Payments & Invoicing plugin for WordPress to quickly and easily sell online. Create Buy Now buttons or inline checkout forms in seconds to accept …
23
Score
390
Errors
1,266
Warnings
+0
Change
Category Scores
Security0
Repo94
Performance91
Maintainability0
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Maintainability
704
7 issue groups
Security
632
13 issue groups
I18n
223
5 issue groups
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$_id".463
- Category
- Maintainability
- Occurrences
- 463
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$_id".
WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.177
- Category
- Security
- Occurrences
- 177
- Severity
- warning
Sample message
Processing form data without nonce verification.
ERRORI18nMissing Translators CommentA function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.168
- Category
- I18n
- Occurrences
- 168
- Severity
- error
Sample message
A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.
WARNINGSecurityRequest data is not unslashed$_GET[$element_id] not unslashed before sanitization. Use wp_unslash() or similar110
- Category
- Security
- Occurrences
- 110
- Severity
- warning
Sample message
$_GET[$element_id] not unslashed before sanitization. Use wp_unslash() or similar
WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.84
- Category
- Maintainability
- Occurrences
- 84
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGSecurityMissing nonce verificationProcessing form data without nonce verification.83
- Category
- Security
- Occurrences
- 83
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().64
- Category
- Maintainability
- Occurrences
- 64
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_FILES['file']['name']59
- Category
- Security
- Occurrences
- 59
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_FILES['file']['name']
WARNINGSecurityInterpolated SQL is not preparedUse placeholders and $wpdb->prepare(); found interpolated variable $column at "SELECT $column FROM $this->table_name WHERE $column_where = %s LIMIT 1;"55
- Category
- Security
- Occurrences
- 55
- Severity
- warning
Sample message
Use placeholders and $wpdb->prepare(); found interpolated variable $column at "SELECT $column FROM $this->table_name WHERE $column_where = %s LIMIT 1;"
ERRORMaintainabilitydate datedate() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.38
- Category
- Maintainability
- Occurrences
- 38
- Severity
- error
Sample message
date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.
Show 15 moreShow less
ERRORSecuritySQL query is not prepared35
- Category
- Security
- Occurrences
- 35
- Severity
- error
Sample message
Use placeholders and $wpdb->prepare(); found $found_customers_query
WARNINGMaintainabilityNon-prefixed hook name32
- Category
- Maintainability
- Occurrences
- 32
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "'get_template_part_' . $slug".
ERRORSecurityException output is not escaped27
- Category
- Security
- Occurrences
- 27
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$key'.
WARNINGSecurityDatabase parameter is not escaped25
- Category
- Security
- Occurrences
- 25
- Severity
- warning
Sample message
Unescaped parameter $customers_table used in $wpdb->get_results()\n$customers_table assigned unsafely at line 677.
ERRORI18nNon Singular String Literal Text25
- Category
- I18n
- Occurrences
- 25
- Severity
- error
Sample message
The $text parameter must be a single text string literal. Found: $body
WARNINGSecurityInput is not validated19
- Category
- Security
- Occurrences
- 19
- Severity
- warning
Sample message
Detected usage of a possibly undefined superglobal array index: $_FILES['file']['name']. Check that the array index exists before using it.
WARNINGMaintainabilityslow db query meta query12
- Category
- Maintainability
- Occurrences
- 12
- Severity
- warning
Sample message
Detected usage of meta_query, possible slow query.
ERRORSecurityOutput is not escaped12
- Category
- Security
- Occurrences
- 12
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"<div class='notice notice-{$type} is-dismissible'><p>{$message}</p></div>"'.
ERRORI18nMissing Singular Placeholder12
- Category
- I18n
- Occurrences
- 12
- Severity
- error
Sample message
Missing singular placeholder, needed for some languages. See https://codex.wordpress.org/I18n_for_WordPress_Developers#Plurals
ERRORSecurityUnsafe printing function11
- Category
- Security
- Occurrences
- 11
- Severity
- error
Sample message
All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.
ERRORMaintainabilitystrip tags strip tags11
- Category
- Maintainability
- Occurrences
- 11
- Severity
- error
Sample message
strip_tags() is discouraged. Use the more comprehensive wp_strip_all_tags() instead.
