Integrate WooCommerce with HubSpot’s free CRM, abandoned cart tracking, email marketing, marketing automation, analytics & more.
33
Score
32
Errors
304
Warnings
+0
Change
Category Scores
Security0
Repo100
Performance97
Maintainability41
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Maintainability
278
14 issue groups
Security
53
8 issue groups
Performance
2
1 issue group
I18n
2
2 issue groups
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$acc_class".168
- Category
- Maintainability
- Occurrences
- 168
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$acc_class".
WARNINGMaintainabilityslow db query meta queryDetected usage of meta_query, possible slow query.24
- Category
- Maintainability
- Occurrences
- 24
- Severity
- warning
Sample message
Detected usage of meta_query, possible slow query.
WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.22
- Category
- Maintainability
- Occurrences
- 22
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().22
- Category
- Maintainability
- Occurrences
- 22
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;21
- Category
- Maintainability
- Occurrences
- 21
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
WARNINGSecurityInterpolated SQL is not preparedUse placeholders and $wpdb->prepare(); found interpolated variable $status_sql at "SELECT COUNT(ID) FROM {$wpdb->posts} WHERE post_type IN ( 'product', 'product_variation' ) AND ID NOT IN (SELECT post_parent FROM {$wpdb->posts} WHERE post_type IN ( 'product', 'product_variation' ) ) AND post_status IN ($status_sql)"20
- Category
- Security
- Occurrences
- 20
- Severity
- warning
Sample message
Use placeholders and $wpdb->prepare(); found interpolated variable $status_sql at "SELECT COUNT(ID) FROM {$wpdb->posts} WHERE post_type IN ( 'product', 'product_variation' ) AND ID NOT IN (SELECT post_parent FROM {$wpdb->posts} WHERE post_type IN ( 'product', 'product_variation' ) ) AND post_status IN ($status_sql)"
WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.15
- Category
- Security
- Occurrences
- 15
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGSecurityDatabase parameter is not escapedUnescaped parameter $actions_table used in $wpdb->get_col()\n$actions_table assigned unsafely at line 4129.7
- Category
- Security
- Occurrences
- 7
- Severity
- warning
Sample message
Unescaped parameter $actions_table used in $wpdb->get_col()\n$actions_table assigned unsafely at line 4129.
ERRORSecurityDatabase parameter is not escapedUnescaped parameter $other_table_id_column used in $wpdb->get_col()\n$other_table_id_column assigned unsafely at line 114.6
- Category
- Security
- Occurrences
- 6
- Severity
- error
Sample message
Unescaped parameter $other_table_id_column used in $wpdb->get_col()\n$other_table_id_column assigned unsafely at line 114.
WARNINGMaintainabilityslow db query meta keyDetected usage of meta_key, possible slow query.6
- Category
- Maintainability
- Occurrences
- 6
- Severity
- warning
Sample message
Detected usage of meta_key, possible slow query.
Show 15 moreShow less
WARNINGMaintainabilityNon-prefixed function4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- warning
Sample message
Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "activate_hubwoo_pro".
WARNINGMaintainabilityNon-prefixed hook name4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "active_plugins".
WARNINGMaintainabilityDiscouraged PHP function2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
The use of function set_time_limit() is discouraged
WARNINGSecurityRequest data is not unslashed2
- Category
- Security
- Occurrences
- 2
- Severity
- warning
Sample message
$_POST['hubwoo-selected-user-roles'] not unslashed before sanitization. Use wp_unslash() or similar
WARNINGPerformancePost Not In exclude2
- Category
- Performance
- Occurrences
- 2
- Severity
- warning
Sample message
Using exclusionary parameters, like exclude, in calls to get_posts() should be done with caution, see https://docs.wpvip.com/databases/optimize-queries/using-post__not_in/ for more information.
WARNINGI18nDiscouraged text-domain loading1
- Category
- I18n
- Occurrences
- 1
- Severity
- warning
Sample message
load_plugin_textdomain() has been discouraged since WordPress version 4.6. When your plugin is hosted on WordPress.org, you no longer need to manually include this function call for translations under your plugin slug. WordPress will automatically load the translations for you as needed.
WARNINGMaintainabilitySchema Change1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Attempting a database schema change is discouraged.
ERRORSecuritySQL query is not prepared1
- Category
- Security
- Occurrences
- 1
- Severity
- error
Sample message
Use placeholders and $wpdb->prepare(); found $sql
WARNINGMaintainabilityNon-prefixed global variable1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "$name".
WARNINGMaintainabilityerror log error log1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
error_log() found. Debug code should not normally be used in production.
ERRORSecurityOutput is not escaped1
- Category
- Security
- Occurrences
- 1
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$log'.
WARNINGSecurityInput is not sanitized1
- Category
- Security
- Occurrences
- 1
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_POST['hubwoo_nonce']
ERRORI18nNon Singular String Literal Text1
- Category
- I18n
- Occurrences
- 1
- Severity
- error
Sample message
The $text parameter must be a single text string literal. Found: 'Fetching ' . $object_type . ' object'
ERRORMaintainabilityinvalid tested upto minor1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
Tested up to: 7.1.0 The version number should only include major versions 7.1.
