Bitron Right of Withdrawal

Accessible online withdrawal form. Built for the EU Consumer Rights Directive update effective 19 June 2026.

v1.7.2oaronUpdated 23 days agoAdded 3 months ago400 installs100% rating100% support resolved

GDPR accessibility consumer rights refund withdrawal

Score

Errors

Warnings

Change

Category Scores

Security57

Repo100

Performance100

Maintainability96

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

17 findings

Security

1 issue group

Maintainability

2 issue groups

ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$error'.15

Category: Security
Occurrences: 15
Severity: error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$error'.

WordPress.Security.EscapeOutput.OutputNotEscaped Reference

ERRORMaintainabilityinvalid tested upto minorTested up to: 7.0.2 The version number should only include major versions 7.0.1

Category: Maintainability
Occurrences: 1
Severity: error

Sample message

Tested up to: 7.0.2 The version number should only include major versions 7.0.

invalid_tested_upto_minor Reference

ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;1

Category: Maintainability
Occurrences: 1
Severity: error

Sample message

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

missing_direct_file_access_protection Reference

External Connections

Potential connections found in static code analysis.

4 domains

Outbound calls

External assets

Incoming endpoints

Notable Domains

webaim.org3 · outbound

bitron.hu2 · outbound

Platform / Reference Domains

gnu.org1 · platform/reference

wordpress.org1 · platform/reference

External Asset Domains

No external asset domains detected.

Incoming Endpoints

admin_post_nopriv_bitrow_submitpublic

admin_post

wp_ajax_nopriv_bitrow_log_transportpublic

wp_ajax

wp_ajax_nopriv_bitrow_otp_sendpublic

wp_ajax

wp_ajax_nopriv_bitrow_otp_verifypublic

wp_ajax

wp_ajax_nopriv_bitrow_submitpublic

wp_ajax

Admin AJAX endpoints13

admin_post_bitrow_dismiss_notify_failureauthenticated

admin_post

admin_post_bitrow_reopenauthenticated

admin_post

admin_post_bitrow_send_test_emailauthenticated

admin_post

admin_post_bitrow_set_closedauthenticated

admin_post

admin_post_bitrow_submitauthenticated

admin_post

wp_ajax_bitrow_install_onecodeauthenticated

wp_ajax

wp_ajax_bitrow_log_transportauthenticated

wp_ajax

wp_ajax_bitrow_otp_sendauthenticated

wp_ajax

wp_ajax_bitrow_otp_verifyauthenticated

wp_ajax

wp_ajax_bitrow_search_categoriesauthenticated

wp_ajax

wp_ajax_bitrow_search_pagesauthenticated

wp_ajax

wp_ajax_bitrow_search_productsauthenticated

wp_ajax

1 more hidden

Score History

First score snapshot

yesterday

v1.7.2

Latest

Findings: 17
Errors: 17
Warnings: 0
Check: 2.0.0

Scan	Score	Findings	Errors	Warnings	Plugin	Check
yesterdayLatest	76	17	17	0	v1.7.2	2.0.0

Relationship Map

Author, categories, issues, domains, and nearby plugins.

26 nodes

Loading map

PluginAuthorCategoryIssueDomainRelated

Relationship links

Related Plugins

Disable Emojis (GDPR friendly)

60k+ active installs

100

WF Cookie Consent

10k+ active installs

100

WS Form LITE – Drag & Drop Contact Form Builder

10k+ active installs

100

ResponsiveVoice Text To Speech

7k+ active installs

100

Definitely allow mobile zooming

7k+ active installs

100

Accessibility New Window Warnings

1k+ active installs

100

Bitron Right of Withdrawal

Accessible online withdrawal form. Built for the EU Consumer Rights Directive update effective 19 June 2026.

v1.7.2oaronUpdated 23 days agoAdded 3 months ago400 installs100% rating100% support resolved

GDPR accessibility consumer rights refund withdrawal

Score

Errors

Warnings

Change

Category Scores

Security57

Repo100

Performance100

Maintainability96

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

17 findings

Security

1 issue group

Maintainability

2 issue groups

ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$error'.15

Category: Security
Occurrences: 15
Severity: error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$error'.

