Boost sales by promoting products as upsells before payment. Customers can accept the deal from the Checkout page with just one click
23
Score
1,720
Errors
1,562
Warnings
+0
Change
Category Scores
Security0
Repo89
Performance97
Maintainability0
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Security
1,673
9 issue groups
Maintainability
1,137
13 issue groups
I18n
410
3 issue groups
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '" data-wp-lists='list:$singular'"'.1,033
- Category
- Security
- Occurrences
- 1,033
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '" data-wp-lists='list:$singular'"'.
WARNINGMaintainabilityNon-prefixed hook nameHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "_bump_offer/admin/quick_edit/bump/markup".404
- Category
- Maintainability
- Occurrences
- 404
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "_bump_offer/admin/quick_edit/bump/markup".
WARNINGMaintainabilityNon-prefixed functionFunctions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "__return_list_false".292
- Category
- Maintainability
- Occurrences
- 292
- Severity
- warning
Sample message
Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "__return_list_false".
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$args".286
- Category
- Maintainability
- Occurrences
- 286
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$args".
ERRORI18nMissing Translators CommentA function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.190
- Category
- I18n
- Occurrences
- 190
- Severity
- error
Sample message
A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.
WARNINGSecurityRequest data is not unslashed$_COOKIE['molongui_added_order_bump_'.$deal->ID] not unslashed before sanitization. Use wp_unslash() or similar169
- Category
- Security
- Occurrences
- 169
- Severity
- warning
Sample message
$_COOKIE['molongui_added_order_bump_'.$deal->ID] not unslashed before sanitization. Use wp_unslash() or similar
ERRORSecurityUnsafe printing functionAll output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.152
- Category
- Security
- Occurrences
- 152
- Severity
- error
Sample message
All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_COOKIE['molongui_added_order_bump_'.$deal->ID]149
- Category
- Security
- Occurrences
- 149
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_COOKIE['molongui_added_order_bump_'.$deal->ID]
ERRORI18nUnordered Placeholders TextMultiple placeholders in translatable strings should be ordered. Expected "%1\$s, %2\$s", but got "%s, %s" in "%sAnywhere%s – Use the provided shortcode to display an offer anywhere you wish".146
- Category
- I18n
- Occurrences
- 146
- Severity
- error
Sample message
Multiple placeholders in translatable strings should be ordered. Expected "%1\$s, %2\$s", but got "%s, %s" in "%sAnywhere%s – Use the provided shortcode to display an offer anywhere you wish".
WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.88
- Category
- Security
- Occurrences
- 88
- Severity
- warning
Sample message
Processing form data without nonce verification.
Show 15 moreShow less
ERRORI18nMissing Arg Domain74
- Category
- I18n
- Occurrences
- 74
- Severity
- error
Sample message
Missing $domain parameter in function call to __().
WARNINGSecurityInput is not validated34
- Category
- Security
- Occurrences
- 34
- Severity
- warning
Sample message
Detected usage of a possibly undefined superglobal array index: $_POST['bump_id']. Check that the array index exists before using it.
WARNINGMaintainabilityDirect Query24
- Category
- Maintainability
- Occurrences
- 24
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGMaintainabilityNo Caching24
- Category
- Maintainability
- Occurrences
- 24
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
ERRORMaintainabilityrand rand24
- Category
- Maintainability
- Occurrences
- 24
- Severity
- error
Sample message
rand() is discouraged. Use the far less predictable wp_rand() instead.
ERRORMaintainabilityNo Explicit Version24
- Category
- Maintainability
- Occurrences
- 24
- Severity
- error
Sample message
Version parameter is not explicitly set or has been set to an equivalent of "false" for wp_enqueue_script; This means that the WordPress core version will be used which is not recommended for plugin or theme development.
WARNINGSecurityInterpolated SQL is not prepared20
- Category
- Security
- Occurrences
- 20
- Severity
- warning
Sample message
Use placeholders and $wpdb->prepare(); found interpolated variable $extra_checks at \t\t\t$extra_checks\n
WARNINGMaintainabilityDynamic hook name18
- Category
- Maintainability
- Occurrences
- 18
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "$this->identifier . '_cron_interval'".
