Add a WhatsApp chat button, WooCommerce WhatsApp order button & click-to-chat floating widget. Capture leads & convert visitors via chat.
34
Score
34
Errors
189
Warnings
+0
Change
Category Scores
Security0
Repo100
Performance94
Maintainability49
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Maintainability
130
12 issue groups
Security
72
8 issue groups
Performance
8
1 issue group
I18n
7
4 issue groups
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$agent_initials".70
- Category
- Maintainability
- Occurrences
- 70
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$agent_initials".
ERRORMaintainabilitydate datedate() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.21
- Category
- Maintainability
- Occurrences
- 21
- Severity
- error
Sample message
date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.
WARNINGSecurityInterpolated SQL is not preparedUse placeholders and $wpdb->prepare(); found interpolated variable $date_where at FROM $table WHERE 1=1 $date_where $widget_where"18
- Category
- Security
- Occurrences
- 18
- Severity
- warning
Sample message
Use placeholders and $wpdb->prepare(); found interpolated variable $date_where at FROM $table WHERE 1=1 $date_where $widget_where"
WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.15
- Category
- Security
- Occurrences
- 15
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGSecurityRequest data is not unslashed$_POST['agentName'] not unslashed before sanitization. Use wp_unslash() or similar15
- Category
- Security
- Occurrences
- 15
- Severity
- warning
Sample message
$_POST['agentName'] not unslashed before sanitization. Use wp_unslash() or similar
WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.13
- Category
- Maintainability
- Occurrences
- 13
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().11
- Category
- Maintainability
- Occurrences
- 11
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
WARNINGPerformancePost Not In excludeUsing exclusionary parameters, like exclude, in calls to get_posts() should be done with caution, see https://wpvip.com/documentation/performance-improvements-by-removing-usage-of-post__not_in/ for more information.8
- Category
- Performance
- Occurrences
- 8
- Severity
- warning
Sample message
Using exclusionary parameters, like exclude, in calls to get_posts() should be done with caution, see https://wpvip.com/documentation/performance-improvements-by-removing-usage-of-post__not_in/ for more information.
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_POST['data']7
- Category
- Security
- Occurrences
- 7
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_POST['data']
WARNINGSecurityDatabase parameter is not escapedUnescaped parameter $leads_table used in $wpdb->get_results()\n$leads_table assigned unsafely at line 176.6
- Category
- Security
- Occurrences
- 6
- Severity
- warning
Sample message
Unescaped parameter $leads_table used in $wpdb->get_results()\n$leads_table assigned unsafely at line 176.
Show 15 moreShow less
WARNINGMaintainabilityNon-prefixed hook name5
- Category
- Maintainability
- Occurrences
- 5
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "appsero_custom_deactivation_reasons".
WARNINGSecurityInput is not validated5
- Category
- Security
- Occurrences
- 5
- Severity
- warning
Sample message
Detected usage of a possibly undefined superglobal array index: $_POST['data']. Check that the array index exists before using it.
ERRORSecurityDatabase parameter is not escaped4
- Category
- Security
- Occurrences
- 4
- Severity
- error
Sample message
Unescaped parameter $date_where used in $wpdb->get_results()\n$date_where used without escaping.
ERRORI18nMissing Translators Comment4
- Category
- I18n
- Occurrences
- 4
- Severity
- error
Sample message
A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.
WARNINGMaintainabilitySchema Change2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
Attempting a database schema change is discouraged.
WARNINGMaintainabilityNon-prefixed function2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "create_chat_help_block_init".
WARNINGSecurityMissing nonce verification2
- Category
- Security
- Occurrences
- 2
- Severity
- warning
Sample message
Processing form data without nonce verification.
ERRORMaintainabilitywp function not compatible with requires wp2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
Function "register_block_type_from_metadata()" requires WordPress 5.5.0, but your plugin minimum supported version is WordPress 5.0.0.
WARNINGI18nDiscouraged text-domain loading1
- Category
- I18n
- Occurrences
- 1
- Severity
- warning
Sample message
load_plugin_textdomain() has been discouraged since WordPress version 4.6. When your plugin is hosted on WordPress.org, you no longer need to manually include this function call for translations under your plugin slug. WordPress will automatically load the translations for you as needed.
WARNINGMaintainabilityDynamic hook name1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "$this->client->slug . '_tracker_data'".
