Built by a FFL, for FFL's. Automate inventory synchronization and order fulfillment with multiple distributors.
35
Score
19
Errors
224
Warnings
+0
Change
Category Scores
Security0
Repo100
Performance100
Maintainability50
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Maintainability
212
14 issue groups
Security
31
8 issue groups
WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.106
- Category
- Maintainability
- Occurrences
- 106
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().76
- Category
- Maintainability
- Occurrences
- 76
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
WARNINGSecurityInterpolated SQL is not preparedUse placeholders and $wpdb->prepare(); found interpolated variable $autoload_placeholders at WHERE autoload IN ($autoload_placeholders)\n9
- Category
- Security
- Occurrences
- 9
- Severity
- warning
Sample message
Use placeholders and $wpdb->prepare(); found interpolated variable $autoload_placeholders at WHERE autoload IN ($autoload_placeholders)\n
WARNINGMaintainabilityslow db query meta keyDetected usage of meta_key, possible slow query.7
- Category
- Maintainability
- Occurrences
- 7
- Severity
- warning
Sample message
Detected usage of meta_key, possible slow query.
ERRORSecurityDatabase parameter is not escapedUnescaped parameter $invalid_lookup_product_sql used in $wpdb->get_results()\n$invalid_lookup_product_sql assigned unsafely at line 443.5
- Category
- Security
- Occurrences
- 5
- Severity
- error
Sample message
Unescaped parameter $invalid_lookup_product_sql used in $wpdb->get_results()\n$invalid_lookup_product_sql assigned unsafely at line 443.
WARNINGMaintainabilityDiscouraged PHP functionThe use of function ini_set() is discouraged4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- warning
Sample message
The use of function ini_set() is discouraged
WARNINGMaintainabilityslow db query meta valueDetected usage of meta_value, possible slow query.4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- warning
Sample message
Detected usage of meta_value, possible slow query.
WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.4
- Category
- Security
- Occurrences
- 4
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGSecurityUnfinished PrepareReplacement variables found, but no valid placeholders found in the query.3
- Category
- Security
- Occurrences
- 3
- Severity
- warning
Sample message
Replacement variables found, but no valid placeholders found in the query.
WARNINGMaintainabilityNon-prefixed classClasses declared by a theme/plugin should start with the theme/plugin prefix. Found: "FFLCockpit_Sync_Endpoint".3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "FFLCockpit_Sync_Endpoint".
Show 12 moreShow less
ERRORSecurityOutput is not escaped3
- Category
- Security
- Occurrences
- 3
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$buf'.
WARNINGSecurityInput is not sanitized3
- Category
- Security
- Occurrences
- 3
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_POST['g_ffl_cockpit_product_search_allow_users']
WARNINGSecurityRequest data is not unslashed3
- Category
- Security
- Occurrences
- 3
- Severity
- warning
Sample message
$_POST['g_ffl_cockpit_product_search_allow_users'] not unslashed before sanitization. Use wp_unslash() or similar
ERRORMaintainabilityrename rename3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- error
Sample message
rename() is discouraged. Use WP_Filesystem::move() to rename a file.
ERRORMaintainabilityMissing direct file access protection2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
ERRORMaintainabilitywp function not compatible with requires wp2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
Function "str_ends_with()" requires WordPress 5.9.0, but your plugin minimum supported version is WordPress 5.0.0.
WARNINGSecurityReplacements Wrong Number1
- Category
- Security
- Occurrences
- 1
- Severity
- warning
Sample message
Incorrect number of replacements passed to $wpdb->prepare(). Found 1 replacement parameters, expected 2.
WARNINGMaintainabilityNon-prefixed constant1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "FFLC_PATH".
ERRORMaintainabilityfile system operations fclose1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fclose().
ERRORMaintainabilityfile system operations fopen1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fopen().
ERRORMaintainabilityfile system operations fread1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fread().
ERRORMaintainabilityunlink unlink1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
unlink() is discouraged. Use wp_delete_file() to delete a file.
External Connections
Potential connections found in static code analysis.
Outbound calls
52
External assets
0
Incoming endpoints
23
Notable Domains
ffl-api.garidium.com14 · outbound
tiny.cloud8 · outbound
garidium.com2 · outbound
getbootstrap.com2 · outbound
cdnjs.cloudflare.com1 · outbound
mobius.ovh1 · outbound
Platform / Reference Domains
w3.org13 · platform/reference
github.com6 · platform/reference
schema.org2 · platform/reference
gnu.org1 · platform/reference
External Asset Domains
No external asset domains detected.
Incoming Endpoints
/wp-json/fflcockpit/v1/ai-helpdeskREST
register_rest_route
/wp-json/fflcockpit/v1/ai-helpdesk-pollREST
register_rest_route
/wp-json/fflcockpit/v1/ai-knowledgeREST
register_rest_route
/wp-json/fflcockpit/v1/cartREST
register_rest_route
/wp-json/fflcockpit/v1/cart/addREST
register_rest_route
/wp-json/fflcockpit/v1/cart/checkoutREST
register_rest_route
Score History
5 score snapshots
v2.0.30
35
Latest
- Findings
- 243
- Errors
- 19
- Warnings
- 224
- Check
- 2.0.0
v2.0.28
35
Score
- Findings
- 243
- Errors
- 19
- Warnings
- 224
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 35 | 243 | 19 | 224 | v2.0.30 | 2.0.0 |
| 35 | 243 | 19 | 224 | v2.0.28 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Plugin
Author
Issue
Domain
Related
g-FFL Checkout31 scoreShiptastic for WooCommerce29 scoreBob Go smart shipping solution for WooCommerce99 scoreeCommerce Shipping Dashboard by UPS for WooCommerce81 scoreEnvíos Coordinadora Woocommerce (Oficial) – WordPress plugin85 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder39 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce21 scoreAkismet Anti-spam: Spam Protection35 scoreLiteSpeed Cache35 scoreAll-in-One WP Migration and Backup34 scoreAdvanced Shipment Tracking for WooCommerce25 scoreUltimate WooCommerce Brands50 score
Plugin
Author
Issue
Domain
Related
g-FFL Checkout31 scoreShiptastic for WooCommerce29 scoreBob Go smart shipping solution for WooCommerce99 scoreeCommerce Shipping Dashboard by UPS for WooCommerce81 scoreEnvíos Coordinadora Woocommerce (Oficial) – WordPress plugin85 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder39 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce21 scoreAkismet Anti-spam: Spam Protection35 scoreLiteSpeed Cache35 scoreAll-in-One WP Migration and Backup34 scoreAdvanced Shipment Tracking for WooCommerce25 scoreUltimate WooCommerce Brands50 score
Related Plugins
Bob Go smart shipping solution for WooCommerce
1k+ active installs
99
Envíos Coordinadora Woocommerce (Oficial) – WordPress plugin
500 active installs
85
eCommerce Shipping Dashboard by UPS for WooCommerce
1k+ active installs
81
Ultimate WooCommerce Brands
400 active installs
50
g-FFL Checkout
700 active installs
31
Shiptastic for WooCommerce
10k+ active installs
29