Free WooCommerce dashboard & sales report: abandoned cart recovery, Google Sheets sync, ROAS, bulk editor & inventory management
24
Score
4,562
Errors
1,535
Warnings
+0
Change
Category Scores
Security0
Repo100
Performance93
Maintainability0
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
I18n
4,319
3 issue groups
Security
1,097
12 issue groups
Maintainability
653
10 issue groups
ERRORI18nText Domain MismatchMismatched text domain. Expected 'brikpanel-admin-panel-dashboard-for-woocommerce' but got 'brikpanel'.4,251
- Category
- I18n
- Occurrences
- 4,251
- Severity
- error
Sample message
Mismatched text domain. Expected 'brikpanel-admin-panel-dashboard-for-woocommerce' but got 'brikpanel'.
WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.262
- Category
- Maintainability
- Occurrences
- 262
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().241
- Category
- Maintainability
- Occurrences
- 241
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
WARNINGSecurityMissing nonce verificationProcessing form data without nonce verification.214
- Category
- Security
- Occurrences
- 214
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGSecurityInterpolated SQL is not preparedUse placeholders and $wpdb->prepare(); found interpolated variable $parent_list at AND post_parent IN ($parent_list)"165
- Category
- Security
- Occurrences
- 165
- Severity
- warning
Sample message
Use placeholders and $wpdb->prepare(); found interpolated variable $parent_list at AND post_parent IN ($parent_list)"
WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.141
- Category
- Security
- Occurrences
- 141
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGSecurityDatabase parameter is not escapedUnescaped parameter $cost['value'] used in $wpdb->get_row()\n$cost['value'] used without escaping.133
- Category
- Security
- Occurrences
- 133
- Severity
- warning
Sample message
Unescaped parameter $cost['value'] used in $wpdb->get_row()\n$cost['value'] used without escaping.
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_FILES['brikpanel_import_file']['tmp_name']104
- Category
- Security
- Occurrences
- 104
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_FILES['brikpanel_import_file']['tmp_name']
WARNINGSecurityRequest data is not unslashed$_GET['page'] not unslashed before sanitization. Use wp_unslash() or similar96
- Category
- Security
- Occurrences
- 96
- Severity
- warning
Sample message
$_GET['page'] not unslashed before sanitization. Use wp_unslash() or similar
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"<style id=\"brikpanel-appearance-overrides\">{$css}</style>"'.79
- Category
- Security
- Occurrences
- 79
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"<style id=\"brikpanel-appearance-overrides\">{$css}</style>"'.
Show 15 moreShow less
WARNINGMaintainabilityNon-prefixed global variable77
- Category
- Maintainability
- Occurrences
- 77
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$$key".
ERRORSecuritySQL query is not prepared72
- Category
- Security
- Occurrences
- 72
- Severity
- error
Sample message
Use placeholders and $wpdb->prepare(); found $city_base
ERRORI18nMissing Translators Comment62
- Category
- I18n
- Occurrences
- 62
- Severity
- error
Sample message
A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.
WARNINGMaintainabilityNon-prefixed hook name42
- Category
- Maintainability
- Occurrences
- 42
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "'woocommerce_process_product_meta_' . $post_type_key".
ERRORSecurityException output is not escaped41
- Category
- Security
- Occurrences
- 41
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$code'.
ERRORSecurityDatabase parameter is not escaped26
- Category
- Security
- Occurrences
- 26
- Severity
- error
Sample message
Unescaped parameter $city_base used in $wpdb->get_results()\n$city_base assigned unsafely at line 2900.
WARNINGSecurityUnfinished Prepare15
- Category
- Security
- Occurrences
- 15
- Severity
- warning
Sample message
Replacement variables found, but no valid placeholders found in the query.
WARNINGSecurityReplacements Wrong Number11
- Category
- Security
- Occurrences
- 11
- Severity
- warning
Sample message
Incorrect number of replacements passed to $wpdb->prepare(). Found 1 replacement parameters, expected 2.
WARNINGMaintainabilityerror log error log7
- Category
- Maintainability
- Occurrences
- 7
- Severity
- warning
Sample message
error_log() found. Debug code should not normally be used in production.
ERRORMaintainabilityfile system operations fclose6
- Category
- Maintainability
- Occurrences
- 6
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fclose().
ERRORMaintainabilityfile system operations fwrite6
- Category
- Maintainability
- Occurrences
- 6
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fwrite().
