A powerful way to update your WooCommerce product catalog. Finally, no more tedious clicking through countless pages!
34
Score
219
Errors
149
Warnings
+0
Change
Category Scores
Security0
Repo94
Performance100
Maintainability47
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Security
215
11 issue groups
Maintainability
90
12 issue groups
I18n
54
2 issue groups
ERRORSecurityUnsafe printing functionAll output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.103
- Category
- Security
- Occurrences
- 103
- Severity
- error
Sample message
All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"<option value='$value' class='pwbe-dropdown-visibility-$option[visibility]'>$option[name]</option>\n"'.43
- Category
- Security
- Occurrences
- 43
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"<option value='$value' class='pwbe-dropdown-visibility-$option[visibility]'>$option[name]</option>\n"'.
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$categories".41
- Category
- Maintainability
- Occurrences
- 41
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$categories".
ERRORI18nText Domain MismatchMismatched text domain. Expected 'pw-bulk-edit' but got 'pw-woocommerce-coupons-plus'.38
- Category
- I18n
- Occurrences
- 38
- Severity
- error
Sample message
Mismatched text domain. Expected 'pw-bulk-edit' but got 'pw-woocommerce-coupons-plus'.
WARNINGSecurityInterpolated SQL is not preparedUse placeholders and $wpdb->prepare(); found interpolated variable $common_joins at \t\t\t\t$common_joins\n31
- Category
- Security
- Occurrences
- 31
- Severity
- warning
Sample message
Use placeholders and $wpdb->prepare(); found interpolated variable $common_joins at \t\t\t\t$common_joins\n
ERRORI18nMissing Translators CommentA function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.16
- Category
- I18n
- Occurrences
- 16
- Severity
- error
Sample message
A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.
WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.11
- Category
- Maintainability
- Occurrences
- 11
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGMaintainabilityNon-prefixed hook nameHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "'woocommerce_get_sections_' . $this->id".11
- Category
- Maintainability
- Occurrences
- 11
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "'woocommerce_get_sections_' . $this->id".
WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().9
- Category
- Maintainability
- Occurrences
- 9
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_POST['fields']7
- Category
- Security
- Occurrences
- 7
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_POST['fields']
Show 15 moreShow less
WARNINGSecurityInput is not validated7
- Category
- Security
- Occurrences
- 7
- Severity
- warning
Sample message
Detected usage of a possibly undefined superglobal array index: $_POST['name']. Check that the array index exists before using it.
WARNINGSecurityRequest data is not unslashed7
- Category
- Security
- Occurrences
- 7
- Severity
- warning
Sample message
$_POST['fields'] not unslashed before sanitization. Use wp_unslash() or similar
ERRORSecurityDatabase parameter is not escaped4
- Category
- Security
- Occurrences
- 4
- Severity
- error
Sample message
Unescaped parameter $common_joins used in $wpdb->query()\n$common_joins assigned unsafely at line 107.
WARNINGMaintainabilitySchema Change4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- warning
Sample message
Attempting a database schema change is discouraged.
ERRORSecuritySQL query is not prepared4
- Category
- Security
- Occurrences
- 4
- Severity
- error
Sample message
Use placeholders and $wpdb->prepare(); found $variations_sql
WARNINGSecurityMissing nonce verification4
- Category
- Security
- Occurrences
- 4
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGMaintainabilityNot In Footer4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- warning
Sample message
In footer ($in_footer) is not set explicitly wp_enqueue_script; It is recommended to load scripts in the footer. Please set this value to `true` to load it in the footer, or explicitly `false` if it should be loaded in the header.
WARNINGMaintainabilityDiscouraged PHP function3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
The use of function ini_set() is discouraged
WARNINGSecurityReplacements Wrong Number3
- Category
- Security
- Occurrences
- 3
- Severity
- warning
Sample message
Incorrect number of replacements passed to $wpdb->prepare(). Found 1 replacement parameters, expected 2.
WARNINGSecurityUnfinished Prepare2
- Category
- Security
- Occurrences
- 2
- Severity
- warning
Sample message
Replacement variables found, but no valid placeholders found in the query.
WARNINGMaintainabilityNon-prefixed class2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "PW_Bulk_Edit".
WARNINGMaintainabilitytrademarked term2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
The plugin name includes a restricted term. Your chosen plugin name - "PW WooCommerce Bulk Edit" - contains the restricted term "woocommerce" which cannot be used within in your plugin name, unless your plugin name contains one of the allowed patterns: "for woocommerce", "with woocommerce", "using woocommerce", or "and woocommerce". The term must still not appear anywhere else in your name.
WARNINGMaintainabilityMixed line endings1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
File has mixed line endings; this may cause incorrect results
ERRORMaintainabilityPlugin Directory Write1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
Plugin folders are deleted when upgraded. Do not save data to the plugin folder using file_put_contents(). Detected usage of function plugin_dir_path(). Use wp_upload_dir() to get the uploads directory path or save to the database instead.
ERRORMaintainabilitymysql mysqli error1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
Accessing the database directly should be avoided. Please use the $wpdb object and associated functions instead. Found: mysqli_error.
External Connections
Not analyzed yet.
Score History
First score snapshot
v2.141
34
Latest
- Findings
- 368
- Errors
- 219
- Warnings
- 149
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 34 | 368 | 219 | 149 | v2.141 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueRelated
Relationship links
Author
Issue
Related
WCBoost – Wishlist97 scoreClassic Editor63 scoreWooCommerce21 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreAkismet Anti-spam: Spam Protection35 scoreAll-in-One WP Migration and Backup34 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreDuplicate Page40 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreWordPress Importer25 scoreYITH WooCommerce Catalog Mode31 scoreQuick Featured Images32 scoreBEAR – Bulk Editor and Products Manager Professional for WooCommerce by Pluginus.Net32 score
Author
Issue
Related
WCBoost – Wishlist97 scoreClassic Editor63 scoreWooCommerce21 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreAkismet Anti-spam: Spam Protection35 scoreAll-in-One WP Migration and Backup34 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreDuplicate Page40 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreWordPress Importer25 scoreYITH WooCommerce Catalog Mode31 scoreQuick Featured Images32 scoreBEAR – Bulk Editor and Products Manager Professional for WooCommerce by Pluginus.Net32 score
Related Plugins
Order Limit For WooCommerce ( Free Version )
800 active installs
100
MATE Recently Viewed Products – Cache Compatible for WooCommerce
600 active installs
99
WCBoost – Wishlist
50k+ active installs
97
Emalls Extraction API – Official
7k+ active installs
97
Syncee Premium Dropshipping & Wholesale
1k+ active installs
97
Search Widget Post Types for Elementor
600 active installs
97