WARNINGSecuritywp redirect wp redirect10
- Category
- Security
- Occurrences
- 10
- Severity
- warning
Sample message
wp_redirect() found. Using wp_safe_redirect(), along with the "allowed_redirect_hosts" filter if needed, can help avoid any chances of malicious redirects within code. It is also important to remember to call exit() after a redirect so that no other unwanted code is executed.
ERRORSecurityDatabase parameter is not escaped9
- Category
- Security
- Occurrences
- 9
- Severity
- error
Sample message
Unescaped parameter $db_info['meta_id_field'] used in $wpdb->get_results()\n$db_info['meta_id_field'] used without escaping.
ERRORI18nMissing Arg Domain9
- Category
- I18n
- Occurrences
- 9
- Severity
- error
Sample message
Missing $domain parameter in function call to __().
ERRORI18nUnordered Placeholders Text9
- Category
- I18n
- Occurrences
- 9
- Severity
- error
Sample message
Multiple placeholders in translatable strings should be ordered. Expected "%1$s, %2$s", but got "%s, %s" in 'All of our Addons can be found on wpGetPaid.com here: %sInvoicing Addons%s'.
External Connections
Potential connections found in static code analysis.
Outbound calls
290
External assets
4
Incoming endpoints
6
Notable Domains
wpgetpaid.com16 · outbound
getbootstrap.com12 · outbound
json-schema.org10 · outbound
farbelous.github.io9 · outbound
developer.paypal.com8 · outbound
developer.authorize.net7 · outbound
Platform / Reference Domains
github.com76 · platform/reference
w3.org29 · platform/reference
wordpress.org13 · platform/reference
developer.wordpress.org4 · platform/reference
downloads.wordpress.org2 · platform/reference
ps.w.org2 · platform/reference
opensource.org1 · platform/reference
External Asset Domains
gmpg.org3 · asset
use.fontawesome.com1 · asset
Incoming Endpoints
wp_ajax_nopriv_ayecode_connect_helper_installedpublic
wp_ajax
wp_ajax_nopriv_getpaid_public
wp_ajax
wp_ajax_nopriv_wpinv_public
wp_ajax
Admin AJAX endpoints3
wp_ajax_ayecode_connect_helperauthenticated
wp_ajax
wp_ajax_getpaid_authenticated
wp_ajax
wp_ajax_wpinv_authenticated
wp_ajax
Score History
6 score snapshots
v2.8.57
23
Latest
- Findings
- 1,656
- Errors
- 390
- Warnings
- 1,266
- Check
- 2.0.0
v2.8.56
23
Score
- Findings
- 1,656
- Errors
- 390
- Warnings
- 1,266
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 23 | 1,656 | 390 | 1,266 | v2.8.57 | 2.0.0 |
| 23 | 1,656 | 390 | 1,266 | v2.8.56 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Author
Issue
Domain
Related
Contact Form 769 scoreElementor Website Builder – more than just a page builder39 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce21 scoreAkismet Anti-spam: Spam Protection35 scoreLiteSpeed Cache35 scoreAll-in-One WP Migration and Backup34 scoreWooPayments: Integrated WooCommerce Payments30 scoreWooCommerce PayPal Payments37 scoreWooCommerce Stripe Payment Gateway29 scoreWooCommerce Tax (formerly WooCommerce Shipping & Tax)30 scoreMollie Payments for WooCommerce32 scoreRazorpay for WooCommerce20 scoreAPI KEY for Google Maps94 score
Author
Issue
Domain
Related
Contact Form 769 scoreElementor Website Builder – more than just a page builder39 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce21 scoreAkismet Anti-spam: Spam Protection35 scoreLiteSpeed Cache35 scoreAll-in-One WP Migration and Backup34 scoreWooPayments: Integrated WooCommerce Payments30 scoreWooCommerce PayPal Payments37 scoreWooCommerce Stripe Payment Gateway29 scoreWooCommerce Tax (formerly WooCommerce Shipping & Tax)30 scoreMollie Payments for WooCommerce32 scoreRazorpay for WooCommerce20 scoreAPI KEY for Google Maps94 score
Related Plugins
Visa Acceptance Solutions
10k+ active installs
100
Instant Approval Payment Gateway with Instant Payouts
2k+ active installs
100
Crypto Payment Gateway with Instant Payouts
1k+ active installs
100
Authorize.net Payments for WooCommerce
500 active installs
100
Mastercard Merchant Cloud
400 active installs
100
UddoktaPay
1k+ active installs
99