Connect and manage all your payment methods, offer shoppers a beautiful Express Checkout, and reduce cart abandonment.
21
Score
485
Errors
813
Warnings
+1
Change
Category Scores
Security0
Repo77
Performance96
Maintainability0
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Maintainability
600
12 issue groups
Security
542
11 issue groups
I18n
123
2 issue groups
ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;237
- Category
- Maintainability
- Occurrences
- 237
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
WARNINGSecurityMissing nonce verificationProcessing form data without nonce verification.188
- Category
- Security
- Occurrences
- 188
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$accelerated_defaults".158
- Category
- Maintainability
- Occurrences
- 158
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$accelerated_defaults".
WARNINGSecurityRequest data is not unslashed$_GET['page'] not unslashed before sanitization. Use wp_unslash() or similar121
- Category
- Security
- Occurrences
- 121
- Severity
- warning
Sample message
$_GET['page'] not unslashed before sanitization. Use wp_unslash() or similar
ERRORI18nMissing Translators CommentA function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.89
- Category
- I18n
- Occurrences
- 89
- Severity
- error
Sample message
A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_GET['page']83
- Category
- Security
- Occurrences
- 83
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_GET['page']
WARNINGMaintainabilityNon-prefixed functionFunctions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "check_if_required".65
- Category
- Maintainability
- Occurrences
- 65
- Severity
- warning
Sample message
Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "check_if_required".
ERRORSecuritySQL query is not preparedUse placeholders and $wpdb->prepare(); found $query43
- Category
- Security
- Occurrences
- 43
- Severity
- error
Sample message
Use placeholders and $wpdb->prepare(); found $query
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$available_methods'.42
- Category
- Security
- Occurrences
- 42
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$available_methods'.
ERRORI18nUnordered Placeholders TextMultiple placeholders in translatable strings should be ordered. Expected "%1$s, %2$s", but got "%s, %s" in 'Apple Pay payment authorized and awaiting confirmation. Payment ID: %s | <a href="%s" target="_blank">View Payment</a>'.34
- Category
- I18n
- Occurrences
- 34
- Severity
- error
Sample message
Multiple placeholders in translatable strings should be ordered. Expected "%1$s, %2$s", but got "%s, %s" in 'Apple Pay payment authorized and awaiting confirmation. Payment ID: %s | <a href="%s" target="_blank">View Payment</a>'.
Show 15 moreShow less
WARNINGMaintainabilityNon-prefixed hook name33
- Category
- Maintainability
- Occurrences
- 33
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "'pp_checkout_form_field_' . $args['type']".
WARNINGMaintainabilityDirect Query30
- Category
- Maintainability
- Occurrences
- 30
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGMaintainabilityNo Caching28
- Category
- Maintainability
- Occurrences
- 28
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
WARNINGSecurityNonce verification recommended24
- Category
- Security
- Occurrences
- 24
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGMaintainabilityerror log error log21
- Category
- Maintainability
- Occurrences
- 21
- Severity
- warning
Sample message
error_log() found. Debug code should not normally be used in production.
ERRORSecuritySetting is missing a sanitization callback12
- Category
- Security
- Occurrences
- 12
- Severity
- error
Sample message
Sanitization missing for register_setting().
WARNINGSecurityInterpolated SQL is not prepared9
- Category
- Security
- Occurrences
- 9
- Severity
- warning
Sample message
Use placeholders and $wpdb->prepare(); found interpolated variable {$quoted_table} at "SHOW COLUMNS FROM {$quoted_table}"
WARNINGSecurityDatabase parameter is not escaped8
- Category
- Security
- Occurrences
- 8
- Severity
- warning
Sample message
Unescaped parameter $hpos_table used in $wpdb->get_col()\n$hpos_table assigned unsafely at line 1671.
WARNINGMaintainabilityNon-prefixed class8
- Category
- Maintainability
- Occurrences
- 8
- Severity
- warning
Sample message
Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "ConvesioPay_ApplePay_Blocks_Support".
ERRORSecurityException output is not escaped8
- Category
- Security
- Occurrences
- 8
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$message'.
WARNINGMaintainabilityslow db query meta query7
- Category
- Maintainability
- Occurrences
- 7
- Severity
- warning
Sample message
Detected usage of meta_query, possible slow query.
WARNINGMaintainabilityerror log var export5
- Category
- Maintainability
- Occurrences
- 5
- Severity
- warning
Sample message
var_export() found. Debug code should not normally be used in production.
WARNINGSecurityUnfinished Prepare4
- Category
- Security
- Occurrences
- 4
- Severity
- warning
Sample message
Replacement variables found, but no valid placeholders found in the query.
WARNINGMaintainabilityslow db query meta key4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- warning
Sample message
Detected usage of meta_key, possible slow query.
WARNINGMaintainabilityslow db query meta value4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- warning
Sample message
Detected usage of meta_value, possible slow query.
External Connections
Potential connections found in static code analysis.
