WooCommerce AI Management, B2B Wholesale, Purchase Orders, Multi-store Dashboard, Quotes, Certified Zoho & Exact Online Integrations and more.
61
Score
3
Errors
162
Warnings
+0
Change
Category Scores
Security44
Repo100
Performance100
Maintainability61
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Maintainability
148
13 issue groups
Security
16
6 issue groups
I18n
1
1 issue group
WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.56
- Category
- Maintainability
- Occurrences
- 56
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().55
- Category
- Maintainability
- Occurrences
- 55
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
WARNINGMaintainabilityNon-prefixed hook nameHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "import_simple_items_cron".16
- Category
- Maintainability
- Occurrences
- 16
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "import_simple_items_cron".
WARNINGMaintainabilityslow db query meta queryDetected usage of meta_query, possible slow query.6
- Category
- Maintainability
- Occurrences
- 6
- Severity
- warning
Sample message
Detected usage of meta_query, possible slow query.
WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.6
- Category
- Security
- Occurrences
- 6
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGSecurityInterpolated SQL is not preparedUse placeholders and $wpdb->prepare(); found interpolated variable $placeholders at \t\t\t\tWHERE p.ID IN ($placeholders)"3
- Category
- Security
- Occurrences
- 3
- Severity
- warning
Sample message
Use placeholders and $wpdb->prepare(); found interpolated variable $placeholders at \t\t\t\tWHERE p.ID IN ($placeholders)"
WARNINGMaintainabilityslow db query meta keyDetected usage of meta_key, possible slow query.3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
Detected usage of meta_key, possible slow query.
WARNINGMaintainabilityslow db query meta valueDetected usage of meta_value, possible slow query.3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
Detected usage of meta_value, possible slow query.
WARNINGSecurityRequest data is not unslashed$_GET['category'] not unslashed before sanitization. Use wp_unslash() or similar3
- Category
- Security
- Occurrences
- 3
- Severity
- warning
Sample message
$_GET['category'] not unslashed before sanitization. Use wp_unslash() or similar
WARNINGSecurityUnfinished PrepareReplacement variables found, but no valid placeholders found in the query.2
- Category
- Security
- Occurrences
- 2
- Severity
- warning
Sample message
Replacement variables found, but no valid placeholders found in the query.
Show 10 moreShow less
WARNINGMaintainabilityslow db query tax query2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
Detected usage of tax_query, possible slow query.
WARNINGMaintainabilityNon-prefixed global variable2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$exact_online_sync".
ERRORMaintainabilityPlugin Directory Write1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
Plugin folders are deleted when upgraded. Do not save data to the plugin folder using copy(). Detected usage of constant WP_CONTENT_DIR. Use wp_upload_dir() to get the uploads directory path or save to the database instead.
WARNINGSecurityDatabase parameter is not escaped1
- Category
- Security
- Occurrences
- 1
- Severity
- warning
Sample message
Unescaped parameter $table used in $wpdb->query()\n$table assigned unsafely at line 438.
WARNINGMaintainabilitySchema Change1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Attempting a database schema change is discouraged.
WARNINGMaintainabilityNon-prefixed constant1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "FS_METHOD".
WARNINGSecurityInput is not sanitized1
- Category
- Security
- Occurrences
- 1
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_SERVER['REMOTE_ADDR']
ERRORI18nNon Singular String Literal Domain1
- Category
- I18n
- Occurrences
- 1
- Severity
- error
Sample message
The $domain parameter must be a single text string literal. Found: ‘commercebird’
WARNINGMaintainabilitymismatched plugin name1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Plugin name "CommerceBird – AI Command Center, ERP Integrations & B2B for WooCommerce (Zoho, Exact Online)." is different from the name declared in plugin header "CommerceBird".
ERRORMaintainabilityMissing direct file access protection1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
External Connections
Potential connections found in static code analysis.
