Accept Visa, MasterCard, Dankort, MobilePay, American Express, Diners Club and more directly on your store with the Frisbii Pay Gateway.
33
Score
91
Errors
292
Warnings
+0
Change
Category Scores
Security0
Repo86
Performance100
Maintainability48
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Security
193
10 issue groups
Maintainability
186
14 issue groups
I18n
1
1 issue group
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$alert_email".83
- Category
- Maintainability
- Occurrences
- 83
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$alert_email".
ERRORMaintainabilitywp function not compatible with requires wpFunction "determine_locale()" requires WordPress 5.0.0, but your plugin minimum supported version is WordPress 4.0.0.47
- Category
- Maintainability
- Occurrences
- 47
- Severity
- error
Sample message
Function "determine_locale()" requires WordPress 5.0.0, but your plugin minimum supported version is WordPress 4.0.0.
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_COOKIE['billwerk_pll_current_language']45
- Category
- Security
- Occurrences
- 45
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_COOKIE['billwerk_pll_current_language']
WARNINGSecurityRequest data is not unslashed$_COOKIE['billwerk_pll_current_language'] not unslashed before sanitization. Use wp_unslash() or similar41
- Category
- Security
- Occurrences
- 41
- Severity
- warning
Sample message
$_COOKIE['billwerk_pll_current_language'] not unslashed before sanitization. Use wp_unslash() or similar
WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.38
- Category
- Security
- Occurrences
- 38
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGMaintainabilityNon-prefixed functionFunctions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "order_contains_subscription".25
- Category
- Maintainability
- Occurrences
- 25
- Severity
- warning
Sample message
Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "order_contains_subscription".
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$rows'.21
- Category
- Security
- Occurrences
- 21
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$rows'.
WARNINGSecurityMissing nonce verificationProcessing form data without nonce verification.20
- Category
- Security
- Occurrences
- 20
- Severity
- warning
Sample message
Processing form data without nonce verification.
ERRORSecurityUnsafe printing functionAll output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.16
- Category
- Security
- Occurrences
- 16
- Severity
- error
Sample message
All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.
WARNINGMaintainabilityNon-prefixed hook nameHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "active_plugins".10
- Category
- Maintainability
- Occurrences
- 10
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "active_plugins".
Show 15 moreShow less
WARNINGMaintainabilityDiscouraged PHP function9
- Category
- Maintainability
- Occurrences
- 9
- Severity
- warning
Sample message
The use of function ini_set() is discouraged
WARNINGSecuritywp redirect wp redirect8
- Category
- Security
- Occurrences
- 8
- Severity
- warning
Sample message
wp_redirect() found. Using wp_safe_redirect(), along with the "allowed_redirect_hosts" filter if needed, can help avoid any chances of malicious redirects within code. It is also important to remember to call exit() after a redirect so that no other unwanted code is executed.
ERRORMaintainabilityNot Allowed2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
Use of heredoc syntax (<<<) is not allowed; use standard strings or inline HTML instead
WARNINGSecurityInterpolated SQL is not prepared2
- Category
- Security
- Occurrences
- 2
- Severity
- warning
Sample message
Use placeholders and $wpdb->prepare(); found interpolated variable $order_id at WHERE `comment_post_ID` = $order_id\r\n
WARNINGMaintainabilityDynamic hook name2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "$base_hook_name".
WARNINGMaintainabilityerror log var export2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
var_export() found. Debug code should not normally be used in production.
WARNINGSecurityDatabase parameter is not escaped1
- Category
- Security
- Occurrences
- 1
- Severity
- warning
Sample message
Unescaped parameter $table used in $wpdb->get_results()\n$table assigned unsafely at line 126.
WARNINGMaintainabilityDirect Query1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGMaintainabilityNo Caching1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
WARNINGMaintainabilityNon-prefixed class1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "WC_ReepayCheckout".
WARNINGMaintainabilityerror log error log1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
error_log() found. Debug code should not normally be used in production.
