PluginScore

MONEI Payments for WooCommerce

Accept Card, Apple Pay, Google Pay, Bizum, PayPal and many more payment methods in your WooCommerce store using MONEI payment gateway.

v7.0.3moneiUpdated Added 500 installs100% rating
credit cardecommercepayment gatewaypaymentswoocommerce
35
Score
15
Errors
65
Warnings
+0
Change

Category Scores

Security82
Repo65
Performance100
Maintainability73

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

80 findings

Maintainability

64

11 issue groups

Supply Chain

9

1 issue group

I18n

3

2 issue groups

Security

3

3 issue groups

WARNINGMaintainabilityNon-prefixed hook nameHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "before_woocommerce_gateway_monei_init".26
Category
Maintainability
Occurrences
26
Severity
warning

Sample message

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "before_woocommerce_gateway_monei_init".

WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedHooknameFound
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$blockClassName".20
Category
Maintainability
Occurrences
20
Severity
warning

Sample message

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$blockClassName".

WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedVariableFound
ERRORSupply ChainHidden files includedHidden files are not permitted.9
Category
Supply Chain
Occurrences
9
Severity
error

Sample message

Hidden files are not permitted.

hidden_files
WARNINGMaintainabilityNon-prefixed classClasses declared by a theme/plugin should start with the theme/plugin prefix. Found: "WC_Monei_Addons_Redirect_Hooks".6
Category
Maintainability
Occurrences
6
Severity
warning

Sample message

Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "WC_Monei_Addons_Redirect_Hooks".

WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedClassFound
WARNINGMaintainabilityNon-prefixed functionFunctions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "WC_Monei".4
Category
Maintainability
Occurrences
4
Severity
warning

Sample message

Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "WC_Monei".

WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedFunctionFound
ERRORI18nText Domain MismatchMismatched text domain. Expected 'monei' but got 'woocommerce'.2
Category
I18n
Occurrences
2
Severity
error

Sample message

Mismatched text domain. Expected 'monei' but got 'woocommerce'.

WordPress.WP.I18n.TextDomainMismatchReference
ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;2
Category
Maintainability
Occurrences
2
Severity
error

Sample message

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

missing_direct_file_access_protectionReference
WARNINGI18nDiscouraged text-domain loadingload_plugin_textdomain() has been discouraged since WordPress version 4.6. When your plugin is hosted on WordPress.org, you no longer need to manually include this function call for translations under your plugin slug. WordPress will automatically load the translations for you as needed.1
Category
I18n
Occurrences
1
Severity
warning

Sample message

load_plugin_textdomain() has been discouraged since WordPress version 4.6. When your plugin is hosted on WordPress.org, you no longer need to manually include this function call for translations under your plugin slug. WordPress will automatically load the translations for you as needed.

PluginCheck.CodeAnalysis.DiscouragedFunctions.load_plugin_textdomainFoundReference
WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

Use of a direct database call is discouraged.

WordPress.DB.DirectDatabaseQuery.DirectQuery
WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().

WordPress.DB.DirectDatabaseQuery.NoCaching
Show 8 more
WARNINGMaintainabilityNon-prefixed global variable1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "$name".

WordPress.NamingConventions.PrefixAllGlobals.VariableConstantNameFound
WARNINGMaintainabilityerror log error log1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

error_log() found. Debug code should not normally be used in production.

WordPress.PHP.DevelopmentFunctions.error_log_error_log
WARNINGSecurityNonce verification recommended1
Category
Security
Occurrences
1
Severity
warning

Sample message

Processing form data without nonce verification.

WordPress.Security.NonceVerification.Recommended
WARNINGSecurityInput is not validated1
Category
Security
Occurrences
1
Severity
warning

Sample message

Detected usage of a possibly undefined superglobal array index: $_GET['_monei_hide_new_version_nonce']. Check that the array index exists before using it.

WordPress.Security.ValidatedSanitizedInput.InputNotValidated
WARNINGSecurityRequest data is not unslashed1
Category
Security
Occurrences
1
Severity
warning

Sample message

$_GET['monei-hide-new-version'] not unslashed before sanitization. Use wp_unslash() or similar

WordPress.Security.ValidatedSanitizedInput.MissingUnslash
ERRORMaintainabilityfile system operations readfile1
Category
Maintainability
Occurrences
1
Severity
error

Sample message

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: readfile().

WordPress.WP.AlternativeFunctions.file_system_operations_readfile
ERRORRepo Complianceoutdated tested upto header1
Category
Repo Compliance
Occurrences
1
Severity
error

Sample message

Tested up to: 6.8 < 7.0. The "Tested up to" value in your plugin is not set to the current version of WordPress. This means your plugin will not show up in searches, as we require plugins to be compatible and documented as tested up to the most recent version of WordPress.

outdated_tested_upto_headerReference
WARNINGMaintainabilityunexpected markdown file1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

Unexpected markdown file "CLAUDE.md" detected in plugin root. Only specific markdown files are expected in production plugins.

unexpected_markdown_file

External Connections

Potential connections found in static code analysis.

15 domains

Outbound calls

296

External assets

4

Incoming endpoints

0

Notable Domains

openapi-generator.tech120 · outbound
docs.monei.com23 · outbound
api.monei.com22 · outbound
postman.monei.com20 · outbound
php.net11 · outbound
dashboard.monei.com2 · outbound

Platform / Reference Domains

github.com62 · platform/reference
wordpress.org1 · platform/reference

External Asset Domains

js.monei.com30 · asset + outbound

Incoming Endpoints

No public endpoints detected.

Score History

First score snapshot

v7.0.3

35

Latest

Findings
80
Errors
15
Warnings
65
Check
2.0.0

Relationship Map

Author, categories, issues, domains, and nearby plugins.

37 nodes

Related Plugins

GetResponse Official

4k+ active installs

100
Live Carts for WooCommerce: Track Real-Time, Abandoned, and Converted Carts!

600 active installs

100
Paystack WooCommerce Payment Gateway

30k+ active installs

100
Visa Acceptance Solutions

10k+ active installs

100
Clover Payment Gateway by Zaytech for WooCommerce

500 active installs

99
Fr Custom Payment Gateway Icon for WooCommerce

2k+ active installs

99