WooCommerce PDF invoices made simple. EU VAT validation, reverse charge invoice, proforma invoices, MOSS / OSS support, invoices in bulk and more.
Category Scores
Top Issues by Category
maintainability60
security7
repo_compliance2
supply_chain1
Issues Details
70 issues found in latest scan
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$atr_val".
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$order'.
The plugin name includes a restricted term. Your chosen plugin name - "Flexible Invoices for WooCommerce and WordPress" - contains the restricted term "wordpress" which cannot be used at all in your plugin name.
Unescaped parameter $post_title used in $wpdb->get_var()\n$post_title assigned unsafely at line 16.
Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "InvoicePost".
Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "flexible_invoices_deactivation_translate".
Processing form data without nonce verification.
Plugin name "Flexible PDF Invoices for WooCommerce & WordPress" is different from the name declared in plugin header "Flexible Invoices for WooCommerce and WordPress".
Missing "License" in Plugin Header. Please update your Plugin Header with a valid GPLv2 (or later) compatible license.
Mismatched Requires at least: 6.0 != 6.4. "Requires at least" needs to be exactly the same with that in your main plugin file's header.
| Code | Type | Message | Count |
|---|---|---|---|
| WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedVariableFound | WARNING | Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$atr_val". | 48 |
| missing_direct_file_access_protection | ERROR | PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit; | 7 |
| WordPress.Security.EscapeOutput.OutputNotEscaped | ERROR | All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$order'. | 5 |
| trademarked_term | WARNING | The plugin name includes a restricted term. Your chosen plugin name - "Flexible Invoices for WooCommerce and WordPress" - contains the restricted term "wordpress" which cannot be used at all in your plugin name. | 2 |
| PluginCheck.Security.DirectDB.UnescapedDBParameter | WARNING | Unescaped parameter $post_title used in $wpdb->get_var()\n$post_title assigned unsafely at line 16. | 1 |
| WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedClassFound | WARNING | Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "InvoicePost". | 1 |
| WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedFunctionFound | WARNING | Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "flexible_invoices_deactivation_translate". | 1 |
| WordPress.Security.NonceVerification.Recommended | WARNING | Processing form data without nonce verification. | 1 |
| hidden_files | ERROR | Hidden files are not permitted. | 1 |
| mismatched_plugin_name | WARNING | Plugin name "Flexible PDF Invoices for WooCommerce & WordPress" is different from the name declared in plugin header "Flexible Invoices for WooCommerce and WordPress". | 1 |
| plugin_header_no_license | ERROR | Missing "License" in Plugin Header. Please update your Plugin Header with a valid GPLv2 (or later) compatible license. | 1 |
| readme_mismatched_header_requires | ERROR | Mismatched Requires at least: 6.0 != 6.4. "Requires at least" needs to be exactly the same with that in your main plugin file's header. | 1 |
Latest Snapshot
Findings
70
Errors
15
Warnings
55
Score History
2 score snapshots
Jun 21, 2026
v6.2.21
35
Latest
- Findings
- 70
- Errors
- 15
- Warnings
- 55
- Plugin Check
- 2.0.0
- Model
- 2026.06-mvp-static-v2
Jun 21, 2026
v6.2.20
35
Score
- Findings
- 70
- Errors
- 15
- Warnings
- 55
- Plugin Check
- 2.0.0
- Model
- 2026.06-mvp-static-v2
| Scan | Score | Findings | Errors | Warnings | Plugin | Plugin Check | Model |
|---|---|---|---|---|---|---|---|
| Jun 21, 2026Latest | 35 | 70 | 15 | 55 | v6.2.21 | 2.0.0 | 2026.06-mvp-static-v2 |
| Jun 21, 2026 | 35 | 70 | 15 | 55 | v6.2.20 | 2.0.0 | 2026.06-mvp-static-v2 |
Related Plugins
30k+ active installs