WooCommerce Product Badge and Label, Sale Badge, Sold Out Badge, Countdown Timer, Notification Bar (PRO), Quick View, out-of-stock badge.
38
Score
37
Errors
102
Warnings
+0
Change
Category Scores
Security0
Repo97
Performance100
Maintainability65
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Maintainability
69
9 issue groups
Security
60
11 issue groups
I18n
6
5 issue groups
WARNINGSecurityInterpolated SQL is not preparedUse placeholders and $wpdb->prepare(); found interpolated variable $column at "SELECT $column FROM $this->table_name WHERE $column_where = %s LIMIT 1;"29
- Category
- Security
- Occurrences
- 29
- Severity
- warning
Sample message
Use placeholders and $wpdb->prepare(); found interpolated variable $column at "SELECT $column FROM $this->table_name WHERE $column_where = %s LIMIT 1;"
ERRORMaintainabilitydate datedate() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.21
- Category
- Maintainability
- Occurrences
- 21
- Severity
- error
Sample message
date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.
WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.18
- Category
- Maintainability
- Occurrences
- 18
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().17
- Category
- Maintainability
- Occurrences
- 17
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
WARNINGSecurityMissing nonce verificationProcessing form data without nonce verification.7
- Category
- Security
- Occurrences
- 7
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGSecurityDatabase parameter is not escapedUnescaped parameter $table_name used in $wpdb->get_var()\n$table_name assigned unsafely at line 8.6
- Category
- Security
- Occurrences
- 6
- Severity
- warning
Sample message
Unescaped parameter $table_name used in $wpdb->get_var()\n$table_name assigned unsafely at line 8.
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$output'.4
- Category
- Security
- Occurrences
- 4
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$output'.
WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.4
- Category
- Security
- Occurrences
- 4
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGSecurityUnfinished PrepareReplacement variables found, but no valid placeholders found in the query.3
- Category
- Security
- Occurrences
- 3
- Severity
- warning
Sample message
Replacement variables found, but no valid placeholders found in the query.
WARNINGMaintainabilityNon-prefixed hook nameHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "woocommerce_add_to_cart_validation".3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "woocommerce_add_to_cart_validation".
Show 15 moreShow less
WARNINGMaintainabilityNon-prefixed global variable3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$autoloader".
WARNINGMaintainabilityMissing Version3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
Resource version not set in call to wp_enqueue_style(). This means new versions of the style may not always be loaded due to browser caching.
ERRORSecurityDatabase parameter is not escaped2
- Category
- Security
- Occurrences
- 2
- Severity
- error
Sample message
Unescaped parameter $query used in $wpdb->get_var()\n$query assigned unsafely at line 140.
ERRORSecuritySQL query is not prepared2
- Category
- Security
- Occurrences
- 2
- Severity
- error
Sample message
Use placeholders and $wpdb->prepare(); found $query
ERRORI18nMissing Translators Comment2
- Category
- I18n
- Occurrences
- 2
- Severity
- error
Sample message
A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.
ERRORMaintainabilityMissing direct file access protection2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
WARNINGI18nDiscouraged text-domain loading1
- Category
- I18n
- Occurrences
- 1
- Severity
- warning
Sample message
load_plugin_textdomain() has been discouraged since WordPress version 4.6. When your plugin is hosted on WordPress.org, you no longer need to manually include this function call for translations under your plugin slug. WordPress will automatically load the translations for you as needed.
WARNINGMaintainabilitySchema Change1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Attempting a database schema change is discouraged.
WARNINGSecurityReplacements Wrong Number1
- Category
- Security
- Occurrences
- 1
- Severity
- warning
Sample message
Incorrect number of replacements passed to $wpdb->prepare(). Found 1 replacement parameters, expected 2.
WARNINGMaintainabilityNon-prefixed global variable1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "$name".
ERRORSecurityException output is not escaped1
- Category
- Security
- Occurrences
- 1
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$id'.
WARNINGSecurityInput is not sanitized1
- Category
- Security
- Occurrences
- 1
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_POST['quantity']
WARNINGI18nLow Level Translation Function1
- Category
- I18n
- Occurrences
- 1
- Severity
- warning
Sample message
Use of the "translate()" function is reserved for low-level API usage.
ERRORI18nNon Singular String Literal Text1
- Category
- I18n
- Occurrences
- 1
- Severity
- error
Sample message
The $text parameter must be a single text string literal. Found: $badge->badgeLabel
ERRORI18nText Domain Mismatch1
- Category
- I18n
- Occurrences
- 1
- Severity
- error
Sample message
Mismatched text domain. Expected 'easy-sale-badges-for-woocommerce' but got 'labelTranslate'.
External Connections
Potential connections found in static code analysis.
Outbound calls
38
External assets
0
Incoming endpoints
4
Notable Domains
asanaplugins.com12 · outbound
momentjs.com6 · outbound
reactjs.org3 · outbound
php-fig.org2 · outbound
getcomposer.org1 · outbound
tailwindcss.com1 · outbound
Platform / Reference Domains
w3.org6 · platform/reference
github.com4 · platform/reference
wordpress.org2 · platform/reference
gnu.org1 · platform/reference
External Asset Domains
No external asset domains detected.
Incoming Endpoints
wp_ajax_nopriv_asnp_wesb_add_to_cart_qvpublic
wp_ajax
wp_ajax_nopriv_asnp_wesb_quick_viewpublic
wp_ajax
Admin AJAX endpoints2
wp_ajax_asnp_wesb_add_to_cart_qvauthenticated
wp_ajax
wp_ajax_asnp_wesb_quick_viewauthenticated
wp_ajax
Score History
4 score snapshots
v7.3.2
38
Latest
- Findings
- 139
- Errors
- 37
- Warnings
- 102
- Check
- 2.0.0
v7.3.1
38
Score
- Findings
- 135
- Errors
- 37
- Warnings
- 98
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 38 | 139 | 37 | 102 | v7.3.2 | 2.0.0 |
| 38 | 135 | 37 | 98 | v7.3.1 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Author
Category
Issue
Domain
Related
Trusted Shops Easy Integration for WooCommerce86 scoreVerified Member for BuddyPress47 scoreOut of Stock Message Manager for WooCommerce36 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce21 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreRank Math SEO – AI SEO Tools to Dominate SEO Rankings30 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreAll-In-One Security (AIOS) – Security and Firewall24 scoreYITH WooCommerce Badge Management32 scoreDiscount Rules and Dynamic Pricing for WooCommerce27 scoreSold Out Badge for WooCommerce35 scoreProduct Bundle Builder for WooCommerce35 score
Author
Category
Issue
Domain
Related
Trusted Shops Easy Integration for WooCommerce86 scoreVerified Member for BuddyPress47 scoreOut of Stock Message Manager for WooCommerce36 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce21 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreRank Math SEO – AI SEO Tools to Dominate SEO Rankings30 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreAll-In-One Security (AIOS) – Security and Firewall24 scoreYITH WooCommerce Badge Management32 scoreDiscount Rules and Dynamic Pricing for WooCommerce27 scoreSold Out Badge for WooCommerce35 scoreProduct Bundle Builder for WooCommerce35 score
Related Plugins
Coming Soon Badges for WooCommerce
1k+ active installs
99
Product Badges For WooCommerce
600 active installs
98
Trusted Shops Easy Integration for WooCommerce
6k+ active installs
86
Verified Member for BuddyPress
3k+ active installs
47
TZ Flickr Widget
500 active installs
40
Out of Stock Message Manager for WooCommerce
2k+ active installs
36