Easiest, fastest and the cheapest way to integrate couriers with all deliveries methods to send parcels with just a few button clicks.
23
Score
197
Errors
387
Warnings
+3
Change
Category Scores
Security0
Repo85
Performance100
Maintainability0
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Security
287
10 issue groups
Maintainability
238
14 issue groups
I18n
15
1 issue group
WARNINGMaintainabilityMixed line endingsFile has mixed line endings; this may cause incorrect results73
- Category
- Maintainability
- Occurrences
- 73
- Severity
- warning
Sample message
File has mixed line endings; this may cause incorrect results
WARNINGSecurityRequest data is not unslashed$_GET['_wp_nonce'] not unslashed before sanitization. Use wp_unslash() or similar70
- Category
- Security
- Occurrences
- 70
- Severity
- warning
Sample message
$_GET['_wp_nonce'] not unslashed before sanitization. Use wp_unslash() or similar
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_GET['_wp_nonce']49
- Category
- Security
- Occurrences
- 49
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_GET['_wp_nonce']
ERRORSecuritySQL query is not preparedUse placeholders and $wpdb->prepare(); found $query46
- Category
- Security
- Occurrences
- 46
- Severity
- error
Sample message
Use placeholders and $wpdb->prepare(); found $query
WARNINGSecurityInput is not validatedDetected usage of a possibly undefined superglobal array index: $_GET['_wpnonce']. Check that the array index exists before using it.35
- Category
- Security
- Occurrences
- 35
- Severity
- warning
Sample message
Detected usage of a possibly undefined superglobal array index: $_GET['_wpnonce']. Check that the array index exists before using it.
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$aeroCheckoutEnd'.30
- Category
- Security
- Occurrences
- 30
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$aeroCheckoutEnd'.
WARNINGMaintainabilityNon-prefixed classClasses declared by a theme/plugin should start with the theme/plugin prefix. Found: "MP_Actions".24
- Category
- Maintainability
- Occurrences
- 24
- Severity
- warning
Sample message
Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "MP_Actions".
WARNINGSecuritywp redirect wp redirectwp_redirect() found. Using wp_safe_redirect(), along with the "allowed_redirect_hosts" filter if needed, can help avoid any chances of malicious redirects within code. It is also important to remember to call exit() after a redirect so that no other unwanted code is executed.24
- Category
- Security
- Occurrences
- 24
- Severity
- warning
Sample message
wp_redirect() found. Using wp_safe_redirect(), along with the "allowed_redirect_hosts" filter if needed, can help avoid any chances of malicious redirects within code. It is also important to remember to call exit() after a redirect so that no other unwanted code is executed.
WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.21
- Category
- Maintainability
- Occurrences
- 21
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGMaintainabilityNon-prefixed functionFunctions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "MultiParcels".21
- Category
- Maintainability
- Occurrences
- 21
- Severity
- warning
Sample message
Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "MultiParcels".
Show 15 moreShow less
WARNINGMaintainabilityNon-prefixed hook name21
- Category
- Maintainability
- Occurrences
- 21
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "active_plugins".
WARNINGMaintainabilityNo Caching17
- Category
- Maintainability
- Occurrences
- 17
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
ERRORMaintainabilitywp function not compatible with requires wp17
- Category
- Maintainability
- Occurrences
- 17
- Severity
- error
Sample message
Function "get_user_locale()" requires WordPress 4.7.0, but your plugin minimum supported version is WordPress 4.4.0.
ERRORI18nMissing Translators Comment15
- Category
- I18n
- Occurrences
- 15
- Severity
- error
Sample message
A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.
WARNINGSecurityMissing nonce verification11
- Category
- Security
- Occurrences
- 11
- Severity
- warning
Sample message
Processing form data without nonce verification.
ERRORSecurityDatabase parameter is not escaped10
- Category
- Security
- Occurrences
- 10
- Severity
- error
Sample message
Unescaped parameter $query used in $wpdb->get_results()\n$query assigned unsafely at line 129.
ERRORMaintainabilitycurl curl setopt10
- Category
- Maintainability
- Occurrences
- 10
- Severity
- error
Sample message
Using cURL functions is highly discouraged. Use wp_remote_get() instead.
ERRORMaintainabilityOffloaded Content8
- Category
- Maintainability
- Occurrences
- 8
- Severity
- error
Sample message
Found call to wp_register_script() with external resource. Offloading scripts to your servers or any remote service is disallowed.
WARNINGSecurityDatabase parameter is not escaped7
- Category
- Security
- Occurrences
- 7
- Severity
- warning
Sample message
Unescaped parameter $table_name used in $wpdb->query()\n$table_name assigned unsafely at line 65.
ERRORMaintainabilitydate date7
- Category
- Maintainability
- Occurrences
- 7
- Severity
- error
Sample message
date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.