ERRORSecurityException output is not escaped1
- Category
- Security
- Occurrences
- 1
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found 'strlen'.
ERRORI18nMissing Arg Domain1
- Category
- I18n
- Occurrences
- 1
- Severity
- error
Sample message
Missing $domain parameter in function call to _e().
WARNINGMaintainabilitymissing composer json file1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
The "/vendor" directory using composer exists, but "composer.json" file is missing.
ERRORMaintainabilityMissing direct file access protection1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
External Connections
Potential connections found in static code analysis.
Outbound calls
64
External assets
0
Incoming endpoints
27
Notable Domains
api.reepay.com24 · outbound
checkout-api.reepay.com6 · outbound
docs.frisbii.com3 · outbound
admin.billwerk.plus2 · outbound
checkout.reepay.com2 · outbound
dev-checkout.reepay.com2 · outbound
Platform / Reference Domains
github.com5 · platform/reference
wordpress.org3 · platform/reference
External Asset Domains
No external asset domains detected.
Incoming Endpoints
wp_ajax_nopriv_reepay_card_store_public
wp_ajax
wp_ajax_nopriv_reepay_check_paymentpublic
wp_ajax
wp_ajax_nopriv_reepay_finalizepublic
wp_ajax
wp_ajax_nopriv_reepay_order_descriptionspublic
wp_ajax
Admin AJAX endpoints7
wp_ajax_reepay_card_store_authenticated
wp_ajax
wp_ajax_reepay_check_paymentauthenticated
wp_ajax
wp_ajax_reepay_dismiss_hpos_noticeauthenticated
wp_ajax
wp_ajax_reepay_finalizeauthenticated
wp_ajax
wp_ajax_reepay_migration_process_batchauthenticated
wp_ajax
wp_ajax_reepay_migration_upload_csvauthenticated
wp_ajax
wp_ajax_reepay_order_descriptionsauthenticated
wp_ajax
Score History
2 score snapshots
v1.8.14
33
Latest
- Findings
- 383
- Errors
- 91
- Warnings
- 292
- Check
- 2.0.0
v1.8.13.2
33
Score
- Findings
- 383
- Errors
- 91
- Warnings
- 292
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 33 | 383 | 91 | 292 | v1.8.14 | 2.0.0 |
| 33 | 383 | 91 | 292 | v1.8.13.2 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Plugin
Author
Issue
Non-prefixed global variable83 findingswp function not compatible with requires wp47 findingsInput is not sanitized45 findingsRequest data is not unslashed41 findingsNonce verification recommended38 findingsNon-prefixed function25 findingsOutput is not escaped21 findingsMissing nonce verification20 findings
Domain
Related
Paystack WooCommerce Payment Gateway100 scoreMastercard Merchant Cloud100 scoreElementor Website Builder – more than just a page builder39 scoreLiteSpeed Cache35 scoreAkismet Anti-spam: Spam Protection35 scoreContact Form 769 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreClassic Editor63 scoreWooCommerce21 scoreAll-in-One WP Migration and Backup34 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 score
Plugin
Author
Issue
Non-prefixed global variable83 findingswp function not compatible with requires wp47 findingsInput is not sanitized45 findingsRequest data is not unslashed41 findingsNonce verification recommended38 findingsNon-prefixed function25 findingsOutput is not escaped21 findingsMissing nonce verification20 findings
Domain
Related
Paystack WooCommerce Payment Gateway100 scoreMastercard Merchant Cloud100 scoreElementor Website Builder – more than just a page builder39 scoreLiteSpeed Cache35 scoreAkismet Anti-spam: Spam Protection35 scoreContact Form 769 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreClassic Editor63 scoreWooCommerce21 scoreAll-in-One WP Migration and Backup34 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 score
Related Plugins
Paystack WooCommerce Payment Gateway
30k+ active installs
100
Mastercard Merchant Cloud
400 active installs
100