Permalink Manager for WooCommerce

Permalink Manager for WooCommerce improves your store permalinks and remove product, product_category and product_tag slugs from the URL.

v1.0.8.2BeRocketUpdated Added 8k+ installs98% rating
39
Score
116
Errors
24
Warnings
+0
Change

Category Scores

Security0
Repo89
Performance100
Maintainability78

Top Issues by Category

Issues Details

140 issues found in latest scan

ERROR60
Generic.PHP.DisallowShortOpenTag.EchoFound

Short PHP opening tag used with echo; expected "<?php echo $this ..." but found "<?= $this ..."

ERROR49
WordPress.Security.EscapeOutput.OutputNotEscaped

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$this'.

WARNING6
WordPress.Security.ValidatedSanitizedInput.InputNotSanitized

Detected usage of a non-sanitized input variable: $_POST[$this-&gt;settings]

WARNING5
WordPress.Security.ValidatedSanitizedInput.InputNotValidated

Detected usage of a possibly undefined superglobal array index: $_POST[&#039;product_permalink_structure&#039;]. Check that the array index exists before using it.

WARNING4
WordPress.Security.NonceVerification.Missing

Processing form data without nonce verification.

WARNING4
WordPress.Security.ValidatedSanitizedInput.MissingUnslash

$_POST[$this-&gt;settings] not unslashed before sanitization. Use wp_unslash() or similar

ERROR2
WordPress.DB.PreparedSQL.NotPrepared

Use placeholders and $wpdb->prepare(); found $query

WARNING2
WordPress.Security.ValidatedSanitizedInput.InputNotValidatedNotSanitized

Detected usage of a non-sanitized, non-validated input variable _SERVER: &quot;$request_scheme://$_SERVER[HTTP_HOST]&quot;

WARNING1
WordPress.DB.DirectDatabaseQuery.DirectQuery

Use of a direct database call is discouraged.

WARNING1
WordPress.DB.DirectDatabaseQuery.NoCaching

Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().

WARNING1
WordPress.Security.NonceVerification.Recommended

Processing form data without nonce verification.

ERROR1
WordPress.WP.I18n.NonSingularStringLiteralText

The $text parameter must be a single text string literal. Found: $this->get( $this->options, 'prefix' )

ERROR1
WordPress.WP.I18n.TextDomainMismatch

Mismatched text domain. Expected 'permalink-manager-for-woocommerce' but got 'admin_texts_wc_links'.

ERROR1
missing_direct_file_access_protection

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

ERROR1
outdated_tested_upto_header

Tested up to: 6.9 < 7.0. The "Tested up to" value in your plugin is not set to the current version of WordPress. This means your plugin will not show up in searches, as we require plugins to be compatible and documented as tested up to the most recent version of WordPress.

ERROR1
plugin_header_no_license

Missing "License" in Plugin Header. Please update your Plugin Header with a valid GPLv2 (or later) compatible license.

Latest Snapshot

Findings

140

Errors

116

Warnings

24

Score History

First score snapshot

First scan completed

v1.0.8.2 · Plugin Check 2.0.0 · Model 2026.06-mvp-static-v2

v1.0.8.2

39

Latest

Findings
140
Errors
116
Warnings
24
Plugin Check
2.0.0
Model
2026.06-mvp-static-v2

Related Plugins