Multi-carrier WooCommerce shipping plugin to get rates, print labels, pickups & track DHL, FedEx, UPS, USPS, Australia Post via ReachShip API.
34
Score
1,496
Errors
68
Warnings
+0
Change
Category Scores
Security18
Repo94
Performance100
Maintainability0
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Maintainability
1,171
14 issue groups
I18n
345
3 issue groups
Security
47
4 issue groups
Repo Compliance
1
1 issue group
ERRORMaintainabilitywp function not compatible with requires wpFunction "current_datetime()" requires WordPress 5.3.0, but your plugin minimum supported version is WordPress 3.0.1.1,140
- Category
- Maintainability
- Occurrences
- 1,140
- Severity
- error
Sample message
Function "current_datetime()" requires WordPress 5.3.0, but your plugin minimum supported version is WordPress 3.0.1.
ERRORI18nText Domain MismatchMismatched text domain. Expected 'elex-reachship-multi-carrier-conditional-shipping' but got 'elex-reachship'.343
- Category
- I18n
- Occurrences
- 343
- Severity
- error
Sample message
Mismatched text domain. Expected 'elex-reachship-multi-carrier-conditional-shipping' but got 'elex-reachship'.
WARNINGSecurityRequest data is not unslashed$_GET['_wpnonce'] not unslashed before sanitization. Use wp_unslash() or similar22
- Category
- Security
- Occurrences
- 22
- Severity
- warning
Sample message
$_GET['_wpnonce'] not unslashed before sanitization. Use wp_unslash() or similar
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_GET['elex_rs_nonce']19
- Category
- Security
- Occurrences
- 19
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_GET['elex_rs_nonce']
ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;10
- Category
- Maintainability
- Occurrences
- 10
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
WARNINGSecurityUnquoted Complex PlaceholderComplex placeholders used for values in the query string in $wpdb->prepare() will NOT be quoted automagically. Found: %1s.4
- Category
- Security
- Occurrences
- 4
- Severity
- warning
Sample message
Complex placeholders used for values in the query string in $wpdb->prepare() will NOT be quoted automagically. Found: %1s.
WARNINGMaintainabilityNon-prefixed classClasses declared by a theme/plugin should start with the theme/plugin prefix. Found: "Carrier_Automation_Action_Schedulers".4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- warning
Sample message
Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "Carrier_Automation_Action_Schedulers".
WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
ERRORSecurityDatabase parameter is not escapedUnescaped parameter stripslashes( $wpdb->prepare( '%1s', $blogs_query ) ) : $wpdb->prepare( '%s', '' ) used in $wpdb->get_results()2
- Category
- Security
- Occurrences
- 2
- Severity
- error
Sample message
Unescaped parameter stripslashes( $wpdb->prepare( '%1s', $blogs_query ) ) : $wpdb->prepare( '%s', '' ) used in $wpdb->get_results()
Show 12 moreShow less
WARNINGMaintainabilityslow db query meta value2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
Detected usage of meta_value, possible slow query.
WARNINGMaintainabilitytrademarked term2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
The plugin name includes a restricted term. Your chosen plugin name - "ReachShip WooCommerce Multi-Carrier & Conditional Shipping" - contains the restricted term "woocommerce" which cannot be used within in your plugin name, unless your plugin name contains one of the allowed patterns: "for woocommerce", "with woocommerce", "using woocommerce", or "and woocommerce". The term must still not appear anywhere else in your name.
WARNINGMaintainabilityNo PHP code found1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
No PHP code was found in this file and short open tags are not allowed by this install of PHP. This file may be using short open tags but PHP does not allow them.
WARNINGI18nDiscouraged text-domain loading1
- Category
- I18n
- Occurrences
- 1
- Severity
- warning
Sample message
load_plugin_textdomain() has been discouraged since WordPress version 4.6. When your plugin is hosted on WordPress.org, you no longer need to manually include this function call for translations under your plugin slug. WordPress will automatically load the translations for you as needed.
WARNINGMaintainabilityDiscouraged PHP function1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
The use of function ini_set() is discouraged
WARNINGMaintainabilityslow db query meta key1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Detected usage of meta_key, possible slow query.
WARNINGMaintainabilityNon-prefixed function1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "action_checkout_create_order_shipping_item".
WARNINGMaintainabilityNon-prefixed hook name1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "active_plugins".
WARNINGMaintainabilityNon-prefixed global variable1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "$name".
