PluginScore

Faire for WooCommerce

Faire is an easy-to-use B2B platform that connects independent retailers and brands around the world.

v1.14.1fairewholesaleglobalUpdated Added 800 installs60% rating
Marketplaceintegrationwholesale
68
Score
4
Errors
86
Warnings
+0
Change

Category Scores

Security54
Repo94
Performance100
Maintainability71

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

90 findings

Maintainability

73

12 issue groups

Security

15

4 issue groups

I18n

1

1 issue group

Repo Compliance

1

1 issue group

WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.25
Category
Maintainability
Occurrences
25
Severity
warning

Sample message

Use of a direct database call is discouraged.

WordPress.DB.DirectDatabaseQuery.DirectQuery
WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().23
Category
Maintainability
Occurrences
23
Severity
warning

Sample message

Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().

WordPress.DB.DirectDatabaseQuery.NoCaching
WARNINGSecurityDatabase parameter is not escapedUnescaped parameter $table used in $wpdb->get_results()\n$table assigned unsafely at line 210.11
Category
Security
Occurrences
11
Severity
warning

Sample message

Unescaped parameter $table used in $wpdb->get_results()\n$table assigned unsafely at line 210.

PluginCheck.Security.DirectDB.UnescapedDBParameter
WARNINGMaintainabilityerror log error logerror_log() found. Debug code should not normally be used in production.9
Category
Maintainability
Occurrences
9
Severity
warning

Sample message

error_log() found. Debug code should not normally be used in production.

WordPress.PHP.DevelopmentFunctions.error_log_error_log
WARNINGMaintainabilityNon-prefixed hook nameHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "before_faire_for_woocommerce_init".5
Category
Maintainability
Occurrences
5
Severity
warning

Sample message

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "before_faire_for_woocommerce_init".

WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedHooknameFound
WARNINGMaintainabilityShort URL foundShort URL detected (bit.ly). Use full URLs instead of URL shorteners.3
Category
Maintainability
Occurrences
3
Severity
warning

Sample message

Short URL detected (bit.ly). Use full URLs instead of URL shorteners.

PluginCheck.CodeAnalysis.ShortURL.Found
WARNINGSecurityInterpolated SQL is not preparedUse placeholders and $wpdb->prepare(); found interpolated variable {$table_name} at "DROP TABLE {$table_name}"2
Category
Security
Occurrences
2
Severity
warning

Sample message

Use placeholders and $wpdb->prepare(); found interpolated variable {$table_name} at "DROP TABLE {$table_name}"

WordPress.DB.PreparedSQL.InterpolatedNotPrepared
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$product".2
Category
Maintainability
Occurrences
2
Severity
warning

Sample message

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$product".

WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedVariableFound
WARNINGI18nDiscouraged text-domain loadingload_plugin_textdomain() has been discouraged since WordPress version 4.6. When your plugin is hosted on WordPress.org, you no longer need to manually include this function call for translations under your plugin slug. WordPress will automatically load the translations for you as needed.1
Category
I18n
Occurrences
1
Severity
warning

Sample message

load_plugin_textdomain() has been discouraged since WordPress version 4.6. When your plugin is hosted on WordPress.org, you no longer need to manually include this function call for translations under your plugin slug. WordPress will automatically load the translations for you as needed.

PluginCheck.CodeAnalysis.DiscouragedFunctions.load_plugin_textdomainFoundReference
WARNINGMaintainabilitySchema ChangeAttempting a database schema change is discouraged.1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

Attempting a database schema change is discouraged.

WordPress.DB.DirectDatabaseQuery.SchemaChange
Show 8 more
WARNINGMaintainabilityslow db query meta key1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

Detected usage of meta_key, possible slow query.

WordPress.DB.SlowDBQuery.slow_db_query_meta_key
WARNINGMaintainabilityslow db query meta value1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

Detected usage of meta_value, possible slow query.

WordPress.DB.SlowDBQuery.slow_db_query_meta_value
WARNINGMaintainabilityerror log print r1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

print_r() found. Debug code should not normally be used in production.

WordPress.PHP.DevelopmentFunctions.error_log_print_r
ERRORSecurityOutput is not escaped1
Category
Security
Occurrences
1
Severity
error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$this'.

WordPress.Security.EscapeOutput.OutputNotEscapedReference
WARNINGSecurityInput is not sanitized1
Category
Security
Occurrences
1
Severity
warning

Sample message

Detected usage of a non-sanitized input variable: $_POST['woocommerce_faire_wc_integration_product_pricing_policy']

WordPress.Security.ValidatedSanitizedInput.InputNotSanitized
ERRORMaintainabilityfile system operations fclose1
Category
Maintainability
Occurrences
1
Severity
error

Sample message

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fclose().

WordPress.WP.AlternativeFunctions.file_system_operations_fclose
ERRORMaintainabilityfile system operations fputs1
Category
Maintainability
Occurrences
1
Severity
error

Sample message

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fputs().

WordPress.WP.AlternativeFunctions.file_system_operations_fputs
ERRORRepo Compliancemismatched tested up to header1
Category
Repo Compliance
Occurrences
1
Severity
error

Sample message

Mismatched "Tested up to": 7.0 != 6.9. The "Tested up to" value in the readme file must match the "Tested up to" value in the plugin header. If the plugin header has a "Tested up to" value, it will override the readme value, which can cause confusion.

mismatched_tested_up_to_headerReference

External Connections

Potential connections found in static code analysis.

8 domains

Outbound calls

16

External assets

0

Incoming endpoints

13

Notable Domains

faire.com5 · outbound
bit.ly3 · outbound
faire.github.io3 · outbound
faire-stage.com1 · outbound
php-fig.org1 · outbound

Platform / Reference Domains

developer.wordpress.org1 · platform/reference
github.com1 · platform/reference
gnu.org1 · platform/reference

External Asset Domains

No external asset domains detected.

Incoming Endpoints

No public endpoints detected.

Admin AJAX endpoints13
wp_ajax_accept_faire_orderauthenticated

wp_ajax

wp_ajax_backorder_productsauthenticated

wp_ajax

wp_ajax_faire_brand_manual_syncauthenticated

wp_ajax

wp_ajax_faire_cancel_orders_manual_syncauthenticated

wp_ajax

wp_ajax_faire_orders_manual_syncauthenticated

wp_ajax

wp_ajax_faire_product_linking_manual_syncauthenticated

wp_ajax

wp_ajax_faire_product_taxonomy_manual_syncauthenticated

wp_ajax

wp_ajax_faire_product_unlinking_manual_syncauthenticated

wp_ajax

wp_ajax_faire_products_manual_syncauthenticated

wp_ajax

wp_ajax_faire_single_product_manual_syncauthenticated

wp_ajax

wp_ajax_faire_test_api_connectionauthenticated

wp_ajax

wp_ajax_set_order_shipmentauthenticated

wp_ajax

1 more hidden

Score History

First score snapshot

v1.14.1

68

Latest

Findings
90
Errors
4
Warnings
86
Check
2.0.0

Relationship Map

Author, categories, issues, domains, and nearby plugins.

32 nodes

Related Plugins

AcyMailing integration for WooCommerce

400 active installs

99
Connector for Gravity Forms and MailPoet

500 active installs

99
Fluent Forms Connector for MailPoet

1k+ active installs

98
Zoho Flow – No-Code Workflow Automation

5k+ active installs

98
Contact Form to Any API

8k+ active installs

97
GSheetConnector for WooCommerce – Send your Orders and Products to Google Sheet in Real-Time

3k+ active installs

97