우커머스 포트원 플러그인 (국내 모든 PG를 한 번에)

우커머스용 결제 플러그인. 신용카드/실시간이체/가상계좌/휴대폰소액결제 가능. 국내 여러 PG사를 지원.

v3.4.3PORTONEUpdated Added 700 installs100% rating
34
Score
36
Errors
181
Warnings
+0
Change

Category Scores

Security3
Repo78
Performance100
Maintainability53

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

217 findings

Maintainability

134

12 issue groups

Security

68

3 issue groups

I18n

11

1 issue group

Repo Compliance

4

4 issue groups

WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.43
Category
Security
Occurrences
43
Severity
warning

Sample message

Processing form data without nonce verification.

WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.38
Category
Maintainability
Occurrences
38
Severity
warning

Sample message

Use of a direct database call is discouraged.

WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().38
Category
Maintainability
Occurrences
38
Severity
warning

Sample message

Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().

WARNINGSecurityMissing nonce verificationProcessing form data without nonce verification.16
Category
Security
Occurrences
16
Severity
warning

Sample message

Processing form data without nonce verification.

ERRORI18nMissing Translators CommentA function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.11
Category
I18n
Occurrences
11
Severity
error

Sample message

A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.

WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$code".10
Category
Maintainability
Occurrences
10
Severity
warning

Sample message

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$code".

WARNINGMaintainabilityNot In FooterIn footer ($in_footer) is not set explicitly wp_enqueue_script; It is recommended to load scripts in the footer. Please set this value to `true` to load it in the footer, or explicitly `false` if it should be loaded in the header.10
Category
Maintainability
Occurrences
10
Severity
warning

Sample message

In footer ($in_footer) is not set explicitly wp_enqueue_script; It is recommended to load scripts in the footer. Please set this value to `true` to load it in the footer, or explicitly `false` if it should be loaded in the header.

ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$select_node'.9
Category
Security
Occurrences
9
Severity
error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$select_node'.

WARNINGMaintainabilityNon-prefixed hook nameHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "woocommerce_email_customer_details".7
Category
Maintainability
Occurrences
7
Severity
warning

Sample message

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "woocommerce_email_customer_details".

ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;7
Category
Maintainability
Occurrences
7
Severity
error

Sample message

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

Show 10 more
WARNINGMaintainabilityNon-prefixed class6
Category
Maintainability
Occurrences
6
Severity
warning

Sample message

Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "Abstract_PORTONE_Payment_Blocks_Support".

WARNINGMaintainabilityNon-prefixed function6
Category
Maintainability
Occurrences
6
Severity
warning

Sample message

Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "ajax_iamport_payment_info".

WARNINGMaintainabilityMissing Version5
Category
Maintainability
Occurrences
5
Severity
warning

Sample message

Resource version not set in call to wp_enqueue_script(). This means new versions of the script may not always be loaded due to browser caching.

ERRORMaintainabilitywp function not compatible with requires wp4
Category
Maintainability
Occurrences
4
Severity
error

Sample message

Function "str_ends_with()" requires WordPress 5.9.0, but your plugin minimum supported version is WordPress 4.6.0.

WARNINGMaintainabilityNon-prefixed constant2
Category
Maintainability
Occurrences
2
Severity
warning

Sample message

Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "rsssl_no_rest_api_redirect".

ERRORMaintainabilitylibrary core files1
Category
Maintainability
Occurrences
1
Severity
error

Sample message

Library files that are already in the WordPress core are not permitted.

ERRORRepo Complianceoutdated tested upto header1
Category
Repo Compliance
Occurrences
1
Severity
error

Sample message

Tested up to: 6.9 < 7.0. The "Tested up to" value in your plugin is not set to the current version of WordPress. This means your plugin will not show up in searches, as we require plugins to be compatible and documented as tested up to the most recent version of WordPress.

ERRORRepo Complianceplugin header unsupported plugin name1
Category
Repo Compliance
Occurrences
1
Severity
error

Sample message

The "Plugin Name" header in the plugin file is not valid. It needs to contain at least 5 latin letters (a-Z) and/or numbers. This is necessary because the initial plugin slug is generated from the name.

ERRORRepo Compliancereadme description non official language1
Category
Repo Compliance
Occurrences
1
Severity
error

Sample message

The readme description contains unofficial language. It must be written in standard English.

ERRORRepo Compliancereadme short description non official language1
Category
Repo Compliance
Occurrences
1
Severity
error

Sample message

The readme short description contains unofficial language. It must be written in standard English.

External Connections

Potential connections found in static code analysis.

9 domains

Outbound calls

39

External assets

0

Incoming endpoints

4

Notable Domains

api.iamport.kr11 · outbound
help.portone.io11 · outbound
momentjs.com6 · outbound
admin.portone.io5 · outbound
cdn.iamport.kr2 · outbound

External Asset Domains

No external asset domains detected.

Incoming Endpoints

wp_ajax_nopriv_iamport_payment_infopublic

wp_ajax

wp_ajax_nopriv_iamport_vbank_refund_actionpublic

wp_ajax

Admin AJAX endpoints2
wp_ajax_iamport_payment_infoauthenticated

wp_ajax

wp_ajax_iamport_vbank_refund_actionauthenticated

wp_ajax

Score History

First score snapshot

v3.4.3

34

Latest

Findings
217
Errors
36
Warnings
181
Check
2.0.0

Relationship Map

Author, categories, issues, domains, and nearby plugins.

29 nodes