Meta for WooCommerce

WhatsApp, Facebook and Instagram help you reach more customers and drive sales with the official Meta for WooCommerce plugin.

v3.7.1FacebookUpdated 2026-06-03Added Feb 22, 2019400k+ installs44% rating64% support resolved
34
Score
66
Errors
186
Warnings
+0
Change

Category Scores

Security0
Repo94
Performance97
Maintainability50

Top Issues by Category

maintainability177
security71
performance2
i18n1
repo_compliance1

Issues Details

252 issues found in latest scan

WARNING100
WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedHooknameFound

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "fbe_webhook".

ERROR52
WordPress.Security.EscapeOutput.ExceptionNotEscaped

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"Could not open temp file for writing: {$temp_file_path}"'.

WARNING17
WordPress.NamingConventions.PrefixAllGlobals.DynamicHooknameFound

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "AbstractFeed::FEED_GEN_COMPLETE_ACTION . $this->feed_name".

WARNING16
WordPress.Security.ValidatedSanitizedInput.InputNotSanitized

Detected usage of a non-sanitized input variable: $_COOKIE['_fbp']

WARNING15
WordPress.DB.DirectDatabaseQuery.DirectQuery

Use of a direct database call is discouraged.

WARNING14
WordPress.DB.DirectDatabaseQuery.NoCaching

Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().

WARNING13
WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedClassFound

Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "WC_Facebook_Loader".

ERROR4
wp_function_not_compatible_with_requires_wp

Function "str_contains()" requires WordPress 5.9.0, but your plugin minimum supported version is WordPress 5.6.0.

WARNING3
WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedVariableFound

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$$superglobal".

ERROR3
missing_direct_file_access_protection

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

ERROR2
PluginCheck.CodeAnalysis.Heredoc.NotAllowed

Use of heredoc syntax (<<<) is not allowed; use standard strings or inline HTML instead

ERROR2
WordPress.Security.EscapeOutput.OutputNotEscaped

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found 'wc_help_tip'.

WARNING2
WordPressVIPMinimum.Performance.WPQueryParams.PostNotIn_post__not_in

Using exclusionary parameters, like post__not_in, in calls to get_posts() should be done with caution, see https://wpvip.com/documentation/performance-improvements-by-removing-usage-of-post__not_in/ for more information.

WARNING2
update_modification_detected

Plugin Updater detected. Detected code which may be altering WordPress update routines. Detected: _site_transient_update_plugins

WARNING1
PluginCheck.CodeAnalysis.DiscouragedFunctions.load_plugin_textdomainFound

load_plugin_textdomain() has been discouraged since WordPress version 4.6. When your plugin is hosted on WordPress.org, you no longer need to manually include this function call for translations under your plugin slug. WordPress will automatically load the translations for you as needed.

WARNING1
PluginCheck.Security.DirectDB.UnescapedDBParameter

Unescaped parameter $query used in $wpdb-&gt;get_col()\n$query assigned unsafely at line 596.

WARNING1
missing_composer_json_file

The &quot;/vendor&quot; directory using composer exists, but &quot;composer.json&quot; file is missing.

ERROR1
plugin_header_no_license

Missing "License" in Plugin Header. Please update your Plugin Header with a valid GPLv2 (or later) compatible license.

ERROR1
plugin_updater_detected

Plugin Updater detected. These are not permitted in WordPress.org hosted plugins. Detected: site_transient_update_plugins

ERROR1
stable_tag_mismatch

Mismatched Stable Tag: 3.7.0 != 3.7.1. Your Stable Tag is meant to be the stable version of your plugin and it needs to be exactly the same with the Version in your main plugin file's header. Any mismatch can prevent users from downloading the correct plugin files from WordPress.org.

WARNING1
trademarked_term

The plugin slug includes a restricted term. Your plugin slug - "facebook-for-woocommerce" - contains the restricted term "facebook" which cannot be used at all in your plugin slug.

Latest Snapshot

Findings

252

Errors

66

Warnings

186

Score History

First score snapshot

First scan completed Jun 19, 2026

v3.7.1 · Plugin Check 2.0.0 · Model 2026.06-mvp-static-v2

Jun 19, 2026

v3.7.1

34

Latest

Findings
252
Errors
66
Warnings
186
Plugin Check
2.0.0
Model
2026.06-mvp-static-v2

Related Plugins