Merchant Center Reviews for WooCommerce

Automate Google Customer Reviews opt-in after WooCommerce checkout, choose the new store widget or legacy badge mode, and send optional GTM events.

v1.0.9BrumisphèreUpdated Added 500 installs100% rating
89
Score
2
Errors
11
Warnings
+0
Change

Category Scores

Security82
Repo100
Performance100
Maintainability94

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

13 findings

Maintainability

6

3 issue groups

Security

5

2 issue groups

I18n

2

2 issue groups

WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.4
Category
Security
Occurrences
4
Severity
warning

Sample message

Processing form data without nonce verification.

WARNINGMaintainabilityMissing VersionResource version not set in call to wp_enqueue_script(). This means new versions of the script may not always be loaded due to browser caching.4
Category
Maintainability
Occurrences
4
Severity
warning

Sample message

Resource version not set in call to wp_enqueue_script(). This means new versions of the script may not always be loaded due to browser caching.

WARNINGI18nDiscouraged text-domain loadingload_plugin_textdomain() has been discouraged since WordPress version 4.6. When your plugin is hosted on WordPress.org, you no longer need to manually include this function call for translations under your plugin slug. WordPress will automatically load the translations for you as needed.1
Category
I18n
Occurrences
1
Severity
warning

Sample message

load_plugin_textdomain() has been discouraged since WordPress version 4.6. When your plugin is hosted on WordPress.org, you no longer need to manually include this function call for translations under your plugin slug. WordPress will automatically load the translations for you as needed.

ERRORMaintainabilityOffloaded ContentFound call to wp_enqueue_script() with external resource. Offloading scripts to your servers or any remote service is disallowed.1
Category
Maintainability
Occurrences
1
Severity
error

Sample message

Found call to wp_enqueue_script() with external resource. Offloading scripts to your servers or any remote service is disallowed.

WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_GET['key']1
Category
Security
Occurrences
1
Severity
warning

Sample message

Detected usage of a non-sanitized input variable: $_GET['key']

ERRORI18nMissing Translators CommentA function call to esc_html__() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.1
Category
I18n
Occurrences
1
Severity
error

Sample message

A function call to esc_html__() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.

WARNINGMaintainabilityupgrade notice limitThe upgrade notice for "1.0.9" exceeds the limit of 300 characters.1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

The upgrade notice for "1.0.9" exceeds the limit of 300 characters.

External Connections

Potential connections found in static code analysis.

7 domains

Outbound calls

13

External assets

4

Incoming endpoints

0

Notable Domains

support.google.com6 · outbound
brumisphere.com2 · outbound
g.page1 · outbound

Platform / Reference Domains

gnu.org2 · platform/reference
wordpress.org2 · platform/reference

External Asset Domains

apis.google.com3 · asset
gstatic.com1 · asset

Incoming Endpoints

No public endpoints detected.

Score History

First score snapshot

v1.0.9

89

Latest

Findings
13
Errors
2
Warnings
11
Check
2.0.0

Relationship Map

Author, categories, issues, domains, and nearby plugins.

31 nodes

Related Plugins