Outbound calls
41
External assets
3
Incoming endpoints
18
Notable Domains
commercebird.com6 · outbound
modelcontextprotocol.io3 · outbound
dev.commercebird.com2 · outbound
php-fig.org2 · outbound
accounts.zoho1 · outbound
accounts.zohocloud.ca1 · outbound
Platform / Reference Domains
github.com8 · platform/reference
developer.wordpress.org4 · platform/reference
gnu.org3 · platform/reference
api.wordpress.org1 · platform/reference
downloads.wordpress.org1 · platform/reference
w3.org1 · platform/reference
External Asset Domains
fonts.googleapis.com2 · asset
fonts.gstatic.com1 · asset
Incoming Endpoints
wp_ajax_nopriv_public
wp_ajax
Admin AJAX endpoints17
admin_post_cmbird_generate_ai_review_summaryauthenticated
admin_post
wp_ajax_commercebird-app-check_category_mappingsauthenticated
wp_ajax
wp_ajax_dependency_installerauthenticated
wp_ajax
wp_ajax_wp_dismiss_noticeauthenticated
wp_ajax
wp_ajax_zi_customer_unmap_hookauthenticated
wp_ajax
wp_ajax_zi_product_unmap_hookauthenticated
wp_ajax
wp_ajax_zoho_admin_order_syncauthenticated
wp_ajax
wp_ajax_zoho_admin_product_syncauthenticated
wp_ajax
wp_ajax_zoho_ajax_call_check_category_mappingsauthenticated
wp_ajax
wp_ajax_zoho_ajax_call_duplicate_removal_batchauthenticated
wp_ajax
wp_ajax_zoho_ajax_call_duplicate_removal_statusauthenticated
wp_ajax
wp_ajax_zoho_ajax_call_parent_categoriesauthenticated
wp_ajax
5 more hidden
Score History
2 score snapshots
v3.0.3
61
Latest
- Findings
- 165
- Errors
- 3
- Warnings
- 162
- Check
- 2.0.0
v3.0.2
61
Score
- Findings
- 164
- Errors
- 3
- Warnings
- 161
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 61 | 165 | 3 | 162 | v3.0.3 | 2.0.0 |
| 61 | 164 | 3 | 161 | v3.0.2 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Author
Category
Issue
Domain
Related
B2BKing — Ultimate WooCommerce B2B and Wholesale Plugin — Wholesale Prices, Bulk Order Form & More23 scoreBotWriter – AI Writer & SEO Content Generator35 scoreWhols – Wholesale Prices and B2B Store Solution for WooCommerce27 scoreStifLi Flex MCP – MCP Server with undo for ChatGPT, Claude & Gemini41 scorePrivate Store for WooCommerce B2B & Wholesale by B2BKing70 scoreStoreAgent – WooCommerce AI Chatbot & AI Content Tools76 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder35 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce22 scoreAkismet Anti-spam: Spam Protection35 scoreLiteSpeed Cache35 scoreAll-in-One WP Migration and Backup34 score
Author
Category
Issue
Domain
Related
B2BKing — Ultimate WooCommerce B2B and Wholesale Plugin — Wholesale Prices, Bulk Order Form & More23 scoreBotWriter – AI Writer & SEO Content Generator35 scoreWhols – Wholesale Prices and B2B Store Solution for WooCommerce27 scoreStifLi Flex MCP – MCP Server with undo for ChatGPT, Claude & Gemini41 scorePrivate Store for WooCommerce B2B & Wholesale by B2BKing70 scoreStoreAgent – WooCommerce AI Chatbot & AI Content Tools76 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder35 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce22 scoreAkismet Anti-spam: Spam Protection35 scoreLiteSpeed Cache35 scoreAll-in-One WP Migration and Backup34 score
Related Plugins
StoreAgent – WooCommerce AI Chatbot & AI Content Tools
400 active installs
76
Private Store for WooCommerce B2B & Wholesale by B2BKing
600 active installs
70
StifLi Flex MCP – MCP Server with undo for ChatGPT, Claude & Gemini
1k+ active installs
41
BotWriter – AI Writer & SEO Content Generator
3k+ active installs
35
Whols – Wholesale Prices and B2B Store Solution for WooCommerce
2k+ active installs
27
