PluginScore

PickPlugins Product Designer for WooCommerce

Ready product designer plugin for WooCommerce

v1.0.40PickPluginsUpdated Added 500 installs64% rating
custom productproduct customizerproduct designerwoocommerce product designer
46
Score
14
Errors
123
Warnings
+0
Change

Category Scores

Security14
Repo100
Performance100
Maintainability66

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

137 findings

Maintainability

84

10 issue groups

Security

53

4 issue groups

WARNINGSecurityMissing nonce verificationProcessing form data without nonce verification.22
Category
Security
Occurrences
22
Severity
warning

Sample message

Processing form data without nonce verification.

WordPress.Security.NonceVerification.Missing
WARNINGMaintainabilityMissing VersionResource version not set in call to wp_enqueue_script(). This means new versions of the script may not always be loaded due to browser caching.20
Category
Maintainability
Occurrences
20
Severity
warning

Sample message

Resource version not set in call to wp_enqueue_script(). This means new versions of the script may not always be loaded due to browser caching.

WordPress.WP.EnqueuedResourceParameters.MissingVersion
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$active".14
Category
Maintainability
Occurrences
14
Severity
warning

Sample message

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$active".

WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedVariableFound
ERRORMaintainabilitywp function not compatible with requires wpFunction "wp_enqueue_editor()" requires WordPress 4.8.0, but your plugin minimum supported version is WordPress 3.8.0.14
Category
Maintainability
Occurrences
14
Severity
error

Sample message

Function "wp_enqueue_editor()" requires WordPress 4.8.0, but your plugin minimum supported version is WordPress 3.8.0.

wp_function_not_compatible_with_requires_wpReference
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_POST['canvas']13
Category
Security
Occurrences
13
Severity
warning

Sample message

Detected usage of a non-sanitized input variable: $_POST['canvas']

WordPress.Security.ValidatedSanitizedInput.InputNotSanitized
WARNINGSecurityInput is not validatedDetected usage of a possibly undefined superglobal array index: $_POST['nonce']. Check that the array index exists before using it.11
Category
Security
Occurrences
11
Severity
warning

Sample message

Detected usage of a possibly undefined superglobal array index: $_POST['nonce']. Check that the array index exists before using it.

WordPress.Security.ValidatedSanitizedInput.InputNotValidated
WARNINGMaintainabilityNon-prefixed classClasses declared by a theme/plugin should start with the theme/plugin prefix. Found: "ProductDesigner".8
Category
Maintainability
Occurrences
8
Severity
warning

Sample message

Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "ProductDesigner".

WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedClassFound
WARNINGMaintainabilityNon-prefixed functionFunctions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "clipart_metabox_tabs_content_general".8
Category
Maintainability
Occurrences
8
Severity
warning

Sample message

Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "clipart_metabox_tabs_content_general".

WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedFunctionFound
WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.7
Category
Security
Occurrences
7
Severity
warning

Sample message

Processing form data without nonce verification.

WordPress.Security.NonceVerification.Recommended
WARNINGMaintainabilityNot In FooterIn footer ($in_footer) is not set explicitly wp_enqueue_script; It is recommended to load scripts in the footer. Please set this value to `true` to load it in the footer, or explicitly `false` if it should be loaded in the header.7
Category
Maintainability
Occurrences
7
Severity
warning

Sample message

In footer ($in_footer) is not set explicitly wp_enqueue_script; It is recommended to load scripts in the footer. Please set this value to `true` to load it in the footer, or explicitly `false` if it should be loaded in the header.

WordPress.WP.EnqueuedResourceParameters.NotInFooter
Show 4 more
WARNINGMaintainabilityNon-prefixed hook name6
Category
Maintainability
Occurrences
6
Severity
warning

Sample message

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "'clipart_metabox_tabs_content_' . $id".

WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedHooknameFound
WARNINGMaintainabilityslow db query tax query4
Category
Maintainability
Occurrences
4
Severity
warning

Sample message

Detected usage of tax_query, possible slow query.

WordPress.DB.SlowDBQuery.slow_db_query_tax_query
WARNINGMaintainabilitytrademarked term2
Category
Maintainability
Occurrences
2
Severity
warning

Sample message

The plugin name includes a restricted term. Your chosen plugin name - "PickPlugins Product Designer for WooCommerce" - contains the restricted term "plugin" which cannot be used at all in your plugin name.

trademarked_term
WARNINGMaintainabilityerror log error log1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

error_log() found. Debug code should not normally be used in production.

WordPress.PHP.DevelopmentFunctions.error_log_error_log

External Connections

Potential connections found in static code analysis.

22 domains

Outbound calls

45

External assets

0

Incoming endpoints

24

Notable Domains

pickplugins.com7 · outbound
jscolor.com3 · outbound
flaticon.com2 · outbound
fontawesome.com2 · outbound
fontawesome.io2 · outbound
freeicons.io2 · outbound

Platform / Reference Domains

w3.org7 · platform/reference
github.com3 · platform/reference
wordpress.org2 · platform/reference
gnu.org1 · platform/reference

External Asset Domains

No external asset domains detected.

Incoming Endpoints

wp_ajax_nopriv_product_designer_ajax_add_to_cartpublic

wp_ajax

wp_ajax_nopriv_product_designer_ajax_create_templatepublic

wp_ajax

wp_ajax_nopriv_product_designer_ajax_delete_attach_idpublic

wp_ajax

wp_ajax_nopriv_product_designer_ajax_get_clipart_listpublic

wp_ajax

wp_ajax_nopriv_product_designer_ajax_get_shape_listpublic

wp_ajax

wp_ajax_nopriv_product_designer_ajax_load_pre_templatepublic

wp_ajax

Admin AJAX endpoints12
wp_ajax_product_designer_ajax_add_to_cartauthenticated

wp_ajax

wp_ajax_product_designer_ajax_create_templateauthenticated

wp_ajax

wp_ajax_product_designer_ajax_delete_attach_idauthenticated

wp_ajax

wp_ajax_product_designer_ajax_get_clipart_listauthenticated

wp_ajax

wp_ajax_product_designer_ajax_get_shape_listauthenticated

wp_ajax

wp_ajax_product_designer_ajax_load_pre_templateauthenticated

wp_ajax

wp_ajax_product_designer_ajax_paged_clipart_listauthenticated

wp_ajax

wp_ajax_product_designer_ajax_paged_shape_listauthenticated

wp_ajax

wp_ajax_product_designer_ajax_remove_pre_templateauthenticated

wp_ajax

wp_ajax_product_designer_ajax_save_as_templateauthenticated

wp_ajax

wp_ajax_product_designer_ajax_temp_save_side_outputauthenticated

wp_ajax

wp_ajax_product_designer_ajax_update_templateauthenticated

wp_ajax

Score History

First score snapshot

v1.0.40

46

Latest

Findings
137
Errors
14
Warnings
123
Check
2.0.0

Relationship Map

Author, categories, issues, domains, and nearby plugins.

36 nodes

Related Plugins

Zakeke Interactive Product Designer for WooCommerce

2k+ active installs

37
YayExtra – WooCommerce Extra Product Options

1k+ active installs

36
Product Configurator for WooCommerce

3k+ active installs

31
STAGGS – Product Configurator Toolkit

400 active installs

25