CommerceBird – Multi-store Dashboard, ERP Integrations & B2B for WooCommerce (Zoho, Exact Online).

WooCommerce AI Management, B2B Wholesale, Purchase Orders, PDF Invoices, Quotes, Certified Zoho & Exact Online Integrations and more.

v3.1.0CommerceBirdUpdated 4 days agoAdded 2 years ago400 installs100% rating100% support resolved

WooCommerce AI woocommerce b2b woocommerce exact online woocommerce mcp woocommerce zoho integration

Score

Errors

144

Warnings

Change

Category Scores

Security57

Repo100

Performance100

Maintainability65

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

144 findings

Maintainability

132

11 issue groups

Security

5 issue groups

WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.45

Category: Maintainability
Occurrences: 45
Severity: warning

Sample message

Use of a direct database call is discouraged.

WordPress.DB.DirectDatabaseQuery.DirectQuery

WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().44

Category: Maintainability
Occurrences: 44
Severity: warning

Sample message

Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().

WordPress.DB.DirectDatabaseQuery.NoCaching

WARNINGMaintainabilityNon-prefixed hook nameHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "import_simple_items_cron".18

Category: Maintainability
Occurrences: 18
Severity: warning

Sample message

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "import_simple_items_cron".

WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedHooknameFound

WARNINGMaintainabilityslow db query meta queryDetected usage of meta_query, possible slow query.7

Category: Maintainability
Occurrences: 7
Severity: warning

Sample message

Detected usage of meta_query, possible slow query.

WordPress.DB.SlowDBQuery.slow_db_query_meta_query

WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$context".6

Category: Maintainability
Occurrences: 6
Severity: warning

Sample message

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$context".

WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedVariableFound

WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.6

Category: Security
Occurrences: 6
Severity: warning

Sample message

Processing form data without nonce verification.

WordPress.Security.NonceVerification.Recommended

WARNINGMaintainabilityslow db query meta keyDetected usage of meta_key, possible slow query.3

Category: Maintainability
Occurrences: 3
Severity: warning

Sample message

Detected usage of meta_key, possible slow query.

WordPress.DB.SlowDBQuery.slow_db_query_meta_key

WARNINGMaintainabilityslow db query meta valueDetected usage of meta_value, possible slow query.3

Category: Maintainability
Occurrences: 3
Severity: warning

Sample message

Detected usage of meta_value, possible slow query.

WordPress.DB.SlowDBQuery.slow_db_query_meta_value

WARNINGSecurityRequest data is not unslashed$_GET['category'] not unslashed before sanitization. Use wp_unslash() or similar3

Category: Security
Occurrences: 3
Severity: warning

Sample message

$_GET['category'] not unslashed before sanitization. Use wp_unslash() or similar

WordPress.Security.ValidatedSanitizedInput.MissingUnslash

WARNINGMaintainabilityslow db query tax queryDetected usage of tax_query, possible slow query.2

Category: Maintainability
Occurrences: 2
Severity: warning

Sample message

Detected usage of tax_query, possible slow query.

WordPress.DB.SlowDBQuery.slow_db_query_tax_query

Show 6 more

WARNINGMaintainabilityNon-prefixed constant2

Category: Maintainability
Occurrences: 2
Severity: warning

Sample message

Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "FS_METHOD".

WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedConstantFound

WARNINGSecurityDatabase parameter is not escaped1

Category: Security
Occurrences: 1
Severity: warning

Sample message

Unescaped parameter $table used in $wpdb->query()\n$table assigned unsafely at line 438.

PluginCheck.Security.DirectDB.UnescapedDBParameter

WARNINGMaintainabilitySchema Change1

Category: Maintainability
Occurrences: 1
Severity: warning

Sample message

Attempting a database schema change is discouraged.