ERRORI18nUnordered Placeholders Text6
- Category
- I18n
- Occurrences
- 6
- Severity
- error
Sample message
Multiple placeholders in translatable strings should be ordered. Expected "%1$d, %2$s", but got "%d, %s" in 'clamped to %d days since tracking start (%s)'.
WARNINGMaintainabilityDiscouraged PHP function5
- Category
- Maintainability
- Occurrences
- 5
- Severity
- warning
Sample message
The use of function set_time_limit() is discouraged
WARNINGMaintainabilityslow db query tax query4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- warning
Sample message
Detected usage of tax_query, possible slow query.
ERRORMaintainabilityNot Allowed3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- error
Sample message
Use of heredoc syntax (<<<) is not allowed; use standard strings or inline HTML instead
External Connections
Potential connections found in static code analysis.
Outbound calls
133
External assets
0
Incoming endpoints
100
Notable Domains
brksoft.com25 · outbound
schemas.openxmlformats.org11 · outbound
vimeo.com10 · outbound
wa.me7 · outbound
googleapis.com5 · outbound
docs.google.com2 · outbound
Platform / Reference Domains
w3.org52 · platform/reference
wordpress.org4 · platform/reference
developer.wordpress.org1 · platform/reference
github.com1 · platform/reference
gnu.org1 · platform/reference
External Asset Domains
No external asset domains detected.
Incoming Endpoints
No public endpoints detected.
Admin AJAX endpoints100
admin_post_brikpanel_dashboard_exportauthenticated
admin_post
admin_post_brikpanel_export_selected_productsauthenticated
admin_post
admin_post_brikpanel_export_settingsauthenticated
admin_post
admin_post_brikpanel_import_settingsauthenticated
admin_post
wp_ajax_brikpanel_add_brandauthenticated
wp_ajax
wp_ajax_brikpanel_add_categoryauthenticated
wp_ajax
wp_ajax_brikpanel_ads_clear_logauthenticated
wp_ajax
wp_ajax_brikpanel_ads_list_accountsauthenticated
wp_ajax
wp_ajax_brikpanel_ads_oauth_disconnectauthenticated
wp_ajax
wp_ajax_brikpanel_ads_oauth_startauthenticated
wp_ajax
wp_ajax_brikpanel_ads_save_login_customerauthenticated
wp_ajax
wp_ajax_brikpanel_ads_save_primaryauthenticated
wp_ajax
88 more hidden
Score History
20 score snapshots
v3.2.44
24
Latest
- Findings
- 6,097
- Errors
- 4,562
- Warnings
- 1,535
- Check
- 2.0.0
v3.2.42
24
Score
- Findings
- 6,086
- Errors
- 4,551
- Warnings
- 1,535
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 24 | 6,097 | 4,562 | 1,535 | v3.2.44 | 2.0.0 |
| 24 | 6,086 | 4,551 | 1,535 | v3.2.42 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Author
Category
Issue
Domain
Related
GSheetConnector – CF7 Google Sheets Connector & Save CF7 Entries to Database92 scoreFormsDB – Save Elementor Forms to Google Sheets & Post Type99 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder39 scoreWooCommerce22 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreAkismet Anti-spam: Spam Protection35 scoreAll-in-One WP Migration and Backup34 scoreJetpack – WP Security, Backup, Speed, & Growth22 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreAdvanced Custom Fields (ACF®)23 scoreOttoKit: All-in-One Automation Platform25 score
Author
Category
Issue
Domain
Related
GSheetConnector – CF7 Google Sheets Connector & Save CF7 Entries to Database92 scoreFormsDB – Save Elementor Forms to Google Sheets & Post Type99 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder39 scoreWooCommerce22 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreAkismet Anti-spam: Spam Protection35 scoreAll-in-One WP Migration and Backup34 scoreJetpack – WP Security, Backup, Speed, & Growth22 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreAdvanced Custom Fields (ACF®)23 scoreOttoKit: All-in-One Automation Platform25 score
Related Plugins
FormsDB – Save Elementor Forms to Google Sheets & Post Type
20k+ active installs
99
Connect Elementor Forms to Google Sheets Addon
800 active installs
99
99
SheetDB – get your Google Spreadsheet data
700 active installs
98
97
GSheetConnector – CF7 Google Sheets Connector & Save CF7 Entries to Database
40k+ active installs
92