeholders and $wpdb->prepare(); found $this
WARNINGMaintainabilityDirect Query5
- Category
- Maintainability
- Occurrences
- 5
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGMaintainabilityNo Caching4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
WARNINGSecurityInput is not validated4
- Category
- Security
- Occurrences
- 4
- Severity
- warning
Sample message
Detected usage of a possibly undefined superglobal array index: $_POST['nonce']. Check that the array index exists before using it.
WARNINGSecurityDatabase parameter is not escaped3
- Category
- Security
- Occurrences
- 3
- Severity
- warning
Sample message
Unescaped parameter $itemTable used in $wpdb->get_col()\n$itemTable assigned unsafely at line 34.
ERRORMaintainabilityfile system operations mkdir3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: mkdir().
ERRORMaintainabilityfile system operations touch3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: touch().
ERRORI18nMissing Arg Domain3
- Category
- I18n
- Occurrences
- 3
- Severity
- error
Sample message
Missing $domain parameter in function call to __().
ERRORI18nMissing Translators Comment3
- Category
- I18n
- Occurrences
- 3
- Severity
- error
Sample message
A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.
ERRORMaintainabilitybadly named files3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- error
Sample message
File and folder names must not contain spaces or special characters.
ERRORMaintainabilityfive star reviews detected3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- error
Sample message
Linking directly to 5 stars reviews is not allowed.
WARNINGSecurityInterpolated SQL is not prepared2
- Category
- Security
- Occurrences
- 2
- Severity
- warning
Sample message
Use placeholders and $wpdb->prepare(); found interpolated variable {$itemTable} at "SELECT DISTINCT items.order_id\n FROM {$itemTable} items\n INNER JOIN {$metaTable} itemmeta\n ON itemmeta.order_item_id=items.order_item_id\n WHERE itemmeta.meta_key IN ('rn_entry','rn_line_items')\n AND itemmeta.meta_value LIKE %s\n LIMIT 20"
ERRORI18nNon Singular String Literal Text2
- Category
- I18n
- Occurrences
- 2
- Severity
- error
Sample message
The $text parameter must be a single text string literal. Found: $this->Item->get_id()
ERRORMaintainabilityForbidden PHP function found1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
The use of function move_uploaded_file() is forbidden
External Connections
Potential connections found in static code analysis.
Outbound calls
163
External assets
0
Incoming endpoints
1
Notable Domains
momentjs.com24 · outbound
hakim.se21 · outbound
lab.hakim.se21 · outbound
fb.me17 · outbound
feross.org6 · outbound
jedwatson.github.io5 · outbound
Platform / Reference Domains
w3.org30 · platform/reference
wordpress.org5 · platform/reference
github.com4 · platform/reference
opensource.org4 · platform/reference
es-mx.wordpress.org1 · platform/reference
gnu.org1 · platform/reference
External Asset Domains
No external asset domains detected.
Incoming Endpoints
No public endpoints detected.
Admin AJAX endpoints1
wp_ajax_woocommerce_tm_get_variations_arrayauthenticated
wp_ajax
Score History
7 score snapshots
v1.2.176
30
Latest
- Findings
- 322
- Errors
- 112
- Warnings
- 210
- Check
- 2.0.0
v1.2.174
31
Score
- Findings
- 307
- Errors
- 113
- Warnings
- 194
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 30 | 322 | 112 | 210 | v1.2.176 | 2.0.0 |
| 31 | 307 | 113 | 194 | v1.2.174 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Author
Category
Issue
Non-prefixed global variable53 findingsNon-prefixed hook name37 findingsOutput is not escaped32 findingsMissing nonce verification25 findingsMissing direct file access protection25 findingsInput is not sanitized24 findingsNonce verification recommended20 findingsRequest data is not unslashed20 findings
Domain
Related
Contact Form 769 scoreElementor Website Builder – more than just a page builder39 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreLiteSpeed Cache35 scoreWooCommerce21 scoreAkismet Anti-spam: Spam Protection35 scoreGoogle for WooCommerce37 scoreWooCommerce PayPal Payments37 scoreWooCommerce Stripe Payment Gateway30 scoreWooCommerce Tax (formerly WooCommerce Shipping & Tax)30 scoreWooCommerce Legacy REST API31 scoreCart Abandonment Recovery for WooCommerce – Recover Lost Sales with Automated Emails26 scoreKliken: Ads + Pixel for Meta100 scorePaystack WooCommerce Payment Gateway100 score
Author
Category
Issue
Non-prefixed global variable53 findingsNon-prefixed hook name37 findingsOutput is not escaped32 findingsMissing nonce verification25 findingsMissing direct file access protection25 findingsInput is not sanitized24 findingsNonce verification recommended20 findingsRequest data is not unslashed20 findings
Domain
Related
Contact Form 769 scoreElementor Website Builder – more than just a page builder39 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreLiteSpeed Cache35 scoreWooCommerce21 scoreAkismet Anti-spam: Spam Protection35 scoreGoogle for WooCommerce37 scoreWooCommerce PayPal Payments37 scoreWooCommerce Stripe Payment Gateway30 scoreWooCommerce Tax (formerly WooCommerce Shipping & Tax)30 scoreWooCommerce Legacy REST API31 scoreCart Abandonment Recovery for WooCommerce – Recover Lost Sales with Automated Emails26 scoreKliken: Ads + Pixel for Meta100 scorePaystack WooCommerce Payment Gateway100 score
Related Plugins
Kliken: Ads + Pixel for Meta
30k+ active installs
100
Paystack WooCommerce Payment Gateway
30k+ active installs
100
Store Vacation Lite for WooCommerce
20k+ active installs
100
EAN Barcode Generator for WooCommerce: UPC, ISBN & GTIN Inventory
10k+ active installs
100
Visa Acceptance Solutions
10k+ active installs
100
No Gutenberg? – Choose Where to Use the Block Editor or the Classic Editor
9k+ active installs
100