Transform your WooCommerce site into a multivendor marketplace with Dokan – an AI powered & advanced WooCommerce marketplace solution
23
Score
172
Errors
821
Warnings
+0
Change
Category Scores
Security0
Repo90
Performance90
Maintainability0
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Maintainability
847
15 issue groups
Security
125
8 issue groups
Performance
10
2 issue groups
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$_featured".580
- Category
- Maintainability
- Occurrences
- 580
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$_featured".
ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;118
- Category
- Maintainability
- Occurrences
- 118
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.44
- Category
- Maintainability
- Occurrences
- 44
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().39
- Category
- Maintainability
- Occurrences
- 39
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_GET['product_search_name']31
- Category
- Security
- Occurrences
- 31
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_GET['product_search_name']
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$edit_url'.30
- Category
- Security
- Occurrences
- 30
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$edit_url'.
WARNINGSecurityMissing nonce verificationProcessing form data without nonce verification.22
- Category
- Security
- Occurrences
- 22
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGMaintainabilityDynamic hook nameHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "$hook_prefix . 'after_insert'".20
- Category
- Maintainability
- Occurrences
- 20
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "$hook_prefix . 'after_insert'".
WARNINGMaintainabilityNon-prefixed hook nameHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "admin_head".19
- Category
- Maintainability
- Occurrences
- 19
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "admin_head".
WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.18
- Category
- Security
- Occurrences
- 18
- Severity
- warning
Sample message
Processing form data without nonce verification.
Show 15 moreShow less
ERRORSecurityException output is not escaped9
- Category
- Security
- Occurrences
- 9
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$id'.
WARNINGSecurityDatabase parameter is not escaped8
- Category
- Security
- Occurrences
- 8
- Severity
- warning
Sample message
Unescaped parameter $query_statement used in $wpdb->get_var()\n$query_statement assigned unsafely at line 85.
WARNINGMaintainabilityerror log error log6
- Category
- Maintainability
- Occurrences
- 6
- Severity
- warning
Sample message
error_log() found. Debug code should not normally be used in production.
WARNINGPerformancePost Not In exclude6
- Category
- Performance
- Occurrences
- 6
- Severity
- warning
Sample message
Using exclusionary parameters, like exclude, in calls to get_posts() should be done with caution, see https://docs.wpvip.com/databases/optimize-queries/using-post__not_in/ for more information.
WARNINGMaintainabilityerror log wp debug backtrace summary5
- Category
- Maintainability
- Occurrences
- 5
- Severity
- warning
Sample message
wp_debug_backtrace_summary() found. Debug code should not normally be used in production.
ERRORSecuritySQL query is not prepared4
- Category
- Security
- Occurrences
- 4
- Severity
- error
Sample message
Use placeholders and $wpdb->prepare(); found $permission_query
WARNINGMaintainabilityNon-prefixed function4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- warning
Sample message
Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "check_more_seller_product_tab".
WARNINGPerformancePost Not In post not in4
- Category
- Performance
- Occurrences
- 4
- Severity
- warning
Sample message
Using exclusionary parameters, like post__not_in, in calls to get_posts() should be done with caution, see https://docs.wpvip.com/databases/optimize-queries/using-post__not_in/ for more information.
WARNINGSecurityUnfinished Prepare3
- Category
- Security
- Occurrences
- 3
- Severity
- warning
Sample message
Replacement variables found, but no valid placeholders found in the query.
WARNINGMaintainabilityDirect Integration2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
Direct integration with a third-party AI provider (api.openai.com) detected. Consider the WordPress AI Client (wp_ai_client_prompt()) introduced in WordPress 7.0.
ERRORMaintainabilityOffloaded Content2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
Offloading images, js, css, and other scripts to your servers or any remote service is disallowed.
WARNINGMaintainabilityslow db query meta value2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
Detected usage of meta_value, possible slow query.
WARNINGMaintainabilityerror log print r2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
print_r() found. Debug code should not normally be used in production.