WordPress.DB.DirectDatabaseQuery.SchemaChange

WARNINGSecurityInterpolated SQL is not prepared1

Category: Security
Occurrences: 1
Severity: warning

Sample message

Use placeholders and $wpdb->prepare(); found interpolated variable {$table} at "INSERT IGNORE INTO {$table}\n

WordPress.DB.PreparedSQL.InterpolatedNotPrepared

WARNINGSecurityInput is not sanitized1

Category: Security
Occurrences: 1
Severity: warning

Sample message

Detected usage of a non-sanitized input variable: $_SERVER['REMOTE_ADDR']

WordPress.Security.ValidatedSanitizedInput.InputNotSanitized

WARNINGMaintainabilitymismatched plugin name1

Category: Maintainability
Occurrences: 1
Severity: warning

Sample message

Plugin name "CommerceBird – Multi-store Dashboard, ERP Integrations & B2B for WooCommerce (Zoho, Exact Online)." is different from the name declared in plugin header "CommerceBird".

mismatched_plugin_name Reference

External Connections

Potential connections found in static code analysis.

24 domains

Outbound calls

External assets

Incoming endpoints

Notable Domains

commercebird.com5 · outbound

modelcontextprotocol.io3 · outbound

dev.commercebird.com2 · outbound

php-fig.org2 · outbound

accounts.zoho1 · outbound

accounts.zohocloud.ca1 · outbound

Platform / Reference Domains

github.com8 · platform/reference

developer.wordpress.org4 · platform/reference

gnu.org3 · platform/reference

api.wordpress.org1 · platform/reference

downloads.wordpress.org1 · platform/reference

w3.org1 · platform/reference

External Asset Domains

fonts.googleapis.com2 · asset

fonts.gstatic.com1 · asset

Incoming Endpoints

wp_ajax_nopriv_public

wp_ajax

Admin AJAX endpoints17

admin_post_cmbird_generate_ai_review_summaryauthenticated

admin_post

wp_ajax_commercebird-app-check_category_mappingsauthenticated

wp_ajax

wp_ajax_dependency_installerauthenticated

wp_ajax

wp_ajax_wp_dismiss_noticeauthenticated

wp_ajax

wp_ajax_zi_customer_unmap_hookauthenticated

wp_ajax

wp_ajax_zi_product_unmap_hookauthenticated

wp_ajax

wp_ajax_zoho_admin_order_syncauthenticated

wp_ajax

wp_ajax_zoho_admin_product_syncauthenticated

wp_ajax

wp_ajax_zoho_ajax_call_check_category_mappingsauthenticated

wp_ajax

wp_ajax_zoho_ajax_call_duplicate_removal_batchauthenticated

wp_ajax

wp_ajax_zoho_ajax_call_duplicate_removal_statusauthenticated

wp_ajax

wp_ajax_zoho_ajax_call_parent_categoriesauthenticated

wp_ajax

5 more hidden

Score History

6 score snapshots

3 days ago

v3.1.0

Latest

Findings: 144
Errors: 0
Warnings: 144
Check: 2.1.0

9 days ago

v3.0.6

Score

Findings: 160
Errors: 3
Warnings: 157
Check: 2.0.0

Scan	Score	Findings	Errors	Warnings	Plugin	Check
3 days agoLatest	69	144	0	144	v3.1.0	2.1.0
9 days ago	63	160	3	157	v3.0.6	2.0.0

Relationship Map

Author, categories, issues, domains, and nearby plugins.

37 nodes

Loading map

PluginAuthorCategoryIssueDomainRelated

Relationship links

Issue

Domain

400 active installs

AI Chatbot for WooCommerce – StoreAgent

500 active installs

Private Store for WooCommerce B2B & Wholesale by B2BKing

600 active installs

StifLi Flex MCP – MCP Server with undo for ChatGPT, Claude & Gemini

1k+ active installs

BotWriter – AI Writer & SEO Content Generator

3k+ active installs

Whols – Wholesale Prices and B2B Store Solution for WooCommerce

2k+ active installs

CommerceBird – Multi-store Dashboard, ERP Integrations & B2B for WooCommerce (Zoho, Exact Online).

WooCommerce AI Management, B2B Wholesale, Purchase Orders, PDF Invoices, Quotes, Certified Zoho & Exact Online Integrations and more.

v3.1.0CommerceBirdUpdated 4 days agoAdded 2 years ago400 installs100% rating100% support resolved

WooCommerce AI woocommerce b2b woocommerce exact online woocommerce mcp woocommerce zoho integration

Score

Errors

144

Warnings

Change

Category Scores

Security57

Repo100

Performance100

Maintainability65

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

144 findings

Maintainability

132

11 issue groups

Security

5 issue groups

WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.45

Category: Maintainability
Occurrences: 45
Severity: warning

Sample message

Use of a direct database call is discouraged.

