MarketKing — Ultimate WooCommerce Multivendor Marketplace Solution

MarketKing is the modern, next-gen multivendor marketplace platform. Build your dream marketplace with stunning UX and powerful features.

v2.1.40WebWizardsUpdated 18 days agoAdded 4 years ago800 installs100% rating100% support resolved

Marketplace Woocommerce Multivendor multivendor multivendor marketplace woocommerce marketplace

Score

1,131

Errors

1,844

Warnings

Change

Category Scores

Security0

Repo86

Performance93

Maintainability0

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

2,975 findings

Maintainability

1,209

13 issue groups

Security

1,174

9 issue groups

I18n

536

3 issue groups

WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$Product_Addon_Admin".756

Category: Maintainability
Occurrences: 756
Severity: warning

Sample message

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$Product_Addon_Admin".

WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedVariableFound

ERRORI18nText Domain MismatchMismatched text domain. Expected 'marketking-multivendor-marketplace-for-woocommerce' but got "print-invoices-packing-slip-labels-for-woocommerce".469

Category: I18n
Occurrences: 469
Severity: error

Sample message

Mismatched text domain. Expected 'marketking-multivendor-marketplace-for-woocommerce' but got "print-invoices-packing-slip-labels-for-woocommerce".

WordPress.WP.I18n.TextDomainMismatch Reference

ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$WOOCS'.414

Category: Security
Occurrences: 414
Severity: error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$WOOCS'.

WordPress.Security.EscapeOutput.OutputNotEscaped Reference

WARNINGSecurityRequest data is not unslashed$_COOKIE['marketking_validated_vat_status'] not unslashed before sanitization. Use wp_unslash() or similar240

Category: Security
Occurrences: 240
Severity: warning

Sample message

$_COOKIE['marketking_validated_vat_status'] not unslashed before sanitization. Use wp_unslash() or similar

WordPress.Security.ValidatedSanitizedInput.MissingUnslash

WARNINGSecurityInput is not validatedDetected usage of a possibly undefined superglobal array index: $_FILES['marketking_field_'.$file_upload_field->ID]['size']. Check that the array index exists before using it.175

Category: Security
Occurrences: 175
Severity: warning

Sample message

Detected usage of a possibly undefined superglobal array index: $_FILES['marketking_field_'.$file_upload_field->ID]['size']. Check that the array index exists before using it.

WordPress.Security.ValidatedSanitizedInput.InputNotValidated

WARNINGMaintainabilityNon-prefixed hook nameHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "admin_notices".147

Category: Maintainability
Occurrences: 147
Severity: warning

Sample message

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "admin_notices".

WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedHooknameFound

WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.112

Category: Security
Occurrences: 112
Severity: warning

Sample message

Processing form data without nonce verification.

WordPress.Security.NonceVerification.Recommended

WARNINGSecurityMissing nonce verificationProcessing form data without nonce verification.90

Category: Security
Occurrences: 90
Severity: warning

Sample message

Processing form data without nonce verification.

WordPress.Security.NonceVerification.Missing

WARNINGMaintainabilityNot In FooterIn footer ($in_footer) is not set explicitly wp_enqueue_script; It is recommended to load scripts in the footer. Please set this value to `true` to load it in the footer, or explicitly `false` if it should be loaded in the header.69

Category: Maintainability
Occurrences: 69
Severity: warning

Sample message

In footer ($in_footer) is not set explicitly wp_enqueue_script; It is recommended to load scripts in the footer. Please set this value to `true` to load it in the footer, or explicitly `false` if it should be loaded in the header.

WordPress.WP.EnqueuedResourceParameters.NotInFooter

ERRORSecuritySetting is missing a sanitization callbackSanitization missing for register_setting().66

Category: Security
Occurrences: 66
Severity: error

Sample message

Sanitization missing for register_setting().

PluginCheck.CodeAnalysis.SettingSanitization.register_settingMissing Reference

Show 15 more

WARNINGSecurityInput is not sanitized56

Category: Security
Occurrences: 56
Severity: warning

Sample message

Detected usage of a non-sanitized input variable: $_FILES['marketking_field_'.$file_upload_field->ID]['type']

WordPress.Security.ValidatedSanitizedInput.InputNotSanitized

ERRORI18nMissing Arg Domain45

Category: I18n
Occurrences: 45
Severity: error

Sample message

Missing $domain parameter in function call to __().

WordPress.WP.I18n.MissingArgDomain Reference

WARNINGMaintainabilityslow db query meta key41

Category: Maintainability
Occurrences: 41
Severity: warning

Sample message

Detected usage of meta_key, possible slow query.

WordPress.DB.SlowDBQuery.slow_db_query_meta_key

ERRORMaintainabilitydate date41

Category: Maintainability
Occurrences: 41
Severity: error

Sample message

date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.

WordPress.DateTime.RestrictedFunctions.date_date

WARNINGMaintainabilityMissing Version41

Category: Maintainability
Occurrences: 41
Severity: warning

Sample message

Resource version not set in call to wp_enqueue_script(). This means new versions of the script may not always be loaded due to browser caching.

WordPress.WP.EnqueuedResourceParameters.MissingVersion

WARNINGMaintainabilityslow db query meta value35

Category: Maintainability
Occurrences: 35
Severity: warning

Sample message

Detected usage of meta_value, possible slow query.

