Knit Pay – Cashfree, Instamojo, Razorpay, PayPal and more

Seamlessly integrates 500+ payment gateways, including Cashfree, Instamojo, PayPal, Razorpay, and SSLCommerz, with over 100 WordPress plugins.

v9.5.0.0knitpayUpdated Added 2k+ installs98% rating
25
Score
4,010
Errors
1,262
Warnings
+0
Change

Category Scores

Security0
Repo97
Performance100
Maintainability0

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

5,272 findings

I18n

3,506

3 issue groups

Maintainability

1,167

13 issue groups

Security

507

9 issue groups

ERRORI18nText Domain MismatchMismatched text domain. Expected 'knit-pay' but got 'action-scheduler'.3,441
Category
I18n
Occurrences
3,441
Severity
error

Sample message

Mismatched text domain. Expected 'knit-pay' but got 'action-scheduler'.

WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$account_holder_city".618
Category
Maintainability
Occurrences
618
Severity
warning

Sample message

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$account_holder_city".

ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$active'.177
Category
Security
Occurrences
177
Severity
error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$active'.

WARNINGMaintainabilityslow db query meta keyDetected usage of meta_key, possible slow query.176
Category
Maintainability
Occurrences
176
Severity
warning

Sample message

Detected usage of meta_key, possible slow query.

ERRORSecurityException output is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"The bulk action $action does not have a callback method"'.119
Category
Security
Occurrences
119
Severity
error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"The bulk action $action does not have a callback method"'.

ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;78
Category
Maintainability
Occurrences
78
Severity
error

Sample message

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

WARNINGSecurityMissing nonce verificationProcessing form data without nonce verification.73
Category
Security
Occurrences
73
Severity
warning

Sample message

Processing form data without nonce verification.

WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.70
Category
Maintainability
Occurrences
70
Severity
warning

Sample message

Use of a direct database call is discouraged.

WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().64
Category
Maintainability
Occurrences
64
Severity
warning

Sample message

Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().

WARNINGMaintainabilityNon-prefixed hook nameHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "'charitable_campaign_builder_after_payment_' . $this->slug".51
Category
Maintainability
Occurrences
51
Severity
warning

Sample message

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "'charitable_campaign_builder_after_payment_' . $this->slug".

Show 15 more
ERRORI18nMissing Translators Comment44
Category
I18n
Occurrences
44
Severity
error

Sample message

A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.

WARNINGSecurityRequest data is not unslashed38
Category
Security
Occurrences
38
Severity
warning

Sample message

$_COOKIE['kp_fygaro_transaction_id'] not unslashed before sanitization. Use wp_unslash() or similar

ERRORSecurityUnsafe printing function32
Category
Security
Occurrences
32
Severity
error

Sample message

All output should be run through an escaping function (like echo esc_html_x() or echo esc_attr_x()), found '_ex'.

ERRORMaintainabilitycurl curl setopt29
Category
Maintainability
Occurrences
29
Severity
error

Sample message

Using cURL functions is highly discouraged. Use wp_remote_get() instead.

WARNINGSecurityNonce verification recommended25
Category
Security
Occurrences
25
Severity
warning

Sample message

Processing form data without nonce verification.

WARNINGMaintainabilityslow db query meta query23
Category
Maintainability
Occurrences
23
Severity
warning

Sample message

Detected usage of meta_query, possible slow query.

ERRORI18nNon Singular String Literal Text21
Category
I18n
Occurrences
21
Severity
error

Sample message

The $text parameter must be a single text string literal. Found: $button_text

WARNINGSecurityDatabase parameter is not escaped20
Category
Security
Occurrences
20
Severity
warning

Sample message

Unescaped parameter $column_name used in $wpdb->get_var()

WARNINGMaintainabilityNon-prefixed function19
Category
Maintainability
Occurrences
19
Severity
warning

Sample message

Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "_pronamic_pay_gravityforms_dropdown_input".

WARNINGMaintainabilityerror log print r14
Category
Maintainability
Occurrences
14
Severity
warning

Sample message

print_r() found. Debug code should not normally be used in production.

WARNINGSecurityInput is not validated14
Category
Security
Occurrences
14
Severity
warning

Sample message

Detected usage of a possibly undefined superglobal array index: $_GET['amount']. Check that the array index exists before using it.

ERRORMaintainabilityNon Enqueued Script10
Category
Maintainability
Occurrences
10
Severity
error

Sample message

Scripts must be registered/enqueued via wp_enqueue_script()

WARNINGSecuritywp redirect wp redirect9
Category
Security
Occurrences
9
Severity
warning

Sample message

wp_redirect() found. Using wp_safe_redirect(), along with the "allowed_redirect_hosts" filter if needed, can help avoid any chances of malicious redirects within code. It is also important to remember to call exit() after a redirect so that no other unwanted code is executed.

ERRORMaintainabilitycurl curl init8
Category
Maintainability
Occurrences
8
Severity
error

Sample message

Using cURL functions is highly discouraged. Use wp_remote_get() instead.

WARNINGMaintainabilityDiscouraged PHP function7
Category
Maintainability
Occurrences
7
Severity
warning

Sample message

The use of function ini_set() is discouraged

External Connections

Not analyzed yet.

Score History

First score snapshot

v9.5.0.0

25

Latest

Findings
5,272
Errors
4,010
Warnings
1,262
Check
2.0.0

Relationship Map

Author, categories, issues, domains, and nearby plugins.

29 nodes

Related Plugins