Advanced WooCommerce product search plugin. Search inside any product field. Support for both AJAX search and search results page.
Category Scores
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Security
424
9 issue groups
Maintainability
111
10 issue groups
I18n
52
5 issue groups
Performance
7
1 issue group
WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.170
- Category
- Security
- Occurrences
- 170
- Severity
- warning
Sample message
Processing form data without nonce verification.
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"<div {$this->render_attributes( '_root' )}>"'.103
- Category
- Security
- Occurrences
- 103
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"<div {$this->render_attributes( '_root' )}>"'.
WARNINGSecurityRequest data is not unslashed$_GET[$url_key] not unslashed before sanitization. Use wp_unslash() or similar54
- Category
- Security
- Occurrences
- 54
- Severity
- warning
Sample message
$_GET[$url_key] not unslashed before sanitization. Use wp_unslash() or similar
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_GET[$url_key]35
- Category
- Security
- Occurrences
- 35
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_GET[$url_key]
WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.27
- Category
- Maintainability
- Occurrences
- 27
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().27
- Category
- Maintainability
- Occurrences
- 27
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
ERRORI18nMissing Translators CommentA function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.26
- Category
- I18n
- Occurrences
- 26
- Severity
- error
Sample message
A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.
ERRORMaintainabilitywp function not compatible with requires wpFunction "get_term_meta()" requires WordPress 4.4.0, but your plugin minimum supported version is WordPress 4.0.0.25
- Category
- Maintainability
- Occurrences
- 25
- Severity
- error
Sample message
Function "get_term_meta()" requires WordPress 4.4.0, but your plugin minimum supported version is WordPress 4.0.0.
WARNINGSecurityInterpolated SQL is not preparedUse placeholders and $wpdb->prepare(); found interpolated variable {$count_multiplier} at "( case when ( term_source = '%s' AND term = '%s' ) then {$relevance} * ( {$count_multiplier} ) else 0 end )"23
- Category
- Security
- Occurrences
- 23
- Severity
- warning
Sample message
Use placeholders and $wpdb->prepare(); found interpolated variable {$count_multiplier} at "( case when ( term_source = '%s' AND term = '%s' ) then {$relevance} * ( {$count_multiplier} ) else 0 end )"
ERRORI18nUnordered Placeholders TextMultiple placeholders in translatable strings should be ordered. Expected "%1$s, %2$s", but got "%s, %s" in 'There are several ways you can add a search form to your site. Use the \'Seamless integration\' option, shortcode, widget or custom php function. Read more inside %s section or read %s.'.14
- Category
- I18n
- Occurrences
- 14
- Severity
- error
Sample message
Multiple placeholders in translatable strings should be ordered. Expected "%1$s, %2$s", but got "%s, %s" in 'There are several ways you can add a search form to your site. Use the \'Seamless integration\' option, shortcode, widget or custom php function. Read more inside %s section or read %s.'.
Show 15 moreShow less
WARNINGSecurityMissing nonce verification13
- Category
- Security
- Occurrences
- 13
- Severity
- warning
Sample message
Processing form data without nonce verification.
ERRORSecuritySQL query is not prepared10
- Category
- Security
- Occurrences
- 10
- Severity
- error
Sample message
Use placeholders and $wpdb->prepare(); found $query
ERRORSecurityDatabase parameter is not escaped9
- Category
- Security
- Occurrences
- 9
- Severity
- error
Sample message
Unescaped parameter $query used in $wpdb->query()\n$query assigned unsafely at line 156.
WARNINGMaintainabilitySchema Change7
- Category
- Maintainability
- Occurrences
- 7
- Severity
- warning
Sample message
Attempting a database schema change is discouraged.
ERRORSecurityQuoted Simple Placeholder7
- Category
- Security
- Occurrences
- 7
- Severity
- error
Sample message
Simple placeholders should not be quoted in the query string in $wpdb->prepare(). Found: '%s'.
ERRORPerformanceSuppress Filters suppress filters7
- Category
- Performance
- Occurrences
- 7
- Severity
- error
Sample message
Setting `suppress_filters` to `true` is prohibited.
ERRORMaintainabilitystrip tags strip tags6
- Category
- Maintainability
- Occurrences
- 6
- Severity
- error
Sample message
strip_tags() is discouraged. Use the more comprehensive wp_strip_all_tags() instead.
ERRORI18nText Domain Mismatch6
- Category
- I18n
- Occurrences
- 6
- Severity
- error
Sample message
Mismatched text domain. Expected 'advanced-woo-search' but got "aurum".
WARNINGMaintainabilityslow db query meta query5
- Category
- Maintainability
- Occurrences
- 5
- Severity
- warning
Sample message
Detected usage of meta_query, possible slow query.
WARNINGMaintainabilityNot In Footer5
- Category
- Maintainability
- Occurrences
- 5
- Severity
- warning
Sample message
In footer ($in_footer) is not set explicitly wp_enqueue_script; It is recommended to load scripts in the footer. Please set this value to `true` to load it in the footer, or explicitly `false` if it should be loaded in the header.
ERRORI18nNo Empty Strings4
- Category
- I18n
- Occurrences
- 4
- Severity
- error
Sample message
The $text text string should have translatable content. Found: ""
ERRORMaintainabilityMissing direct file access protection4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
WARNINGMaintainabilityslow db query tax query3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
Detected usage of tax_query, possible slow query.
WARNINGMaintainabilityDiscouraged PHP function2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
The use of function set_time_limit() is discouraged
ERRORI18nMissing Arg Domain2
- Category
- I18n
- Occurrences
- 2
- Severity
- error
Sample message
Missing $domain parameter in function call to __().
External Connections
Not analyzed yet.
Score History
First score snapshot
v3.65
31
Latest
- Findings
- 605
- Errors
- 228
- Warnings
- 377
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 31 | 605 | 228 | 377 | v3.65 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.