Loyalty + Referral + Rewards + Birthdays and Anniversaries + Giveaways + Contests + Competitions + Sweepstakes. Selling on ETSY? Reward points for yo …
34
Score
131
Errors
352
Warnings
+0
Change
Category Scores
Security0
Repo97
Performance100
Maintainability46
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Security
347
10 issue groups
Maintainability
99
12 issue groups
I18n
29
3 issue groups
WARNINGSecurityMissing nonce verificationProcessing form data without nonce verification.137
- Category
- Security
- Occurrences
- 137
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGSecurityRequest data is not unslashed$_GET['key'] not unslashed before sanitization. Use wp_unslash() or similar95
- Category
- Security
- Occurrences
- 95
- Severity
- warning
Sample message
$_GET['key'] not unslashed before sanitization. Use wp_unslash() or similar
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$current_user'.47
- Category
- Security
- Occurrences
- 47
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$current_user'.
ERRORMaintainabilitywp function not compatible with requires wpFunction "has_block()" requires WordPress 5.0.0, but your plugin minimum supported version is WordPress 3.0.1.45
- Category
- Maintainability
- Occurrences
- 45
- Severity
- error
Sample message
Function "has_block()" requires WordPress 5.0.0, but your plugin minimum supported version is WordPress 3.0.1.
WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.34
- Category
- Security
- Occurrences
- 34
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$api_url".16
- Category
- Maintainability
- Occurrences
- 16
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$api_url".
ERRORI18nText Domain MismatchMismatched text domain. Expected 'gratisfaction-all-in-one-loyalty-contests-referral-program-for-woocommerce' but got 'gratisfaction'.16
- Category
- I18n
- Occurrences
- 16
- Severity
- error
Sample message
Mismatched text domain. Expected 'gratisfaction-all-in-one-loyalty-contests-referral-program-for-woocommerce' but got 'gratisfaction'.
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_GET['key']15
- Category
- Security
- Occurrences
- 15
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_GET['key']
WARNINGSecurityInput is not validatedDetected usage of a possibly undefined superglobal array index: $_POST['coupon']. Check that the array index exists before using it.14
- Category
- Security
- Occurrences
- 14
- Severity
- warning
Sample message
Detected usage of a possibly undefined superglobal array index: $_POST['coupon']. Check that the array index exists before using it.
WARNINGMaintainabilityNon-prefixed functionFunctions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "get_formatted_product_tax_amount".10
- Category
- Maintainability
- Occurrences
- 10
- Severity
- warning
Sample message
Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "get_formatted_product_tax_amount".
Show 15 moreShow less
ERRORI18nMissing Arg Domain9
- Category
- I18n
- Occurrences
- 9
- Severity
- error
Sample message
Missing $domain parameter in function call to __().
WARNINGMaintainabilityNon-prefixed class5
- Category
- Maintainability
- Occurrences
- 5
- Severity
- warning
Sample message
Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "GR_Connect".
WARNINGMaintainabilityDirect Query4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGMaintainabilityNo Caching4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
WARNINGMaintainabilityNon-prefixed hook name4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "active_plugins".
ERRORI18nNon Singular String Literal Text4
- Category
- I18n
- Occurrences
- 4
- Severity
- error
Sample message
The $text parameter must be a single text string literal. Found: $msg . 'Sorry, you are not allowed! '
WARNINGMaintainabilityslow db query meta key3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
Detected usage of meta_key, possible slow query.
WARNINGMaintainabilityslow db query meta value3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
Detected usage of meta_value, possible slow query.
ERRORSecuritySQL query is not prepared2
- Category
- Security
- Occurrences
- 2
- Severity
- error
Sample message
Use placeholders and $wpdb->prepare(); found $category_discount_query
ERRORMaintainabilityfile system operations is writable2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: is_writable().
WARNINGMaintainabilityMissing Version2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
Resource version not set in call to wp_register_style(). This means new versions of the style may not always be loaded due to browser caching.
WARNINGSecurityDatabase parameter is not escaped1
- Category
- Security
- Occurrences
- 1
- Severity
- warning
Sample message
Unescaped parameter $wc_points_rewards->user_points_log_db_tablename used in $wpdb->get_results()
WARNINGSecurityInterpolated SQL is not prepared1
- Category
- Security
- Occurrences
- 1
- Severity
- warning
Sample message
Use placeholders and $wpdb->prepare(); found interpolated variable {$wc_points_rewards->user_points_log_db_tablename} at "SELECT points FROM {$wc_points_rewards->user_points_log_db_tablename} WHERE order_id = %d;"
ERRORSecurityQuoted Simple Placeholder1
- Category
- Security
- Occurrences
- 1
- Severity
- error
Sample message
Simple placeholders should not be quoted in the query string in $wpdb->prepare(). Found: '%s'.