WordPress.DB.DirectDatabaseQuery.DirectQuery

WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().44

Category: Maintainability
Occurrences: 44
Severity: warning

Sample message

Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().

WordPress.DB.DirectDatabaseQuery.NoCaching

WARNINGMaintainabilityNon-prefixed hook nameHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "import_simple_items_cron".18

Category: Maintainability
Occurrences: 18
Severity: warning

Sample message

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "import_simple_items_cron".

WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedHooknameFound

WARNINGMaintainabilityslow db query meta queryDetected usage of meta_query, possible slow query.7

Category: Maintainability
Occurrences: 7
Severity: warning

Sample message

Detected usage of meta_query, possible slow query.

WordPress.DB.SlowDBQuery.slow_db_query_meta_query

WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$context".6

Category: Maintainability
Occurrences: 6
Severity: warning

Sample message

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$context".

WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedVariableFound

WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.6

Category: Security
Occurrences: 6
Severity: warning

Sample message

Processing form data without nonce verification.

WordPress.Security.NonceVerification.Recommended

WARNINGMaintainabilityslow db query meta keyDetected usage of meta_key, possible slow query.3

Category: Maintainability
Occurrences: 3
Severity: warning

Sample message

Detected usage of meta_key, possible slow query.

WordPress.DB.SlowDBQuery.slow_db_query_meta_key

WARNINGMaintainabilityslow db query meta valueDetected usage of meta_value, possible slow query.3

Category: Maintainability
Occurrences: 3
Severity: warning

Sample message

Detected usage of meta_value, possible slow query.

WordPress.DB.SlowDBQuery.slow_db_query_meta_value

WARNINGSecurityRequest data is not unslashed$_GET['category'] not unslashed before sanitization. Use wp_unslash() or similar3

Category: Security
Occurrences: 3
Severity: warning

Sample message

$_GET['category'] not unslashed before sanitization. Use wp_unslash() or similar

WordPress.Security.ValidatedSanitizedInput.MissingUnslash

WARNINGMaintainabilityslow db query tax queryDetected usage of tax_query, possible slow query.2

Category: Maintainability
Occurrences: 2
Severity: warning

Sample message

Detected usage of tax_query, possible slow query.

WordPress.DB.SlowDBQuery.slow_db_query_tax_query

Show 6 more

WARNINGMaintainabilityNon-prefixed constant2

Category: Maintainability
Occurrences: 2
Severity: warning

Sample message

Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "FS_METHOD".

WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedConstantFound

WARNINGSecurityDatabase parameter is not escaped1

Category: Security
Occurrences: 1
Severity: warning

Sample message

Unescaped parameter $table used in $wpdb->query()\n$table assigned unsafely at line 438.

PluginCheck.Security.DirectDB.UnescapedDBParameter

WARNINGMaintainabilitySchema Change1

Category: Maintainability
Occurrences: 1
Severity: warning

Sample message

Attempting a database schema change is discouraged.

WordPress.DB.DirectDatabaseQuery.SchemaChange

WARNINGSecurityInterpolated SQL is not prepared1

Category: Security
Occurrences: 1
Severity: warning

Sample message

Use placeholders and $wpdb->prepare(); found interpolated variable {$table} at "INSERT IGNORE INTO {$table}\n

WordPress.DB.PreparedSQL.InterpolatedNotPrepared

WARNINGSecurityInput is not sanitized1

Category: Security
Occurrences: 1
Severity: warning

Sample message

Detected usage of a non-sanitized input variable: $_SERVER['REMOTE_ADDR']

WordPress.Security.ValidatedSanitizedInput.InputNotSanitized

WARNINGMaintainabilitymismatched plugin name1

Category: Maintainability
Occurrences: 1
Severity: warning

Sample message

Plugin name "CommerceBird – Multi-store Dashboard, ERP Integrations & B2B for WooCommerce (Zoho, Exact Online)." is different from the name declared in plugin header "CommerceBird".

mismatched_plugin_name Reference