Outbound calls
232
External assets
8
Incoming endpoints
60
Notable Domains
api.convesiopay.com19 · outbound
api-qa.convesiopay.com16 · outbound
convesiopay.com10 · outbound
peachpay.app10 · outbound
woocommerce.com9 · outbound
paypal.com8 · outbound
Platform / Reference Domains
w3.org13 · platform/reference
wordpress.org5 · platform/reference
github.com3 · platform/reference
developer.wordpress.org1 · platform/reference
gnu.org1 · platform/reference
External Asset Domains
js.convesiopay.com8 · asset + outbound
cdn.rawgit.com3 · asset + outbound
cdnjs.cloudflare.com3 · asset + outbound
cdn3.iconfinder.com1 · asset
fonts.googleapis.com1 · asset
martinezcreativegroup.com1 · asset
Incoming Endpoints
/wp-json/peachpay/v1/convesiopay/configREST
register_rest_route
/wp-json/peachpay/v1/convesiopay/webhookREST
register_rest_route
wp_ajax_nopriv_peachpay_ajax_loginpublic
wp_ajax
wp_ajax_nopriv_peachpay_convesiopay_blocks_set_chosen_payment_methodpublic
wp_ajax
wp_ajax_nopriv_peachpay_convesiopay_check_btcpay_statuspublic
wp_ajax
wp_ajax_nopriv_peachpay_convesiopay_create_btcpay_intentpublic
wp_ajax
Admin AJAX endpoints51
wp_ajax_test_convesiopay_gateway_classauthenticated
wp_ajax
admin_post_peachpay_download_logsauthenticated
admin_post
wp_ajax_convesiopay_manual_syncauthenticated
wp_ajax
wp_ajax_peachpay_authnet_delete_credentialsauthenticated
wp_ajax
wp_ajax_peachpay_authnet_save_credentialsauthenticated
wp_ajax
wp_ajax_peachpay_authnet_set_enabledauthenticated
wp_ajax
wp_ajax_peachpay_convesiopay_blocks_set_chosen_payment_methodauthenticated
wp_ajax
wp_ajax_peachpay_convesiopay_cancel_paymentauthenticated
wp_ajax
wp_ajax_peachpay_convesiopay_cancel_subscription_migrationauthenticated
wp_ajax
wp_ajax_peachpay_convesiopay_capture_paymentauthenticated
wp_ajax
wp_ajax_peachpay_convesiopay_check_btcpay_statusauthenticated
wp_ajax
wp_ajax_peachpay_convesiopay_clear_subscription_migration_logsauthenticated
wp_ajax
39 more hidden
Score History
3 score snapshots
v1.120.57
21
Latest
- Findings
- 1,298
- Errors
- 485
- Warnings
- 813
- Check
- 2.0.0
v1.120.53
20
Score
- Findings
- 1,190
- Errors
- 440
- Warnings
- 750
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 21 | 1,298 | 485 | 813 | v1.120.57 | 2.0.0 |
| 20 | 1,190 | 440 | 750 | v1.120.53 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Author
Issue
Missing direct file access protection237 findingsMissing nonce verification188 findingsNon-prefixed global variable158 findingsRequest data is not unslashed121 findingsMissing Translators Comment89 findingsInput is not sanitized83 findingsNon-prefixed function65 findingsSQL query is not prepared43 findings
Domain
Related
Contact Form 769 scoreWooCommerce22 scoreAkismet Anti-spam: Spam Protection35 scoreElementor Website Builder – more than just a page builder39 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreLiteSpeed Cache35 scoreAll-in-One WP Migration and Backup34 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreWooCommerce PayPal Payments37 scoreWooCommerce Stripe Payment Gateway30 scoreMollie Payments for WooCommerce32 scorePayment Plugins for Stripe WooCommerce25 scoreRazorpay for WooCommerce20 score
Author
Issue
Missing direct file access protection237 findingsMissing nonce verification188 findingsNon-prefixed global variable158 findingsRequest data is not unslashed121 findingsMissing Translators Comment89 findingsInput is not sanitized83 findingsNon-prefixed function65 findingsSQL query is not prepared43 findings
Domain
Related
Contact Form 769 scoreWooCommerce22 scoreAkismet Anti-spam: Spam Protection35 scoreElementor Website Builder – more than just a page builder39 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreLiteSpeed Cache35 scoreAll-in-One WP Migration and Backup34 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreWooCommerce PayPal Payments37 scoreWooCommerce Stripe Payment Gateway30 scoreMollie Payments for WooCommerce32 scorePayment Plugins for Stripe WooCommerce25 scoreRazorpay for WooCommerce20 score
Related Plugins
Visa Acceptance Solutions
10k+ active installs
100
Authorize.net Payments for WooCommerce
600 active installs
100
Mastercard Merchant Cloud
400 active installs
100
UddoktaPay
1k+ active installs
99
Helcim for WooCommerce
700 active installs
99
Lemon Squeezy — Sell Digital Products, Subscriptions, and Licenses
500 active installs
99