ERRORMaintainabilitydate date1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.
External Connections
Potential connections found in static code analysis.
Outbound calls
35
External assets
0
Incoming endpoints
36
Notable Domains
validity.thatscaptaintoyou.com16 · outbound
appsmav.com5 · outbound
gratisfaction.appsmav.com2 · outbound
clients.appsmav.com1 · outbound
code.google.com1 · outbound
geoplugin.net1 · outbound
Platform / Reference Domains
github.com2 · platform/reference
gnu.org2 · platform/reference
wordpress.org2 · platform/reference
developer.wordpress.org1 · platform/reference
w3.org1 · platform/reference
External Asset Domains
No external asset domains detected.
Incoming Endpoints
/wp-json/grwoo/v1/addPageREST
register_rest_route
/wp-json/grwoo/v1/cancelRedeemedCouponREST
register_rest_route
/wp-json/grwoo/v1/createCouponGRREST
register_rest_route
/wp-json/grwoo/v1/createcustomerREST
register_rest_route
/wp-json/grwoo/v1/deleteCouponCodeREST
register_rest_route
/wp-json/grwoo/v1/deletePageREST
register_rest_route
Admin AJAX endpoints9
wp_ajax_apply_gr_discountauthenticated
wp_ajax
wp_ajax_check_autologinauthenticated
wp_ajax
wp_ajax_check_loginauthenticated
wp_ajax
wp_ajax_check_redeem_updateauthenticated
wp_ajax
wp_ajax_check_settingsauthenticated
wp_ajax
wp_ajax_create_accountauthenticated
wp_ajax
wp_ajax_get_gr_loyalty_points_blocksauthenticated
wp_ajax
wp_ajax_gr_get_cart_detailsauthenticated
wp_ajax
wp_ajax_wc_points_rewards_apply_discountauthenticated
wp_ajax
Score History
First score snapshot
v4.6.2
34
Latest
- Findings
- 483
- Errors
- 131
- Warnings
- 352
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 34 | 483 | 131 | 352 | v4.6.2 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Author
Issue
Missing nonce verification137 findingsRequest data is not unslashed95 findingsOutput is not escaped47 findingswp function not compatible with requires wp45 findingsNonce verification recommended34 findingsNon-prefixed global variable16 findingsText Domain Mismatch16 findingsInput is not sanitized15 findings
Domain
Related
Points and Rewards for WooCommerce100 scoreWeather Effect88 scoreWooCommerce21 scoreAll-in-One WP Migration and Backup34 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreContact Form 769 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreClassic Editor63 scoreAkismet Anti-spam: Spam Protection35 scoreGiveaways and Contests by RafflePress – Get More Website Traffic, Email Subscribers, and Social Followers42 scorePoints Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program – myCred21 scoreLoyalty Points Rewards and Referral for WooCommerce – WPLoyalty76 scoreMyRewards89 score
Author
Issue
Missing nonce verification137 findingsRequest data is not unslashed95 findingsOutput is not escaped47 findingswp function not compatible with requires wp45 findingsNonce verification recommended34 findingsNon-prefixed global variable16 findingsText Domain Mismatch16 findingsInput is not sanitized15 findings
Domain
Related
Points and Rewards for WooCommerce100 scoreWeather Effect88 scoreWooCommerce21 scoreAll-in-One WP Migration and Backup34 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreContact Form 769 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreClassic Editor63 scoreAkismet Anti-spam: Spam Protection35 scoreGiveaways and Contests by RafflePress – Get More Website Traffic, Email Subscribers, and Social Followers42 scorePoints Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program – myCred21 scoreLoyalty Points Rewards and Referral for WooCommerce – WPLoyalty76 scoreMyRewards89 score
Related Plugins
Points and Rewards for WooCommerce
7k+ active installs
100
WP Snow Effect
1k+ active installs
98
MyRewards
2k+ active installs
89
ePoll – Contest Poll Survey & Voting
1k+ active installs
89
Weather Effect
4k+ active installs
88
WP Voting Contest Lite
400 active installs
78