PluginScore

Mollie Payments for WooCommerce

Accept all major payment methods in WooCommerce today. Credit cards, iDEAL and more! Fast, safe and intuitive.

v8.1.7MollieUpdated Added 100k+ installs70% rating20% support resolved
credit cardecommercemolliepaymentswoocommerce
33
Score
70
Errors
123
Warnings
+0
Change

Category Scores

Security0
Repo84
Performance100
Maintainability51

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

193 findings

Maintainability

109

16 issue groups

Security

44

4 issue groups

I18n

35

4 issue groups

Supply Chain

1

1 issue group

WARNINGMaintainabilityDynamic hook nameHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "$this->dataHelper->getPluginId() . '_payment_object_metadata'".52
Category
Maintainability
Occurrences
52
Severity
warning

Sample message

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "$this->dataHelper->getPluginId() . '_payment_object_metadata'".

WordPress.NamingConventions.PrefixAllGlobals.DynamicHooknameFound
ERRORI18nMissing Translators CommentA function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.22
Category
I18n
Occurrences
22
Severity
error

Sample message

A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.

WordPress.WP.I18n.MissingTranslatorsCommentReference
WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.19
Category
Security
Occurrences
19
Severity
warning

Sample message

Processing form data without nonce verification.

WordPress.Security.NonceVerification.Recommended
WARNINGMaintainabilityNon-prefixed hook nameHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "inpsyde.feature-flags.mollie-woocommerce.alma_enabled".12
Category
Maintainability
Occurrences
12
Severity
warning

Sample message

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "inpsyde.feature-flags.mollie-woocommerce.alma_enabled".

WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedHooknameFound
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$button'.12
Category
Security
Occurrences
12
Severity
error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$button'.

WordPress.Security.EscapeOutput.OutputNotEscapedReference
ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;12
Category
Maintainability
Occurrences
12
Severity
error

Sample message

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

missing_direct_file_access_protectionReference
ERRORI18nText Domain MismatchMismatched text domain. Expected 'mollie-payments-for-woocommerce' but got 'ddev-wordpress-plugin-example'.11
Category
I18n
Occurrences
11
Severity
error

Sample message

Mismatched text domain. Expected 'mollie-payments-for-woocommerce' but got 'ddev-wordpress-plugin-example'.

WordPress.WP.I18n.TextDomainMismatchReference
ERRORSecurityException output is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"Invalid strategy for type: {$type}"'.10
Category
Security
Occurrences
10
Severity
error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"Invalid strategy for type: {$type}"'.

WordPress.Security.EscapeOutput.ExceptionNotEscapedReference
WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.6
Category
Maintainability
Occurrences
6
Severity
warning

Sample message

Use of a direct database call is discouraged.

WordPress.DB.DirectDatabaseQuery.DirectQuery
WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().5
Category
Maintainability
Occurrences
5
Severity
warning

Sample message

Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().

WordPress.DB.DirectDatabaseQuery.NoCaching
Show 15 more
WARNINGMaintainabilityNon-prefixed function4
Category
Maintainability
Occurrences
4
Severity
warning

Sample message

Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "checkIndexExistOrDefault".

WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedFunctionFound
WARNINGMaintainabilityNon-prefixed global variable4
Category
Maintainability
Occurrences
4
Severity
warning

Sample message

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$finders".

WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedVariableFound
WARNINGMaintainabilityNon-prefixed constant3
Category
Maintainability
Occurrences
3
Severity
warning

Sample message

Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "M4W_FILE".

WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedConstantFound
WARNINGSecurityMissing nonce verification3
Category
Security
Occurrences
3
Severity
warning

Sample message

Processing form data without nonce verification.

WordPress.Security.NonceVerification.Missing
WARNINGMaintainabilityslow db query meta key2
Category
Maintainability
Occurrences
2
Severity
warning

Sample message

Detected usage of meta_key, possible slow query.

WordPress.DB.SlowDBQuery.slow_db_query_meta_key
WARNINGMaintainabilityslow db query meta value2
Category
Maintainability
Occurrences
2
Severity
warning

Sample message

Detected usage of meta_value, possible slow query.

WordPress.DB.SlowDBQuery.slow_db_query_meta_value
WARNINGMaintainabilityerror log trigger error2
Category
Maintainability
Occurrences
2
Severity
warning

Sample message

trigger_error() found. Debug code should not normally be used in production.

WordPress.PHP.DevelopmentFunctions.error_log_trigger_error
WARNINGMaintainabilitySchema Change1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

Attempting a database schema change is discouraged.

WordPress.DB.DirectDatabaseQuery.SchemaChange
WARNINGMaintainabilityNon-prefixed global symbol1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

The "inpsyde.feature_flags.mollie" prefix is not a valid namespace/function/class/variable/constant prefix in PHP.

WordPress.NamingConventions.PrefixAllGlobals.InvalidPrefixPassed
WARNINGMaintainabilityNot In Footer1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

In footer ($in_footer) is not set explicitly wp_register_script; It is recommended to load scripts in the footer. Please set this value to `true` to load it in the footer, or explicitly `false` if it should be loaded in the header.

WordPress.WP.EnqueuedResourceParameters.NotInFooter
ERRORI18nMissing Arg Domain1
Category
I18n
Occurrences
1
Severity
error

Sample message

Missing $domain parameter in function call to __().

WordPress.WP.I18n.MissingArgDomainReference
WARNINGI18nNo Html Wrapped Strings1
Category
I18n
Occurrences
1
Severity
warning

Sample message

Translatable string should not be wrapped in HTML. Found: '<p>The appearance of the Apple Pay button can be controlled in the <a href="%1$s">Checkout page editor</a>.</p>'

WordPress.WP.I18n.NoHtmlWrappedStringsReference
ERRORMaintainabilityapplication detected1
Category
Maintainability
Occurrences
1
Severity
error

Sample message

Application files are not permitted.

application_detected
ERRORSupply ChainHidden files included1
Category
Supply Chain
Occurrences
1
Severity
error

Sample message

Hidden files are not permitted.

hidden_files
WARNINGMaintainabilitymissing composer json file1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

The "/vendor" directory using composer exists, but "composer.json" file is missing.

missing_composer_json_fileReference

External Connections

Not analyzed yet.

Score History

First score snapshot

v8.1.7

33

Latest

Findings
193
Errors
70
Warnings
123
Check
2.0.0

Relationship Map

Author, categories, issues, domains, and nearby plugins.

29 nodes

Related

WooCommerce22 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder35 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreLiteSpeed Cache35 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreAll-in-One WP Migration and Backup34 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreRank Math SEO – AI SEO Tools to Dominate SEO Rankings31 scoreWP Mail SMTP by WPForms – The Most Popular SMTP and Email Log Plugin30 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scorePopup Builder & Popup Maker for WordPress – OptinMonster Email Marketing and Lead Generation32 scoreWooPayments: Integrated WooCommerce Payments30 scoreWooCommerce PayPal Payments37 score

Related Plugins

GetResponse Official

4k+ active installs

100
Live Carts for WooCommerce: Track Real-Time, Abandoned, and Converted Carts!

600 active installs

100
Visa Acceptance Solutions

10k+ active installs

100
Lemon Squeezy — Sell Digital Products, Subscriptions, and Licenses

500 active installs

99
Quiz Builder for WooCommerce – Product Recommendations

2k+ active installs

99
Wishlist for WooCommerce

900 active installs

99