WARNINGMaintainabilityNon-prefixed class1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "Elementor_Ctw_Buttons".
WARNINGMaintainabilityMissing Version1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Resource version not set in call to wp_enqueue_style(). This means new versions of the style may not always be loaded due to browser caching.
WARNINGMaintainabilityNot In Footer1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
In footer ($in_footer) is not set explicitly wp_enqueue_script; It is recommended to load scripts in the footer. Please set this value to `true` to load it in the footer, or explicitly `false` if it should be loaded in the header.
WARNINGI18nNo Html Wrapped Strings1
- Category
- I18n
- Occurrences
- 1
- Severity
- warning
Sample message
Translatable string should not be wrapped in HTML. Found: '<i>Enjoying %1$sWhatsApp Chat Help?%2$s Please rate us %3$sWordPress.org%4$s. Your positive feedback will help us grow more. Thank you! 😊</i>'
ERRORI18nNon Singular String Literal Text1
- Category
- I18n
- Occurrences
- 1
- Severity
- error
Sample message
The $text parameter must be a single text string literal. Found: 'No chat layout is created. Please <a href="' . admin_url( 'post-new.php?post_type=floating_widget' ) . '">create</a> a layout first.'
External Connections
Potential connections found in static code analysis.
Outbound calls
79
External assets
1
Incoming endpoints
11
Notable Domains
themeatelier.net38 · outbound
wpchathelp.com7 · outbound
wa.me3 · outbound
appsero.com2 · outbound
icofont.com2 · outbound
ipwhois.app2 · outbound
Platform / Reference Domains
w3.org7 · platform/reference
wordpress.org4 · platform/reference
github.com2 · platform/reference
api.wordpress.org1 · platform/reference
gnu.org1 · platform/reference
ps.w.org1 · platform/reference
External Asset Domains
fonts.googleapis.com1 · asset
Incoming Endpoints
/wp-json/chat-help/v1/analyticsREST
register_rest_route
/wp-json/chat-help/v1/analytics/chartREST
register_rest_route
/wp-json/chat-help/v1/analytics/devicesREST
register_rest_route
/wp-json/chat-help/v1/analytics/tablesREST
register_rest_route
/wp-json/chat-help/v1/analytics/trackREST
register_rest_route
/wp-json/chat-help/v1/leadsREST
register_rest_route
Admin AJAX endpoints3
wp_ajax_chat-help-never-show-review-noticeauthenticated
wp_ajax
wp_ajax_handle_form_submissionauthenticated
wp_ajax
wp_ajax_themeatelier_dismiss_offer_bannerauthenticated
wp_ajax
Score History
6 score snapshots
v3.5.4
34
Latest
- Findings
- 223
- Errors
- 34
- Warnings
- 189
- Check
- 2.0.0
v3.5.3
34
Score
- Findings
- 222
- Errors
- 34
- Warnings
- 188
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 34 | 223 | 34 | 189 | v3.5.4 | 2.0.0 |
| 34 | 222 | 34 | 188 | v3.5.3 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Author
Category
Issue
Domain
Related
Click to Chat – HoliThemes100 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce22 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder39 scoreLiteSpeed Cache35 scoreAkismet Anti-spam: Spam Protection35 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreRank Math SEO – AI SEO Tools to Dominate SEO Rankings30 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreJoinchat – Enhanced "click to chat"95 scoreMeta for WooCommerce94 scoreFloating Chat Widget: Contact Chat Icons, Telegram Chat, Line Messenger, WeChat, Email, SMS, Call Button – Chaty26 score
Author
Category
Issue
Domain
Related
Click to Chat – HoliThemes100 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce22 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder39 scoreLiteSpeed Cache35 scoreAkismet Anti-spam: Spam Protection35 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreRank Math SEO – AI SEO Tools to Dominate SEO Rankings30 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreJoinchat – Enhanced "click to chat"95 scoreMeta for WooCommerce94 scoreFloating Chat Widget: Contact Chat Icons, Telegram Chat, Line Messenger, WeChat, Email, SMS, Call Button – Chaty26 score
Related Plugins
Click to Chat – HoliThemes
700k+ active installs
100
Pulsating Chat Button
3k+ active installs
100
Floating Contact Button for MAX and Telegram
1k+ active installs
100
100
Spice Social Share
4k+ active installs
99
Bolt CTA Button – Floating Call Button for WordPress
1k+ active installs
99