The #1 eCommerce plugin to sell digital products & subscriptions. Accept payments with Stripe & PayPal. Sell ebooks, software & more.
23
Score
3,723
Errors
10,283
Warnings
+0
Change
Category Scores
Security0
Repo94
Performance84
Maintainability0
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Maintainability
9,248
12 issue groups
Security
4,084
12 issue groups
I18n
217
1 issue group
WARNINGMaintainabilityNon-prefixed namespaceNamespaces declared by a theme/plugin should start with the theme/plugin prefix. Found: "EDD".3,833
- Category
- Maintainability
- Occurrences
- 3,833
- Severity
- warning
Sample message
Namespaces declared by a theme/plugin should start with the theme/plugin prefix. Found: "EDD".
WARNINGMaintainabilityNon-prefixed hook nameHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "'edd_' . $_GET['edd-action']".1,701
- Category
- Maintainability
- Occurrences
- 1,701
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "'edd_' . $_GET['edd-action']".
WARNINGMaintainabilityNon-prefixed functionFunctions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "_edd_anonymize_customer".1,389
- Category
- Maintainability
- Occurrences
- 1,389
- Severity
- warning
Sample message
Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "_edd_anonymize_customer".
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '" data-wp-lists='list:$singular'"'.1,039
- Category
- Security
- Occurrences
- 1,039
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '" data-wp-lists='list:$singular'"'.
ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;1,004
- Category
- Maintainability
- Occurrences
- 1,004
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
ERRORSecurityException output is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"$className has not the instance() method needed to cast the date."'.585
- Category
- Security
- Occurrences
- 585
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"$className has not the instance() method needed to cast the date."'.
WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.560
- Category
- Security
- Occurrences
- 560
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGSecurityRequest data is not unslashed$_COOKIE[$cookie] not unslashed before sanitization. Use wp_unslash() or similar464
- Category
- Security
- Occurrences
- 464
- Severity
- warning
Sample message
$_COOKIE[$cookie] not unslashed before sanitization. Use wp_unslash() or similar
WARNINGSecurityMissing nonce verificationProcessing form data without nonce verification.432
- Category
- Security
- Occurrences
- 432
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$address".402
- Category
- Maintainability
- Occurrences
- 402
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$address".
Show 15 moreShow less
ERRORSecurityUnsafe printing function285
- Category
- Security
- Occurrences
- 285
- Severity
- error
Sample message
All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.
WARNINGSecurityInput is not sanitized253
- Category
- Security
- Occurrences
- 253
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_COOKIE[$cookie]
WARNINGMaintainabilityDirect Query249
- Category
- Maintainability
- Occurrences
- 249
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGMaintainabilityNo Caching234
- Category
- Maintainability
- Occurrences
- 234
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
ERRORI18nText Domain Mismatch217
- Category
- I18n
- Occurrences
- 217
- Severity
- error
Sample message
Mismatched text domain. Expected 'easy-digital-downloads' but got 'action-scheduler'.
WARNINGSecurityInterpolated SQL is not prepared193
- Category
- Security
- Occurrences
- 193
- Severity
- warning
Sample message
Use placeholders and $wpdb->prepare(); found interpolated variable $column at "SELECT $column FROM $this->table_name WHERE $column_where = %s LIMIT 1;"
ERRORMaintainabilitydate date187
- Category
- Maintainability
- Occurrences
- 187
- Severity
- error
Sample message
date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.
WARNINGSecurityInput is not validated94
- Category
- Security
- Occurrences
- 94
- Severity
- warning
Sample message
Detected usage of a possibly undefined superglobal array index: $_FILES['edd-import-file']['name']. Check that the array index exists before using it.
WARNINGMaintainabilityNon-prefixed class87
- Category
- Maintainability
- Occurrences
- 87
- Severity
- warning
Sample message
Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "Array2XML".