ERRORRepo Complianceoutdated tested upto header1
- Category
- Repo Compliance
- Occurrences
- 1
- Severity
- error
Sample message
Tested up to: 7.0 < 7.1. The "Tested up to" value in your plugin is not set to the current version of WordPress. This means your plugin will not show up in searches, as we require plugins to be compatible and documented as tested up to the most recent version of WordPress.
WARNINGI18ntextdomain mismatch1
- Category
- I18n
- Occurrences
- 1
- Severity
- warning
Sample message
The "Text Domain" header in the plugin file does not match the slug. Found "elex-reachship", expected "elex-reachship-multi-carrier-conditional-shipping".
WARNINGMaintainabilityupgrade notice limit1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
The upgrade notice for "2.0.0" exceeds the limit of 300 characters.
External Connections
Potential connections found in static code analysis.
Outbound calls
192
External assets
1
Incoming endpoints
100
Notable Domains
setasign.com35 · outbound
tools.ietf.org22 · outbound
php.net9 · outbound
fpdf.org8 · outbound
auspost.com.au7 · outbound
reachship.com5 · outbound
Platform / Reference Domains
opensource.org33 · platform/reference
w3.org10 · platform/reference
github.com9 · platform/reference
core.trac.wordpress.org2 · platform/reference
gnu.org1 · platform/reference
External Asset Domains
maps.googleapis.com2 · asset + outbound
Incoming Endpoints
wp_ajax_nopriv_elex_rs_addr_val_order_notepublic
wp_ajax
wp_ajax_nopriv_elex_rs_validate_addresspublic
wp_ajax
wp_ajax_nopriv_reachship_get_rates_request_logspublic
wp_ajax
Admin AJAX endpoints97
wp_ajax_elex_rs_addr_val_order_noteauthenticated
wp_ajax
wp_ajax_elex_rs_bulk_delete_shipment_api_handlerauthenticated
wp_ajax
wp_ajax_elex_rs_bulk_rates_api_handlerauthenticated
wp_ajax
wp_ajax_elex_rs_cancel_pickup_api_handlerauthenticated
wp_ajax
wp_ajax_elex_rs_carrier_toggle_settingsauthenticated
wp_ajax
wp_ajax_elex_rs_create_bulk_manifestauthenticated
wp_ajax
wp_ajax_elex_rs_create_bulk_manifest_eparcelauthenticated
wp_ajax
wp_ajax_elex_rs_create_bulk_manifest_fedexauthenticated
wp_ajax
wp_ajax_elex_rs_create_bulk_manifest_uspsauthenticated
wp_ajax
wp_ajax_elex_rs_create_bulk_pickup_dhl_expressauthenticated
wp_ajax
wp_ajax_elex_rs_create_bulk_pickup_fedexauthenticated
wp_ajax
wp_ajax_elex_rs_create_bulk_pickup_mypostauthenticated
wp_ajax
85 more hidden
Score History
First score snapshot
v4.6.9
34
Latest
- Findings
- 1,564
- Errors
- 1,496
- Warnings
- 68
- Check
- 2.1.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 34 | 1,564 | 1,496 | 68 | v4.6.9 | 2.1.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Author
Issue
Domain
Related
Shipping Live Rates for FedEx for WooCommerce96 scoreXPS Ship Integration91 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreElementor Website Builder – more than just a page builder38 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreClassic Editor63 scoreAkismet Anti-spam: Spam Protection35 scoreAll-in-One WP Migration and Backup34 scoreWPForms – AI Form Builder for WordPress – Contact Forms, Payment Forms, Survey Form, Quiz & More29 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreJetpack – WP Security, Backup, Speed, & Growth22 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreAdvanced Custom Fields (ACF®)23 scoreELEX WooCommerce Catalog Mode62 score
Author
Issue
Domain
Related
Shipping Live Rates for FedEx for WooCommerce96 scoreXPS Ship Integration91 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreElementor Website Builder – more than just a page builder38 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreClassic Editor63 scoreAkismet Anti-spam: Spam Protection35 scoreAll-in-One WP Migration and Backup34 scoreWPForms – AI Form Builder for WordPress – Contact Forms, Payment Forms, Survey Form, Quiz & More29 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreJetpack – WP Security, Backup, Speed, & Growth22 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreAdvanced Custom Fields (ACF®)23 scoreELEX WooCommerce Catalog Mode62 score
Related Plugins
Shiptastic integration for UPS
800 active installs
99
Shipping Live Rates for FedEx for WooCommerce
2k+ active installs
96
Live Rates for ShipStation
400 active installs
94
Shipping Live Rates for DHL Express for WooCommerce
700 active installs
93
XPS Ship Integration
1k+ active installs
91
Shipping Live rates for Australia Post for WooCommerce
400 active installs
91