ERRORSecurityQuoted Simple Placeholder5
- Category
- Security
- Occurrences
- 5
- Severity
- error
Sample message
Simple placeholders should not be quoted in the query string in $wpdb->prepare(). Found: '%s'.
ERRORMaintainabilityrand mt rand5
- Category
- Maintainability
- Occurrences
- 5
- Severity
- error
Sample message
mt_rand() is discouraged. Use the far less predictable wp_rand() instead.
ERRORMaintainabilitybadly named files5
- Category
- Maintainability
- Occurrences
- 5
- Severity
- error
Sample message
File and folder names must not contain spaces or special characters.
ERRORMaintainabilityMissing direct file access protection5
- Category
- Maintainability
- Occurrences
- 5
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
WARNINGMaintainabilitySchema Change4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- warning
Sample message
Attempting a database schema change is discouraged.
External Connections
Potential connections found in static code analysis.
Outbound calls
18
External assets
1
Incoming endpoints
34
Notable Domains
app.noparcels.com4 · outbound
multiparcels.com3 · outbound
multisiuntos.lt2 · outbound
api.multiparcels.com1 · outbound
developers.google.com1 · outbound
localise.biz1 · outbound
Platform / Reference Domains
gnu.org2 · platform/reference
External Asset Domains
maps.googleapis.com1 · asset
Incoming Endpoints
/wp-json/custom/v1/shipment-statusREST
register_rest_route
admin_post_nopriv_serve_labelpublic
admin_post
wp_ajax_nopriv_public
wp_ajax
wp_ajax_nopriv_checkout_blocks_hide_inputs_for_terminalpublic
wp_ajax
wp_ajax_nopriv_load_additional_blockpublic
wp_ajax
wp_ajax_nopriv_multiparcels_checkout_address_autocompletepublic
wp_ajax
Admin AJAX endpoints19
admin_post_multiparcels_carrier_changeauthenticated
admin_post
admin_post_multiparcels_request_api_keyauthenticated
admin_post
admin_post_multiparcels_run_automatic_confirmationauthenticated
admin_post
admin_post_multiparcels_update_dataauthenticated
admin_post
admin_post_serve_labelauthenticated
admin_post
wp_ajax_checkout_blocks_hide_inputs_for_terminalauthenticated
wp_ajax
wp_ajax_dismiss_admin_noticeauthenticated
wp_ajax
wp_ajax_load_additional_blockauthenticated
wp_ajax
wp_ajax_multiparcels_checkout_address_autocompleteauthenticated
wp_ajax
wp_ajax_multiparcels_checkout_get_pickup_pointsauthenticated
wp_ajax
wp_ajax_multiparcels_checkout_get_pickup_points_blocksauthenticated
wp_ajax
wp_ajax_multiparcels_checkout_get_pickup_points_classicauthenticated
wp_ajax
7 more hidden
Score History
10 score snapshots
v1.30.36
23
Latest
- Findings
- 584
- Errors
- 197
- Warnings
- 387
- Check
- 2.0.0
v1.30.35
20
Score
- Findings
- 592
- Errors
- 203
- Warnings
- 389
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 23 | 584 | 197 | 387 | v1.30.36 | 2.0.0 |
| 20 | 592 | 203 | 389 | v1.30.35 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Author
Issue
Domain
Related
InPost PL94 scoreInpost Paczkomaty65 scoreApaczka: integracja z WooCommerce37 scoreEstonian Shipping Methods for WooCommerce64 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreClassic Editor63 scoreWooCommerce21 scoreAll-in-One WP Migration and Backup34 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreKirki – Freeform Page Builder, Website Builder & Customizer24 scorePage Builder: Pagelayer – Drag and Drop website builder24 scoreAd Inserter – Ad Manager & AdSense Ads23 scoreMembers – Membership & User Role Editor Plugin32 score
Author
Issue
Domain
Related
InPost PL94 scoreInpost Paczkomaty65 scoreApaczka: integracja z WooCommerce37 scoreEstonian Shipping Methods for WooCommerce64 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreClassic Editor63 scoreWooCommerce21 scoreAll-in-One WP Migration and Backup34 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreKirki – Freeform Page Builder, Website Builder & Customizer24 scorePage Builder: Pagelayer – Drag and Drop website builder24 scoreAd Inserter – Ad Manager & AdSense Ads23 scoreMembers – Membership & User Role Editor Plugin32 score
Related Plugins
InPost PL
10k+ active installs
94
Inpost Paczkomaty
8k+ active installs
65
Estonian Shipping Methods for WooCommerce
1k+ active installs
64
Royal Mail Shipping Calculator for WooCommerce
1k+ active installs
39
Apaczka: integracja z WooCommerce
3k+ active installs
37
DPD SK for WooCommerce
700 active installs
37