PayPal Brasil para WooCommerce

Easily add PayPal payment options to your WooCommerce store.

v1.7.0Otávio AugustoUpdated Added 1k+ installs76% rating
23
Score
554
Errors
328
Warnings
+0
Change

Category Scores

Security0
Repo89
Performance100
Maintainability0

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

882 findings

Security

558

8 issue groups

I18n

151

6 issue groups

Maintainability

143

11 issue groups

ERRORSecurityUnsafe printing functionAll output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.153
Category
Security
Occurrences
153
Severity
error

Sample message

All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.

ERRORSecurityException output is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$code'.137
Category
Security
Occurrences
137
Severity
error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$code'.

WARNINGSecurityMissing nonce verificationProcessing form data without nonce verification.91
Category
Security
Occurrences
91
Severity
warning

Sample message

Processing form data without nonce verification.

WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$all_plugins".58
Category
Maintainability
Occurrences
58
Severity
warning

Sample message

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$all_plugins".

ERRORI18nMissing Translators CommentA function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.55
Category
I18n
Occurrences
55
Severity
error

Sample message

A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.

WARNINGSecurityRequest data is not unslashed$_GET[$field] not unslashed before sanitization. Use wp_unslash() or similar50
Category
Security
Occurrences
50
Severity
warning

Sample message

$_GET[$field] not unslashed before sanitization. Use wp_unslash() or similar

ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$card'.46
Category
Security
Occurrences
46
Severity
error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$card'.

WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.45
Category
Security
Occurrences
45
Severity
warning

Sample message

Processing form data without nonce verification.

ERRORI18nInterpolated Variable TextThe $text parameter must not contain interpolated variables or expressions. Found: $debug_id43
Category
I18n
Occurrences
43
Severity
error

Sample message

The $text parameter must not contain interpolated variables or expressions. Found: $debug_id

WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_GET['action']32
Category
Security
Occurrences
32
Severity
warning

Sample message

Detected usage of a non-sanitized input variable: $_GET['action']

Show 15 more
WARNINGMaintainabilityNon-prefixed hook name26
Category
Maintainability
Occurrences
26
Severity
warning

Sample message

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "plugin_locale".

ERRORI18nUnordered Placeholders Text21
Category
I18n
Occurrences
21
Severity
error

Sample message

Multiple placeholders in translatable strings should be ordered. Expected "%1$d, %2$s", but got "%d, %s" in 'Credit card (%dx de %s) - PayPal'.

ERRORMaintainabilitycurl curl setopt20
Category
Maintainability
Occurrences
20
Severity
error

Sample message

Using cURL functions is highly discouraged. Use wp_remote_get() instead.

ERRORI18nText Domain Mismatch15
Category
I18n
Occurrences
15
Severity
error

Sample message

Mismatched text domain. Expected 'paypal-brasil-para-woocommerce' but got "paypal_brasil_para_woocommerce".

ERRORI18nNon Singular String Literal Text10
Category
I18n
Occurrences
10
Severity
error

Sample message

The $text parameter must be a single text string literal. Found: "[{$name}] Making request ({$method}) for {$url}:\n" . $data . "\n"

ERRORMaintainabilityMissing direct file access protection9
Category
Maintainability
Occurrences
9
Severity
error

Sample message

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

ERRORI18nMissing Arg Domain7
Category
I18n
Occurrences
7
Severity
error

Sample message

Missing $domain parameter in function call to __().

WARNINGMaintainabilityNon-prefixed function6
Category
Maintainability
Occurrences
6
Severity
warning

Sample message

Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "applyMask".

WARNINGMaintainabilityslow db query meta query4
Category
Maintainability
Occurrences
4
Severity
warning

Sample message

Detected usage of meta_query, possible slow query.

WARNINGSecurityInput is not validated4
Category
Security
Occurrences
4
Severity
warning

Sample message

Detected usage of a possibly undefined superglobal array index: $_POST['paypal-brasil-spb-pay-id']. Check that the array index exists before using it.

ERRORMaintainabilitycurl curl close4
Category
Maintainability
Occurrences
4
Severity
error

Sample message

Using cURL functions is highly discouraged. Use wp_remote_get() instead.

ERRORMaintainabilitycurl curl errno4
Category
Maintainability
Occurrences
4
Severity
error

Sample message

Using cURL functions is highly discouraged. Use wp_remote_get() instead.

ERRORMaintainabilitycurl curl exec4
Category
Maintainability
Occurrences
4
Severity
error

Sample message

Using cURL functions is highly discouraged. Use wp_remote_get() instead.

ERRORMaintainabilitycurl curl init4
Category
Maintainability
Occurrences
4
Severity
error

Sample message

Using cURL functions is highly discouraged. Use wp_remote_get() instead.

ERRORMaintainabilityparse url parse url4
Category
Maintainability
Occurrences
4
Severity
error

Sample message

parse_url() is discouraged because of inconsistency in the output across PHP versions; use wp_parse_url() instead.

External Connections

Potential connections found in static code analysis.

33 domains

Outbound calls

148

External assets

4

Incoming endpoints

2

Notable Domains

datatracker.ietf.org26 · outbound
php.net19 · outbound
tools.ietf.org16 · outbound
developer.paypal.com12 · outbound
paypal.com9 · outbound
sandbox.paypal.com5 · outbound

Platform / Reference Domains

github.com9 · platform/reference
w3.org3 · platform/reference
wordpress.org2 · platform/reference

External Asset Domains

paypalobjects.com4 · asset + outbound
c.paypal.com1 · asset

Incoming Endpoints

/wp-json/bcdc/v1/logREST

register_rest_route

Admin AJAX endpoints1
wp_ajax_paypal_brasil_wc_settingsauthenticated

wp_ajax

Score History

First score snapshot

v1.7.0

23

Latest

Findings
882
Errors
554
Warnings
328
Check
2.0.0

Relationship Map

Author, categories, issues, domains, and nearby plugins.

37 nodes

Related

Related Plugins