Add product addons (fields) to WooCommerce products. Personalise with various product options for WooCommerce. Create product forms for WooCommerce.
35
Score
18
Errors
84
Warnings
+0
Change
Category Scores
Security58
Repo87
Performance100
Maintainability55
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Maintainability
84
17 issue groups
Security
11
4 issue groups
I18n
4
3 issue groups
Supply Chain
1
1 issue group
WARNINGMaintainabilityNon-prefixed functionFunctions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "PIF_Lite".26
- Category
- Maintainability
- Occurrences
- 26
- Severity
- warning
Sample message
Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "PIF_Lite".
WARNINGMaintainabilityNon-prefixed classClasses declared by a theme/plugin should start with the theme/plugin prefix. Found: "PIF_Admin".20
- Category
- Maintainability
- Occurrences
- 20
- Severity
- warning
Sample message
Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "PIF_Admin".
WARNINGMaintainabilityNon-prefixed hook nameHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "active_plugins".12
- Category
- Maintainability
- Occurrences
- 12
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "active_plugins".
WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.7
- Category
- Security
- Occurrences
- 7
- Severity
- warning
Sample message
Processing form data without nonce verification.
ERRORMaintainabilityOffloaded ContentFound call to wp_enqueue_script() with external resource. Offloading scripts to your servers or any remote service is disallowed.6
- Category
- Maintainability
- Occurrences
- 6
- Severity
- error
Sample message
Found call to wp_enqueue_script() with external resource. Offloading scripts to your servers or any remote service is disallowed.
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$key".5
- Category
- Maintainability
- Occurrences
- 5
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$key".
WARNINGMaintainabilityDynamic hook nameHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "$this->plugin_short_name . '_init_tracker_completed'".3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "$this->plugin_short_name . '_init_tracker_completed'".
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_GET['section']2
- Category
- Security
- Occurrences
- 2
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_GET['section']
ERRORI18nText Domain MismatchMismatched text domain. Expected 'product-input-fields-for-woocommerce' but got 'woocommerce'.2
- Category
- I18n
- Occurrences
- 2
- Severity
- error
Sample message
Mismatched text domain. Expected 'product-input-fields-for-woocommerce' but got 'woocommerce'.
ERRORMaintainabilitywp function not compatible with requires wpFunction "sanitize_textarea_field()" requires WordPress 4.7.0, but your plugin minimum supported version is WordPress 4.4.0.2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
Function "sanitize_textarea_field()" requires WordPress 4.7.0, but your plugin minimum supported version is WordPress 4.4.0.
Show 15 moreShow less
WARNINGMaintainabilityDirect Query1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGMaintainabilityNo Caching1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
WARNINGMaintainabilityslow db query meta query1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Detected usage of meta_query, possible slow query.
WARNINGMaintainabilityNon-prefixed constant1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "PIF_FILE".
WARNINGMaintainabilityNon-prefixed global variable1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "$variable".
ERRORSecurityOutput is not escaped1
- Category
- Security
- Occurrences
- 1
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$html'.
WARNINGSecurityRequest data is not unslashed1
- Category
- Security
- Occurrences
- 1
- Severity
- warning
Sample message
$_GET['section'] not unslashed before sanitization. Use wp_unslash() or similar
WARNINGMaintainabilityMissing Version1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Resource version not set in call to wp_register_script(). This means new versions of the script may not always be loaded due to browser caching.
WARNINGMaintainabilityNot In Footer1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
In footer ($in_footer) is not set explicitly wp_register_script; It is recommended to load scripts in the footer. Please set this value to `true` to load it in the footer, or explicitly `false` if it should be loaded in the header.
ERRORI18nNon Singular String Literal Domain1
- Category
- I18n
- Occurrences
- 1
- Severity
- error
Sample message
The $domain parameter must be a single text string literal. Found: $this->plugin_locale
ERRORI18nNon Singular String Literal Text1
- Category
- I18n
- Occurrences
- 1
- Severity
- error
Sample message
The $text parameter must be a single text string literal. Found: $field_title
ERRORMaintainabilitybadly named files1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
File and folder names must not contain spaces or special characters.
ERRORSupply ChainHidden files included1
- Category
- Supply Chain
- Occurrences
- 1
- Severity
- error
Sample message
Hidden files are not permitted.
ERRORMaintainabilityinvalid tested upto minor1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
Tested up to: 7.0.2 The version number should only include major versions 7.0.
ERRORMaintainabilitylibrary core files1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
Library files that are already in the WordPress core are not permitted.
External Connections
Potential connections found in static code analysis.
Outbound calls
29
External assets
0
Incoming endpoints
3
Notable Domains
tychesoftwares.com7 · outbound
momentjs.com6 · outbound
timepicker.co3 · outbound
tracking.tychesoftwares.com2 · outbound
w3schools.com2 · outbound
api.jqueryui.com1 · outbound
Platform / Reference Domains
w3.org2 · platform/reference
br.wordpress.org1 · platform/reference
codex.wordpress.org1 · platform/reference
gnu.org1 · platform/reference
wordpress.org1 · platform/reference
External Asset Domains
No external asset domains detected.
Incoming Endpoints
wp_ajax_nopriv_alg_wc_pif_save_for_expresspublic
wp_ajax
Admin AJAX endpoints2
wp_ajax_alg_wc_pif_save_for_expressauthenticated
wp_ajax
wp_ajax_tyche_plugin_deactivation_submit_actionauthenticated
wp_ajax
Score History
2 score snapshots
v2.0.3
35
Latest
- Findings
- 102
- Errors
- 18
- Warnings
- 84
- Check
- 2.0.0
v2.0.1
35
Score
- Findings
- 102
- Errors
- 18
- Warnings
- 84
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 35 | 102 | 18 | 84 | v2.0.3 | 2.0.0 |
| 35 | 102 | 18 | 84 | v2.0.1 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Author
Category
Issue
Domain
Related
Elementor Website Builder – more than just a page builder39 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce21 scoreLiteSpeed Cache35 scoreAkismet Anti-spam: Spam Protection35 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreWPCode – Insert Headers and Footers + Custom Code Snippets – WordPress Code Manager88 scoreJetpack – WP Security, Backup, Speed, & Growth22 scoreAdvanced Custom Fields (ACF®)23 scoreMeta Box95 scoreCheckout Field Editor (Checkout Manager) for WooCommerce41 scoreCMB236 scoreAdmin Columns25 score
Author
Category
Issue
Domain
Related
Elementor Website Builder – more than just a page builder39 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce21 scoreLiteSpeed Cache35 scoreAkismet Anti-spam: Spam Protection35 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreWPCode – Insert Headers and Footers + Custom Code Snippets – WordPress Code Manager88 scoreJetpack – WP Security, Backup, Speed, & Growth22 scoreAdvanced Custom Fields (ACF®)23 scoreMeta Box95 scoreCheckout Field Editor (Checkout Manager) for WooCommerce41 scoreCMB236 scoreAdmin Columns25 score
Related Plugins
CubeWP Framework
4k+ active installs
100
Product Addons and Product Options With Custom Fields – WowAddons
4k+ active installs
100
MB Elementor Integration
2k+ active installs
99
Repeaterly – ACF Repeater, Flexible Content & Dynamic Tags for Elementor
500 active installs
99
Extra Product Options For WooCommerce | Custom Product Addons and Fields
30k+ active installs
98
Ajax Load More for Advanced Custom Fields
2k+ active installs
98