WordPress.DB.SlowDBQuery.slow_db_query_meta_value

WARNINGMaintainabilityslow db query meta query28

Category: Maintainability
Occurrences: 28
Severity: warning

Sample message

Detected usage of meta_query, possible slow query.

WordPress.DB.SlowDBQuery.slow_db_query_meta_query

ERRORI18nMissing Translators Comment22

Category: I18n
Occurrences: 22
Severity: error

Sample message

A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.

WordPress.WP.I18n.MissingTranslatorsComment Reference

ERRORMaintainabilityNo Explicit Version15

Category: Maintainability
Occurrences: 15
Severity: error

Sample message

Version parameter is not explicitly set or has been set to an equivalent of "false" for wp_enqueue_script; This means that the WordPress core version will be used which is not recommended for plugin or theme development.

WordPress.WP.EnqueuedResourceParameters.NoExplicitVersion

ERRORSecurityUnsafe printing function14

Category: Security
Occurrences: 14
Severity: error

Sample message

All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.

WordPress.Security.EscapeOutput.UnsafePrintingFunction Reference

WARNINGMaintainabilityNon-prefixed class11

Category: Maintainability
Occurrences: 11
Severity: warning

Sample message

Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "Elementor_Social_Icons_Widget".

WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedClassFound

WARNINGMaintainabilityNon-prefixed function11

Category: Maintainability
Occurrences: 11
Severity: warning

Sample message

Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "admin_script_parameters2".

WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedFunctionFound

WARNINGMaintainabilityDirect Query7

Category: Maintainability
Occurrences: 7
Severity: warning

Sample message

Use of a direct database call is discouraged.

WordPress.DB.DirectDatabaseQuery.DirectQuery

WARNINGMaintainabilityNo Caching7

Category: Maintainability
Occurrences: 7
Severity: warning

Sample message

Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().

WordPress.DB.DirectDatabaseQuery.NoCaching

WARNINGSecuritywp redirect wp redirect7

Category: Security
Occurrences: 7
Severity: warning

Sample message

wp_redirect() found. Using wp_safe_redirect(), along with the "allowed_redirect_hosts" filter if needed, can help avoid any chances of malicious redirects within code. It is also important to remember to call exit() after a redirect so that no other unwanted code is executed.

WordPress.Security.SafeRedirect.wp_redirect_wp_redirect Reference

External Connections

Potential connections found in static code analysis.

37 domains

Outbound calls

177

External assets

Incoming endpoints

Notable Domains

woocommerce-multivendor.com50 · outbound

schemas.openxmlformats.org11 · outbound

datatables.net7 · outbound

kingsplugins.com5 · outbound

woocommerce.com4 · outbound

connect.stripe.com3 · outbound

Platform / Reference Domains

w3.org50 · platform/reference

github.com12 · platform/reference

wordpress.org4 · platform/reference

opensource.org2 · platform/reference

External Asset Domains

fonts.gstatic.com5 · asset

ajax.googleapis.com2 · asset + outbound

Incoming Endpoints

admin_post_nopriv_marketking_become_vendor_loggedinpublic

admin_post

wp_ajax_nopriv_marketking_add_bookable_resourcepublic

wp_ajax

wp_ajax_nopriv_marketking_admin_vendors_ajaxpublic

wp_ajax

wp_ajax_nopriv_marketking_delete_team_memberpublic

wp_ajax

wp_ajax_nopriv_marketking_download_vendor_balance_historypublic

wp_ajax

wp_ajax_nopriv_marketking_download_vendor_credit_historypublic

wp_ajax

Admin AJAX endpoints51

admin_post_marketking_become_vendor_loggedinauthenticated

admin_post

wp_ajax_marketking_add_bookable_resourceauthenticated

wp_ajax

wp_ajax_marketking_admin_vendors_ajaxauthenticated

wp_ajax

wp_ajax_marketking_delete_team_memberauthenticated

wp_ajax

wp_ajax_marketking_dismiss_activate_woocommerce_admin_noticeauthenticated

wp_ajax

wp_ajax_marketking_download_vendor_balance_historyauthenticated

wp_ajax

wp_ajax_marketking_download_vendor_credit_historyauthenticated

wp_ajax

wp_ajax_marketking_duplicate_productauthenticated

wp_ajax

wp_ajax_marketking_get_commission_invoiceauthenticated

wp_ajax

wp_ajax_marketking_get_page_contentauthenticated

wp_ajax

wp_ajax_marketking_make_withdrawalauthenticated

wp_ajax

wp_ajax_marketking_mark_refund_completedauthenticated

wp_ajax

39 more hidden

Score History

First score snapshot

5 days ago

v2.1.40

Latest

Findings: 2,975
Errors: 1,131
Warnings: 1,844
Check: 2.0.0

Scan	Score	Findings	Errors	Warnings	Plugin	Check
5 days agoLatest	22	2,975	1,131	1,844	v2.1.40	2.0.0

Relationship Map

Author, categories, issues, domains, and nearby plugins.

37 nodes

Loading map

PluginAuthorCategoryIssueDomainRelated

Relationship links

Issue

Domain

Related Plugins

Dokan Menu Hider

500 active installs

Meks ThemeForest Smart Widget

10k+ active installs

Faire for WooCommerce

800 active installs

XML Feed for Skroutz & BestPrice for WooCommerce

600 active installs

Multi-Carrier ShipStation Shipping Rates for WooCommerce

900 active installs

MultiVendorX – WooCommerce Multivendor Marketplace AI Powered Solutions

2k+ active installs