WARNINGMaintainabilitymismatched plugin name1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Plugin name "MWB HubSpot for WooCommerce - CRM, Abandoned Cart, Email Marketing, Marketing Automation & Analytics" is different from the name declared in plugin header "MWB HubSpot for WooCommerce".
External Connections
Potential connections found in static code analysis.
Outbound calls
108
External assets
2
Incoming endpoints
40
Notable Domains
makewebbetter.com67 · outbound
app.hubspot.com9 · outbound
meetings.hubspot.com6 · outbound
hubspot.sjv.io4 · outbound
auth.makewebbetter.com3 · outbound
docs.makewebbetter.com3 · outbound
Platform / Reference Domains
github.com2 · platform/reference
w3.org2 · platform/reference
gnu.org1 · platform/reference
wordpress.org1 · platform/reference
External Asset Domains
cdnjs.cloudflare.com1 · asset
fonts.googleapis.com1 · asset
Incoming Endpoints
wp_ajax_nopriv_get_order_detailpublic
wp_ajax
wp_ajax_nopriv_hubwoo_block_checkout_save_cartpublic
wp_ajax
wp_ajax_nopriv_hubwoo_save_guest_user_cartpublic
wp_ajax
Admin AJAX endpoints37
wp_ajax_hubwoo_block_checkout_save_cartauthenticated
wp_ajax
wp_ajax_hubwoo_check_oauth_access_tokenauthenticated
wp_ajax
wp_ajax_hubwoo_clear_sync_logauthenticated
wp_ajax
wp_ajax_hubwoo_create_group_propertyauthenticated
wp_ajax
wp_ajax_hubwoo_create_listauthenticated
wp_ajax
wp_ajax_hubwoo_create_property_groupauthenticated
wp_ajax
wp_ajax_hubwoo_create_single_groupauthenticated
wp_ajax
wp_ajax_hubwoo_create_single_listauthenticated
wp_ajax
wp_ajax_hubwoo_create_single_propertyauthenticated
wp_ajax
wp_ajax_hubwoo_create_single_workflowauthenticated
wp_ajax
wp_ajax_hubwoo_deals_create_propertyauthenticated
wp_ajax
wp_ajax_hubwoo_deals_search_for_stagesauthenticated
wp_ajax
25 more hidden
Score History
2 score snapshots
v1.6.8
33
Latest
- Findings
- 336
- Errors
- 32
- Warnings
- 304
- Check
- 2.1.0
v1.6.7
33
Score
- Findings
- 305
- Errors
- 26
- Warnings
- 279
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 33 | 336 | 32 | 304 | v1.6.8 | 2.1.0 |
| 33 | 305 | 26 | 279 | v1.6.7 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Author
Category
Issue
Domain
Related
Contact Form 769 scoreElementor Website Builder – more than just a page builder38 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce22 scoreLiteSpeed Cache35 scoreAkismet Anti-spam: Spam Protection35 scoreRank Math SEO – AI SEO Tools to Dominate SEO Rankings29 scoreUpdraftPlus: WP Backup & Migration Plugin52 scoreHostinger Reach – AI-Powered Email Marketing for WordPress39 scoreMailPoet – Newsletters, Email Marketing, and Automation23 scoreNewsletter – Send awesome emails from WordPress24 scoreBrevo – Email, SMS, Web Push, Chat, and more.20 scoreNewsletters, Email Marketing, SMS and Popups by Omnisend35 scoreFluentCRM – Email Newsletter, Automation, Email Marketing, Email Campaigns, Optins, Leads, and CRM Solution24 score
Author
Category
Issue
Domain
Related
Contact Form 769 scoreElementor Website Builder – more than just a page builder38 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce22 scoreLiteSpeed Cache35 scoreAkismet Anti-spam: Spam Protection35 scoreRank Math SEO – AI SEO Tools to Dominate SEO Rankings29 scoreUpdraftPlus: WP Backup & Migration Plugin52 scoreHostinger Reach – AI-Powered Email Marketing for WordPress39 scoreMailPoet – Newsletters, Email Marketing, and Automation23 scoreNewsletter – Send awesome emails from WordPress24 scoreBrevo – Email, SMS, Web Push, Chat, and more.20 scoreNewsletters, Email Marketing, SMS and Popups by Omnisend35 scoreFluentCRM – Email Newsletter, Automation, Email Marketing, Email Campaigns, Optins, Leads, and CRM Solution24 score
Related Plugins
GetResponse Official
4k+ active installs
100
Email Marketing for WordPress and WooCommerce – Retainful
500 active installs
100
LeadConnector
20k+ active installs
99
99
SendPulse Email Marketing Newsletter
1k+ active installs
99
Recapture for Easy Digital Downloads
600 active installs
99