ERRORSecurityDatabase parameter is not escaped14
- Category
- Security
- Occurrences
- 14
- Severity
- error
Sample message
Unescaped parameter $column used in $wpdb->get_row()\n$column assigned unsafely at line 126.
WARNINGSecurityMissing nonce verification14
- Category
- Security
- Occurrences
- 14
- Severity
- warning
Sample message
Processing form data without nonce verification.
ERRORMaintainabilityMissing direct file access protection11
- Category
- Maintainability
- Occurrences
- 11
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
ERRORMaintainabilitycurl curl setopt10
- Category
- Maintainability
- Occurrences
- 10
- Severity
- error
Sample message
Using cURL functions is highly discouraged. Use wp_remote_get() instead.
WARNINGMaintainabilityNot In Footer8
- Category
- Maintainability
- Occurrences
- 8
- Severity
- warning
Sample message
In footer ($in_footer) is not set explicitly wp_enqueue_script; It is recommended to load scripts in the footer. Please set this value to `true` to load it in the footer, or explicitly `false` if it should be loaded in the header.
ERRORMaintainabilitydate date6
- Category
- Maintainability
- Occurrences
- 6
- Severity
- error
Sample message
date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.
WARNINGMaintainabilityerror log print r6
- Category
- Maintainability
- Occurrences
- 6
- Severity
- warning
Sample message
print_r() found. Debug code should not normally be used in production.
External Connections
Potential connections found in static code analysis.
Outbound calls
288
External assets
2
Incoming endpoints
10
Notable Domains
molongui.com47 · outbound
cdn.jsdelivr.net28 · outbound
yandex.com24 · outbound
en.wikipedia.org18 · outbound
demos.molongui.com12 · outbound
apple.com8 · outbound
Platform / Reference Domains
w3.org24 · platform/reference
github.com22 · platform/reference
opensource.org10 · platform/reference
ps.w.org8 · platform/reference
wordpress.org8 · platform/reference
gnu.org4 · platform/reference
validator.w3.org2 · platform/reference
External Asset Domains
youtube.com2 · asset
Incoming Endpoints
wp_ajax_nopriv_public
wp_ajax
wp_ajax_nopriv_mbo_ajax_add_to_cartpublic
wp_ajax
Admin AJAX endpoints3
wp_ajax_mbo_ajax_add_to_cartauthenticated
wp_ajax
wp_ajax_molongui_notice_dismissauthenticated
wp_ajax
wp_ajax_molongui_send_mailauthenticated
wp_ajax
Score History
First score snapshot
v2.6.4
23
Latest
- Findings
- 3,282
- Errors
- 1,720
- Warnings
- 1,562
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 23 | 3,282 | 1,720 | 1,562 | v2.6.4 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Author
Category
Issue
Domain
Related
CartFlows – Funnel Builder & Checkout Plugin for WooCommerce22 scoreUpsellWP – Upsell and Related Products Offers for WooCommerce100 scoreWPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell23 scoreCheckout Upsell Funnel for WooCommerce44 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce22 scoreAkismet Anti-spam: Spam Protection35 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder39 scoreClassic Editor63 scoreLiteSpeed Cache35 scoreAll-in-One WP Migration and Backup34 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreMolongui Authorship – Author Boxes, Guest Authors & Co-Authors for WordPress22 score
Author
Category
Issue
Domain
Related
CartFlows – Funnel Builder & Checkout Plugin for WooCommerce22 scoreUpsellWP – Upsell and Related Products Offers for WooCommerce100 scoreWPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell23 scoreCheckout Upsell Funnel for WooCommerce44 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce22 scoreAkismet Anti-spam: Spam Protection35 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder39 scoreClassic Editor63 scoreLiteSpeed Cache35 scoreAll-in-One WP Migration and Backup34 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreMolongui Authorship – Author Boxes, Guest Authors & Co-Authors for WordPress22 score
Related Plugins
UpsellWP – Upsell and Related Products Offers for WooCommerce
5k+ active installs
100
Checkout Upsell Funnel for WooCommerce
600 active installs
44
WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell
5k+ active installs
23
CartFlows – Funnel Builder & Checkout Plugin for WooCommerce
200k+ active installs
22