Official Cashfree Payment Gateway plugin for WooCommerce.
Category Scores
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Security
26
5 issue groups
I18n
10
4 issue groups
Maintainability
3
3 issue groups
Repo Compliance
3
3 issue groups
WARNINGSecurityRecommendedProcessing form data without nonce verification.9
- Category
- Security
- Occurrences
- 9
- Severity
- warning
Sample message
Processing form data without nonce verification.
ERRORSecurityOutput Not EscapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$price'.6
- Category
- Security
- Occurrences
- 6
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$price'.
WARNINGSecurityInput Not SanitizedDetected usage of a non-sanitized input variable: $_GET[$this->token_param]5
- Category
- Security
- Occurrences
- 5
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_GET[$this->token_param]
ERRORSecurityException Not EscapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$body'.4
- Category
- Security
- Occurrences
- 4
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$body'.
ERRORI18nMissing Translators CommentA function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.4
- Category
- I18n
- Occurrences
- 4
- Severity
- error
Sample message
A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.
ERRORI18nText Domain MismatchMismatched text domain. Expected 'cashfree' but got 'woocommerce'.3
- Category
- I18n
- Occurrences
- 3
- Severity
- error
Sample message
Mismatched text domain. Expected 'cashfree' but got 'woocommerce'.
WARNINGSecurityInput Not ValidatedDetected usage of a possibly undefined superglobal array index: $_GET['key']. Check that the array index exists before using it.2
- Category
- Security
- Occurrences
- 2
- Severity
- warning
Sample message
Detected usage of a possibly undefined superglobal array index: $_GET['key']. Check that the array index exists before using it.
ERRORI18nNon Singular String Literal TextThe $text parameter must be a single text string literal. Found: $post_data['transaction_msg']2
- Category
- I18n
- Occurrences
- 2
- Severity
- error
Sample message
The $text parameter must be a single text string literal. Found: $post_data['transaction_msg']
WARNINGMaintainabilityMissing VersionResource version not set in call to wp_register_script(). This means new versions of the script may not always be loaded due to browser caching.1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Resource version not set in call to wp_register_script(). This means new versions of the script may not always be loaded due to browser caching.
ERRORMaintainabilityNo Explicit VersionVersion parameter is not explicitly set or has been set to an equivalent of "false" for wp_register_script; This means that the WordPress core version will be used which is not recommended for plugin or theme development.1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
Version parameter is not explicitly set or has been set to an equivalent of "false" for wp_register_script; This means that the WordPress core version will be used which is not recommended for plugin or theme development.
Show 5 moreShow less
WARNINGMaintainabilitymismatched plugin name1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Plugin name "Cashfree for WooCommerce" is different from the name declared in plugin header "Cashfree".
ERRORRepo Complianceoutdated tested upto header1
- Category
- Repo Compliance
- Occurrences
- 1
- Severity
- error
Sample message
Tested up to: 6.8 < 7.0. The "Tested up to" value in your plugin is not set to the current version of WordPress. This means your plugin will not show up in searches, as we require plugins to be compatible and documented as tested up to the most recent version of WordPress.
WARNINGRepo Complianceplugin header nonexistent domain path1
- Category
- Repo Compliance
- Occurrences
- 1
- Severity
- warning
Sample message
The "Domain Path" header in the plugin file must point to an existing folder. Found: "languages"
WARNINGRepo Compliancereadme parser warnings ignored tags1
- Category
- Repo Compliance
- Occurrences
- 1
- Severity
- warning
Sample message
One or more tags were ignored. The following tags are not permitted: "plugin", "wordpress"
WARNINGI18ntextdomain mismatch1
- Category
- I18n
- Occurrences
- 1
- Severity
- warning
Sample message
The "Text Domain" header in the plugin file does not match the slug. Found "woocommerce-extension", expected "cashfree".
Score History
First score snapshot
v4.7.9
47
Latest
- Findings
- 42
- Errors
- 21
- Warnings
- 21
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 47 | 42 | 21 | 21 | v4.7.9 | 2.0.0 |
Related Plugins
40k+ active installs
3k+ active installs
3k+ active installs
30k+ active installs
7k+ active installs
5k+ active installs