ERRORSecuritySQL query is not prepared71
- Category
- Security
- Occurrences
- 71
- Severity
- error
Sample message
Use placeholders and $wpdb->prepare(); found $compare_string
WARNINGMaintainabilityerror log trigger error64
- Category
- Maintainability
- Occurrences
- 64
- Severity
- warning
Sample message
trigger_error() found. Debug code should not normally be used in production.
WARNINGSecurityDatabase parameter is not escaped55
- Category
- Security
- Occurrences
- 55
- Severity
- warning
Sample message
Unescaped parameter $column_name used in $wpdb->get_var()
ERRORSecurityDatabase parameter is not escaped53
- Category
- Security
- Occurrences
- 53
- Severity
- error
Sample message
Unescaped parameter $column used in $wpdb->get_results()\n$column assigned unsafely at line 210.
WARNINGMaintainabilityerror log debug backtrace51
- Category
- Maintainability
- Occurrences
- 51
- Severity
- warning
Sample message
debug_backtrace() found. Debug code should not normally be used in production.
ERRORMaintainabilitymysql PDO47
- Category
- Maintainability
- Occurrences
- 47
- Severity
- error
Sample message
Accessing the database directly should be avoided. Please use the $wpdb object and associated functions instead. Found: \PDO.
External Connections
Not analyzed yet.
Score History
First score snapshot
v3.6.9
23
Latest
- Findings
- 14,006
- Errors
- 3,723
- Warnings
- 10,283
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 23 | 14,006 | 3,723 | 10,283 | v3.6.9 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueRelated
Relationship links
Author
Category
Issue
Non-prefixed namespace3,833 findingsNon-prefixed hook name1,701 findingsNon-prefixed function1,389 findingsOutput is not escaped1,039 findingsMissing direct file access protection1,004 findingsException output is not escaped585 findingsNonce verification recommended560 findingsRequest data is not unslashed464 findings
Related
WooCommerce22 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder35 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreLiteSpeed Cache35 scoreAkismet Anti-spam: Spam Protection35 scoreAdvanced Custom Fields (ACF®)23 scoreUltimate Addons for Elementor33 scoreWordPress Importer25 scoreStarter Templates – AI-Powered Templates for Elementor & Gutenberg24 scoreSmash Balloon Social Photo Feed – Easy Social Feeds Plugin25 scoreSpectra Gutenberg Blocks – Website Builder for the Block Editor25 scoreWPForms – AI Form Builder for WordPress – Contact Forms, Payment Forms, Survey Form, Quiz & More32 scoreWP Mail SMTP by WPForms – The Most Popular SMTP and Email Log Plugin30 score
Author
Category
Issue
Non-prefixed namespace3,833 findingsNon-prefixed hook name1,701 findingsNon-prefixed function1,389 findingsOutput is not escaped1,039 findingsMissing direct file access protection1,004 findingsException output is not escaped585 findingsNonce verification recommended560 findingsRequest data is not unslashed464 findings
Related
WooCommerce22 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder35 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreLiteSpeed Cache35 scoreAkismet Anti-spam: Spam Protection35 scoreAdvanced Custom Fields (ACF®)23 scoreUltimate Addons for Elementor33 scoreWordPress Importer25 scoreStarter Templates – AI-Powered Templates for Elementor & Gutenberg24 scoreSmash Balloon Social Photo Feed – Easy Social Feeds Plugin25 scoreSpectra Gutenberg Blocks – Website Builder for the Block Editor25 scoreWPForms – AI Form Builder for WordPress – Contact Forms, Payment Forms, Survey Form, Quiz & More32 scoreWP Mail SMTP by WPForms – The Most Popular SMTP and Email Log Plugin30 score
Related Plugins
Authorize.net Payments for WooCommerce
400 active installs
100
GetResponse Official
4k+ active installs
100
Live Carts for WooCommerce: Track Real-Time, Abandoned, and Converted Carts!
600 active installs
100
Visa Acceptance Solutions
10k+ active installs
100
Helcim for WooCommerce
600 active installs
99
Lemon Squeezy — Sell Digital Products, Subscriptions, and Licenses
500 active installs
99