WordPress.Security.EscapeOutput.OutputNotEscaped Reference

ERRORMaintainabilityinvalid tested upto minorTested up to: 7.0.2 The version number should only include major versions 7.0.1

Category: Maintainability
Occurrences: 1
Severity: error

Sample message

Tested up to: 7.0.2 The version number should only include major versions 7.0.

invalid_tested_upto_minor Reference

ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;1

Category: Maintainability
Occurrences: 1
Severity: error

Sample message

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

missing_direct_file_access_protection Reference

External Connections

Potential connections found in static code analysis.

4 domains

Outbound calls

External assets

Incoming endpoints

Notable Domains

webaim.org3 · outbound

bitron.hu2 · outbound

Platform / Reference Domains

gnu.org1 · platform/reference

wordpress.org1 · platform/reference

External Asset Domains

No external asset domains detected.

Incoming Endpoints

admin_post_nopriv_bitrow_submitpublic

admin_post

wp_ajax_nopriv_bitrow_log_transportpublic

wp_ajax

wp_ajax_nopriv_bitrow_otp_sendpublic

wp_ajax

wp_ajax_nopriv_bitrow_otp_verifypublic

wp_ajax

wp_ajax_nopriv_bitrow_submitpublic

wp_ajax

Admin AJAX endpoints13

admin_post_bitrow_dismiss_notify_failureauthenticated

admin_post

admin_post_bitrow_reopenauthenticated

admin_post

admin_post_bitrow_send_test_emailauthenticated

admin_post

admin_post_bitrow_set_closedauthenticated

admin_post

admin_post_bitrow_submitauthenticated

admin_post

wp_ajax_bitrow_install_onecodeauthenticated

wp_ajax

wp_ajax_bitrow_log_transportauthenticated

wp_ajax

wp_ajax_bitrow_otp_sendauthenticated

wp_ajax

wp_ajax_bitrow_otp_verifyauthenticated

wp_ajax

wp_ajax_bitrow_search_categoriesauthenticated

wp_ajax

wp_ajax_bitrow_search_pagesauthenticated

wp_ajax

wp_ajax_bitrow_search_productsauthenticated

wp_ajax

1 more hidden

Score History

First score snapshot

yesterday

v1.7.2

Latest

Findings: 17
Errors: 17
Warnings: 0
Check: 2.0.0

Scan	Score	Findings	Errors	Warnings	Plugin	Check
yesterdayLatest	76	17	17	0	v1.7.2	2.0.0

Relationship Map

Author, categories, issues, domains, and nearby plugins.

26 nodes

Loading map

PluginAuthorCategoryIssueDomainRelated

Relationship links

Plugin

Bitron Right of Withdrawal76 score

Author

oaronauthor

Category

GDPRcategory accessibilitycategory consumer rightscategory refundcategory withdrawalcategory

Issue

Output is not escaped15 findings invalid tested upto minor1 finding Missing direct file access protection1 finding

Domain

webaim.org3 signals bitron.hu2 signals

Plugin

Bitron Right of Withdrawal76 score

Author

oaronauthor

Category

GDPRcategory accessibilitycategory consumer rightscategory refundcategory withdrawalcategory

Issue

Output is not escaped15 findings invalid tested upto minor1 finding Missing direct file access protection1 finding

Domain

webaim.org3 signals bitron.hu2 signals

Related Plugins

Disable Emojis (GDPR friendly)

60k+ active installs

100

WF Cookie Consent

10k+ active installs

100

WS Form LITE – Drag & Drop Contact Form Builder

10k+ active installs

100

ResponsiveVoice Text To Speech

7k+ active installs

100

Definitely allow mobile zooming

7k+ active installs

100

Accessibility New Window Warnings

1k+ active installs

100