ERRORMaintainabilitybadly named files2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
File and folder names must not contain spaces or special characters.
ERRORMaintainabilityfive star reviews detected2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
Linking directly to 5 stars reviews is not allowed.
External Connections
Potential connections found in static code analysis.
Outbound calls
293
External assets
0
Incoming endpoints
7
Notable Domains
dokan.co98 · outbound
jqueryvalidation.org32 · outbound
jqueryui.com21 · outbound
quilljs.com16 · outbound
jquery.org14 · outbound
core-dokan.test7 · outbound
Platform / Reference Domains
w3.org36 · platform/reference
github.com10 · platform/reference
opensource.org4 · platform/reference
wordpress.org3 · platform/reference
gnu.org2 · platform/reference
External Asset Domains
No external asset domains detected.
Incoming Endpoints
No public endpoints detected.
Admin AJAX endpoints7
wp_ajax_dismiss_dokan_admin_logo_update_noticeauthenticated
wp_ajax
wp_ajax_dokan_ask_for_review_notice_actionauthenticated
wp_ajax
wp_ajax_dokan_dismiss_limited_time_promotional_noticeauthenticated
wp_ajax
wp_ajax_dokan_product_search_authorauthenticated
wp_ajax
wp_ajax_dokan-dismiss-upgrade-promotional-noticeauthenticated
wp_ajax
wp_ajax_dokan-dismiss-wp-pointerauthenticated
wp_ajax
wp_ajax_dokan-whats-new-noticeauthenticated
wp_ajax
Score History
18 score snapshots
v5.1.2
23
Latest
- Findings
- 993
- Errors
- 172
- Warnings
- 821
- Check
- 2.1.0
v5.1.1
23
Score
- Findings
- 993
- Errors
- 172
- Warnings
- 821
- Check
- 2.1.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 23 | 993 | 172 | 821 | v5.1.2 | 2.1.0 |
| 23 | 993 | 172 | 821 | v5.1.1 | 2.1.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Author
Category
Issue
Domain
Related
MultiVendorX – WooCommerce Multivendor Marketplace AI Powered Solutions31 scoreMusic Player for WooCommerce29 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder39 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreLiteSpeed Cache35 scoreWooCommerce22 scoreAkismet Anti-spam: Spam Protection35 scoreWCFM – Frontend Manager for WooCommerce21 scoreWCFM Marketplace – Multivendor Marketplace for WooCommerce21 scoreWCFM Membership – WooCommerce Memberships for Multivendor Marketplace22 scoreWC Vendors – WooCommerce Multivendor, WooCommerce Marketplace, Product Vendors24 scoreTourfic – AI Powered Travel Booking, Hotel Booking & Car Rental98 scoreWCFM – WCFM Marketplace integrate Elementor44 score
Author
Category
Issue
Domain
Related
MultiVendorX – WooCommerce Multivendor Marketplace AI Powered Solutions31 scoreMusic Player for WooCommerce29 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder39 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreLiteSpeed Cache35 scoreWooCommerce22 scoreAkismet Anti-spam: Spam Protection35 scoreWCFM – Frontend Manager for WooCommerce21 scoreWCFM Marketplace – Multivendor Marketplace for WooCommerce21 scoreWCFM Membership – WooCommerce Memberships for Multivendor Marketplace22 scoreWC Vendors – WooCommerce Multivendor, WooCommerce Marketplace, Product Vendors24 scoreTourfic – AI Powered Travel Booking, Hotel Booking & Car Rental98 scoreWCFM – WCFM Marketplace integrate Elementor44 score
Related Plugins
Tourfic – AI Powered Travel Booking, Hotel Booking & Car Rental
1k+ active installs
98
Dokan Menu Hider
500 active installs
95
WCFM – WCFM Marketplace integrate Elementor
1k+ active installs
44
Dokan Invoice
500 active installs
35
MultiVendorX – WooCommerce Multivendor Marketplace AI Powered Solutions
2k+ active installs
31
Music Player for WooCommerce
1k+ active installs
29