Plugin para recebimento de pagamentos via Multibanco, PayShop, MB WAY, Cartão de Crédito, Paysafecard, CofidisPay, Bizum e EuroPix.
Category Scores
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Security
387
7 issue groups
Maintainability
316
14 issue groups
I18n
213
4 issue groups
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"Something went wrong: $error_message"'.129
- Category
- Security
- Occurrences
- 129
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"Something went wrong: $error_message"'.
ERRORI18nText Domain MismatchMismatched text domain. Expected 'eupago-gateway-for-woocommerce' but got 'eupago-cofidispay'.120
- Category
- I18n
- Occurrences
- 120
- Severity
- error
Sample message
Mismatched text domain. Expected 'eupago-gateway-for-woocommerce' but got 'eupago-cofidispay'.
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$accessToken".118
- Category
- Maintainability
- Occurrences
- 118
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$accessToken".
ERRORSecurityUnsafe printing functionAll output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.101
- Category
- Security
- Occurrences
- 101
- Severity
- error
Sample message
All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.
ERRORMaintainabilitycurl curl setoptUsing cURL functions is highly discouraged. Use wp_remote_get() instead.72
- Category
- Maintainability
- Occurrences
- 72
- Severity
- error
Sample message
Using cURL functions is highly discouraged. Use wp_remote_get() instead.
ERRORI18nNon Singular String Literal TextThe $text parameter must be a single text string literal. Found: $api_key_text45
- Category
- I18n
- Occurrences
- 45
- Severity
- error
Sample message
The $text parameter must be a single text string literal. Found: $api_key_text
WARNINGSecurityRequest data is not unslashed$_GET['chave_api'] not unslashed before sanitization. Use wp_unslash() or similar44
- Category
- Security
- Occurrences
- 44
- Severity
- warning
Sample message
$_GET['chave_api'] not unslashed before sanitization. Use wp_unslash() or similar
ERRORI18nMissing Arg DomainMissing $domain parameter in function call to esc_html__().42
- Category
- I18n
- Occurrences
- 42
- Severity
- error
Sample message
Missing $domain parameter in function call to esc_html__().
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_GET['order_id']32
- Category
- Security
- Occurrences
- 32
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_GET['order_id']
WARNINGSecurityInput is not validatedDetected usage of a possibly undefined superglobal array index: $_GET['post']. Check that the array index exists before using it.30
- Category
- Security
- Occurrences
- 30
- Severity
- warning
Sample message
Detected usage of a possibly undefined superglobal array index: $_GET['post']. Check that the array index exists before using it.
Show 15 moreShow less
WARNINGSecurityMissing nonce verification29
- Category
- Security
- Occurrences
- 29
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGSecurityNonce verification recommended22
- Category
- Security
- Occurrences
- 22
- Severity
- warning
Sample message
Processing form data without nonce verification.
ERRORMaintainabilitycurl curl exec14
- Category
- Maintainability
- Occurrences
- 14
- Severity
- error
Sample message
Using cURL functions is highly discouraged. Use wp_remote_get() instead.
ERRORMaintainabilitycurl curl init14
- Category
- Maintainability
- Occurrences
- 14
- Severity
- error
Sample message
Using cURL functions is highly discouraged. Use wp_remote_get() instead.
WARNINGMaintainabilityerror log error log13
- Category
- Maintainability
- Occurrences
- 13
- Severity
- warning
Sample message
error_log() found. Debug code should not normally be used in production.
ERRORMaintainabilitycurl curl close13
- Category
- Maintainability
- Occurrences
- 13
- Severity
- error
Sample message
Using cURL functions is highly discouraged. Use wp_remote_get() instead.
ERRORMaintainabilityNo Explicit Version11
- Category
- Maintainability
- Occurrences
- 11
- Severity
- error
Sample message
Version parameter is not explicitly set or has been set to an equivalent of "false" for wp_enqueue_script; This means that the WordPress core version will be used which is not recommended for plugin or theme development.
WARNINGMaintainabilityNon-prefixed hook name10
- Category
- Maintainability
- Occurrences
- 10
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "woocommerce_gateway_icon".
ERRORMaintainabilitycurl curl error10
- Category
- Maintainability
- Occurrences
- 10
- Severity
- error
Sample message
Using cURL functions is highly discouraged. Use wp_remote_get() instead.
ERRORMaintainabilitydate date9
- Category
- Maintainability
- Occurrences
- 9
- Severity
- error
Sample message
date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.
ERRORMaintainabilityMissing direct file access protection9
- Category
- Maintainability
- Occurrences
- 9
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
WARNINGMaintainabilityerror log print r8
- Category
- Maintainability
- Occurrences
- 8
- Severity
- warning
Sample message
print_r() found. Debug code should not normally be used in production.
ERRORMaintainabilitycurl curl errno8
- Category
- Maintainability
- Occurrences
- 8
- Severity
- error
Sample message
Using cURL functions is highly discouraged. Use wp_remote_get() instead.
WARNINGMaintainabilityNon-prefixed function7
- Category
- Maintainability
- Occurrences
- 7
- Severity
- warning
Sample message
Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "getStoreUrl".
ERRORI18nMissing Translators Comment6
- Category
- I18n
- Occurrences
- 6
- Severity
- error
Sample message
A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.
External Connections
Not analyzed yet.
Score History
First score snapshot
v4.7.2
21
Latest
- Findings
- 932
- Errors
- 612
- Warnings
- 320
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 21 | 932 | 612 | 320 | v4.7.2 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Relationship links
Author
Issue
Related
Author
Issue
Related
Related Plugins
2k+ active installs
2k+ active installs
8k+ active installs
1k+ active installs
2k+ active installs