Win back abandoned carts with automatic SMS reminders in 30+ languages, with a single-use discount applied when the shopper taps through.
49
Score
0
Errors
98
Warnings
+0
Change
Category Scores
Security18
Repo100
Performance100
Maintainability69
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Maintainability
62
16 issue groups
Security
36
7 issue groups
WARNINGSecurityDatabase parameter is not escapedUnescaped parameter $full used in $wpdb->get_var()\n$full assigned unsafely at line 403.16
- Category
- Security
- Occurrences
- 16
- Severity
- warning
Sample message
Unescaped parameter $full used in $wpdb->get_var()\n$full assigned unsafely at line 403.
WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.13
- Category
- Maintainability
- Occurrences
- 13
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().12
- Category
- Maintainability
- Occurrences
- 12
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
WARNINGSecurityInterpolated SQL is not preparedUse placeholders and $wpdb->prepare(); found interpolated variable {$rearm} at "delivery_token = {$rearm}, "11
- Category
- Security
- Occurrences
- 11
- Severity
- warning
Sample message
Use placeholders and $wpdb->prepare(); found interpolated variable {$rearm} at "delivery_token = {$rearm}, "
WARNINGMaintainabilityNon-prefixed hook nameHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "cb_discount_manager_executed".8
- Category
- Maintainability
- Occurrences
- 8
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "cb_discount_manager_executed".
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$cb_blocks_consent_ok".8
- Category
- Maintainability
- Occurrences
- 8
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$cb_blocks_consent_ok".
WARNINGMaintainabilityDynamic hook nameHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "self::HOOK_AFTER".5
- Category
- Maintainability
- Occurrences
- 5
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "self::HOOK_AFTER".
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_COOKIE[$key]4
- Category
- Security
- Occurrences
- 4
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_COOKIE[$key]
WARNINGMaintainabilityNon-prefixed functionFunctions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "activate_cartboss".3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "activate_cartboss".
WARNINGMaintainabilityDiscouraged PHP functionThe use of function set_time_limit() is discouraged2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
The use of function set_time_limit() is discouraged
Show 13 moreShow less
WARNINGMaintainabilityslow db query meta query2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
Detected usage of meta_query, possible slow query.
WARNINGMaintainabilityerror log trigger error2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
trigger_error() found. Debug code should not normally be used in production.
WARNINGSecurityMissing nonce verification2
- Category
- Security
- Occurrences
- 2
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGMaintainabilityDefine WP DEBUG1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Detected production-time change to PHP error reporting: define().
WARNINGMaintainabilityDefine WP DEBUG DISPLAY1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Detected production-time change to PHP error reporting: define().
WARNINGMaintainabilityDefine WP DEBUG LOG1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Detected production-time change to PHP error reporting: define().
WARNINGMaintainabilitySchema Change1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Attempting a database schema change is discouraged.
WARNINGSecurityReplacements Wrong Number1
- Category
- Security
- Occurrences
- 1
- Severity
- warning
Sample message
Incorrect number of replacements passed to $wpdb->prepare(). Found 11 replacement parameters, expected 10.
WARNINGMaintainabilityNon-prefixed class1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "UnrecognizedClientException".
WARNINGMaintainabilityerror log error log1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
error_log() found. Debug code should not normally be used in production.
WARNINGMaintainabilityerror log set error handler1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
set_error_handler() found. Debug code should not normally be used in production.
WARNINGSecurityNonce verification recommended1
- Category
- Security
- Occurrences
- 1
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGSecurityRequest data is not unslashed1
- Category
- Security
- Occurrences
- 1
- Severity
- warning
Sample message
$_COOKIE[$name] not unslashed before sanitization. Use wp_unslash() or similar
External Connections
Potential connections found in static code analysis.
Outbound calls
78
External assets
0
Incoming endpoints
5
Notable Domains
php.net12 · outbound
cartboss.io9 · outbound
app.cartboss.io8 · outbound
bugs.php.net4 · outbound
tools.ietf.org3 · outbound
unicode.org3 · outbound
Platform / Reference Domains
github.com10 · platform/reference
opensource.org2 · platform/reference
wordpress.org2 · platform/reference
gnu.org1 · platform/reference
w3.org1 · platform/reference
External Asset Domains
No external asset domains detected.
Incoming Endpoints
wp_ajax_nopriv_{$this->action}public
wp_ajax
Admin AJAX endpoints4
admin_post_cartboss_drop_duplicateauthenticated
admin_post
admin_post_cartboss_form_saveauthenticated
admin_post
wp_ajax_{$this->action}authenticated
wp_ajax
wp_ajax_cartboss_save_keyauthenticated
wp_ajax
Score History
4 score snapshots
v4.5.7
49
Latest
- Findings
- 98
- Errors
- 0
- Warnings
- 98
- Check
- 2.1.0
v4.5.5
49
Score
- Findings
- 97
- Errors
- 0
- Warnings
- 97
- Check
- 2.1.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 49 | 98 | 0 | 98 | v4.5.7 | 2.1.0 |
| 49 | 97 | 0 | 97 | v4.5.5 | 2.1.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Author
Category
Issue
Domain
Related
Elementor Website Builder – more than just a page builder38 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce22 scoreAkismet Anti-spam: Spam Protection35 scoreContact Form 769 scoreLiteSpeed Cache35 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreAll-in-One WP Migration and Backup34 scoreCart Abandonment Recovery for WooCommerce – Recover Lost Sales with Automated Emails26 scoreNewsletters, Email Marketing, SMS and Popups by Omnisend35 scoreEmail Marketing for WooCommerce by Omnisend35 scoreافزونه پیامک ووکامرس | Persian WooCommerce SMS31 scoreBooster for WooCommerce – PDF Invoices, Abandoned Cart, Variation Swatches & 100+ Tools20 scoreBrevo for WooCommerce30 score
Author
Category
Issue
Domain
Related
Elementor Website Builder – more than just a page builder38 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce22 scoreAkismet Anti-spam: Spam Protection35 scoreContact Form 769 scoreLiteSpeed Cache35 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreAll-in-One WP Migration and Backup34 scoreCart Abandonment Recovery for WooCommerce – Recover Lost Sales with Automated Emails26 scoreNewsletters, Email Marketing, SMS and Popups by Omnisend35 scoreEmail Marketing for WooCommerce by Omnisend35 scoreافزونه پیامک ووکامرس | Persian WooCommerce SMS31 scoreBooster for WooCommerce – PDF Invoices, Abandoned Cart, Variation Swatches & 100+ Tools20 scoreBrevo for WooCommerce30 score
Related Plugins
100
Recapture for Easy Digital Downloads
600 active installs
99
TextMe SMS
500 active installs
99
Cancel Abandoned Order
1k+ active installs
98
79
Moosend Website Connector
1k+ active installs
64