Cities Shipping Zones for WooCommerce

WooCommerce plugin for turning the state field into a dropdown city field. To be used as Shipping Zones.

v1.3.2CondlessUpdated Added 4k+ installs98% rating
42
Score
94
Errors
44
Warnings
+0
Change

Category Scores

Security0
Repo94
Performance100
Maintainability91

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

138 findings

I18n

77

3 issue groups

Security

58

7 issue groups

Maintainability

2

1 issue group

Repo Compliance

1

1 issue group

ERRORI18nText Domain MismatchMismatched text domain. Expected 'cities-shipping-zones-for-woocommerce' but got 'cities-shippin-for-woocommerce'.70
Category
I18n
Occurrences
70
Severity
error

Sample message

Mismatched text domain. Expected 'cities-shipping-zones-for-woocommerce' but got 'cities-shippin-for-woocommerce'.

WARNINGSecurityMissing nonce verificationProcessing form data without nonce verification.17
Category
Security
Occurrences
17
Severity
warning

Sample message

Processing form data without nonce verification.

ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$shipping_country'.11
Category
Security
Occurrences
11
Severity
error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$shipping_country'.

WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_GET['new_state']10
Category
Security
Occurrences
10
Severity
warning

Sample message

Detected usage of a non-sanitized input variable: $_GET['new_state']

WARNINGSecurityRequest data is not unslashed$_GET['new_state'] not unslashed before sanitization. Use wp_unslash() or similar10
Category
Security
Occurrences
10
Severity
warning

Sample message

$_GET['new_state'] not unslashed before sanitization. Use wp_unslash() or similar

ERRORI18nMissing Arg DomainMissing $domain parameter in function call to __().6
Category
I18n
Occurrences
6
Severity
error

Sample message

Missing $domain parameter in function call to __().

ERRORSecurityUnsafe printing functionAll output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.4
Category
Security
Occurrences
4
Severity
error

Sample message

All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.

WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.4
Category
Security
Occurrences
4
Severity
warning

Sample message

Processing form data without nonce verification.

ERRORMaintainabilitydate datedate() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.2
Category
Maintainability
Occurrences
2
Severity
error

Sample message

date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.

WARNINGSecurityInput is not validatedDetected usage of a possibly undefined superglobal array index: $_POST['country']. Check that the array index exists before using it.2
Category
Security
Occurrences
2
Severity
warning

Sample message

Detected usage of a possibly undefined superglobal array index: $_POST['country']. Check that the array index exists before using it.

Show 2 more
WARNINGI18nDiscouraged text-domain loading1
Category
I18n
Occurrences
1
Severity
warning

Sample message

load_plugin_textdomain() has been discouraged since WordPress version 4.6. When your plugin is hosted on WordPress.org, you no longer need to manually include this function call for translations under your plugin slug. WordPress will automatically load the translations for you as needed.

ERRORRepo Compliancemismatched tested up to header1
Category
Repo Compliance
Occurrences
1
Severity
error

Sample message

Mismatched "Tested up to": 7.0 != 6.9. The "Tested up to" value in the readme file must match the "Tested up to" value in the plugin header. If the plugin header has a "Tested up to" value, it will override the readme value, which can cause confusion.

Score History

First score snapshot

v1.3.2

42

Latest

Findings
138
Errors
94
Warnings
44
Check
2.0.0

Related Plugins

100
98
Skydropx

1k+ active installs

88