One-Click Shipping Protection
34
Score
63
Errors
164
Warnings
+0
Change
Category Scores
Security0
Repo94
Performance100
Maintainability48
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Security
153
12 issue groups
Maintainability
63
12 issue groups
I18n
3
1 issue group
WARNINGSecurityMissing nonce verificationProcessing form data without nonce verification.35
- Category
- Security
- Occurrences
- 35
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_GET['filter_shop_order_route_protection']32
- Category
- Security
- Occurrences
- 32
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_GET['filter_shop_order_route_protection']
WARNINGSecurityRequest data is not unslashed$_GET['filter_shop_order_route_protection'] not unslashed before sanitization. Use wp_unslash() or similar32
- Category
- Security
- Occurrences
- 32
- Severity
- warning
Sample message
$_GET['filter_shop_order_route_protection'] not unslashed before sanitization. Use wp_unslash() or similar
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$class'.16
- Category
- Security
- Occurrences
- 16
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$class'.
ERRORMaintainabilitywp function not compatible with requires wpFunction "get_rest_url()" requires WordPress 4.4.0, but your plugin minimum supported version is WordPress 4.0.0.16
- Category
- Maintainability
- Occurrences
- 16
- Severity
- error
Sample message
Function "get_rest_url()" requires WordPress 4.4.0, but your plugin minimum supported version is WordPress 4.0.0.
WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.15
- Category
- Security
- Occurrences
- 15
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGSecurityInput is not validatedDetected usage of a possibly undefined superglobal array index: $_GET['post_type']. Check that the array index exists before using it.14
- Category
- Security
- Occurrences
- 14
- Severity
- warning
Sample message
Detected usage of a possibly undefined superglobal array index: $_GET['post_type']. Check that the array index exists before using it.
ERRORMaintainabilitydate datedate() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.9
- Category
- Maintainability
- Occurrences
- 9
- Severity
- error
Sample message
date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.
WARNINGMaintainabilityerror log error logerror_log() found. Debug code should not normally be used in production.7
- Category
- Maintainability
- Occurrences
- 7
- Severity
- warning
Sample message
error_log() found. Debug code should not normally be used in production.
WARNINGMaintainabilityNon-prefixed functionFunctions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "activate_routeapp".5
- Category
- Maintainability
- Occurrences
- 5
- Severity
- warning
Sample message
Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "activate_routeapp".
Show 15 moreShow less
ERRORMaintainabilitystrip tags strip tags5
- Category
- Maintainability
- Occurrences
- 5
- Severity
- error
Sample message
strip_tags() is discouraged. Use the more comprehensive wp_strip_all_tags() instead.
WARNINGMaintainabilityNon-prefixed class4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- warning
Sample message
Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "Route_Setup".
WARNINGMaintainabilityNon-prefixed hook name4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "'woocommerce_get_settings_' . $this->id".
WARNINGMaintainabilityDirect Query3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGMaintainabilityNo Caching3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
WARNINGSecuritywp redirect wp redirect3
- Category
- Security
- Occurrences
- 3
- Severity
- warning
Sample message
wp_redirect() found. Using wp_safe_redirect(), along with the "allowed_redirect_hosts" filter if needed, can help avoid any chances of malicious redirects within code. It is also important to remember to call exit() after a redirect so that no other unwanted code is executed.
ERRORI18nNon Singular String Literal Text3
- Category
- I18n
- Occurrences
- 3
- Severity
- error
Sample message
The $text parameter must be a single text string literal. Found: self::ROUTE_LABEL
ERRORMaintainabilityMissing direct file access protection3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
WARNINGMaintainabilityslow db query meta query2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
Detected usage of meta_query, possible slow query.
ERRORSecurityException output is not escaped2
- Category
- Security
- Occurrences
- 2
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$code'.
ERRORMaintainabilityNon Enqueued Stylesheet2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
Stylesheets must be registered/enqueued via wp_enqueue_style()
ERRORSecurityDatabase parameter is not escaped1
- Category
- Security
- Occurrences
- 1
- Severity
- error
Sample message
Unescaped parameter $query used in $wpdb->get_var()\n$query assigned unsafely at line 280.
WARNINGSecurityInterpolated SQL is not prepared1
- Category
- Security
- Occurrences
- 1
- Severity
- warning
Sample message
Use placeholders and $wpdb->prepare(); found interpolated variable {$orders_table} at FROM {$orders_table} AS orders\n
ERRORSecuritySQL query is not prepared1
- Category
- Security
- Occurrences
- 1
- Severity
- error
Sample message
Use placeholders and $wpdb->prepare(); found $query
ERRORSecurityLike Wildcards In Query1
- Category
- Security
- Occurrences
- 1
- Severity
- error
Sample message
SQL wildcards for a LIKE query should be passed in through a replacement parameter. Found: LIKE '%ShippingEasy%'.
External Connections
Potential connections found in static code analysis.
Outbound calls
41
External assets
4
Incoming endpoints
17
Notable Domains
route.com18 · outbound
dashboard.route.com4 · outbound
api-stage.route.com2 · outbound
api.route.com2 · outbound
dashboard-stage.route.com2 · outbound
routeapp.io2 · outbound
Platform / Reference Domains
developer.wordpress.org1 · platform/reference
github.com1 · platform/reference
gnu.org1 · platform/reference
w3.org1 · platform/reference
External Asset Domains
protection-widget.route.com2 · asset + outbound
cdn.amplitude.com1 · asset
cdn.routeapp.io1 · asset
fonts.googleapis.com1 · asset
Incoming Endpoints
/wp-json/route/recreate_merchantREST
register_rest_route
/wp-json/route/recreate_userREST
register_rest_route
/wp-json/route/statusREST
register_rest_route
/wp-json/route/user_loginREST
register_rest_route
wp_ajax_nopriv_get_route_checkoutpublic
wp_ajax
wp_ajax_nopriv_routeapp_add_admin_feepublic
wp_ajax
Admin AJAX endpoints8
wp_ajax_get_route_checkoutauthenticated
wp_ajax
wp_ajax_routeapp_add_admin_feeauthenticated
wp_ajax
wp_ajax_routeapp_process_orders_batchauthenticated
wp_ajax
wp_ajax_routeapp_refresh_admin_fee_buttonauthenticated
wp_ajax
wp_ajax_routeapp_remove_admin_feeauthenticated
wp_ajax
wp_ajax_routeapp_save_ordersauthenticated
wp_ajax
wp_ajax_woo_check_widgetauthenticated
wp_ajax
wp_ajax_woo_get_ajax_dataauthenticated
wp_ajax
Score History
10 score snapshots
v2.4.17
34
Latest
- Findings
- 227
- Errors
- 63
- Warnings
- 164
- Check
- 2.1.0
v2.4.16
34
Score
- Findings
- 225
- Errors
- 61
- Warnings
- 164
- Check
- 2.1.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 34 | 227 | 63 | 164 | v2.4.17 | 2.1.0 |
| 34 | 225 | 61 | 164 | v2.4.16 | 2.1.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Author
Issue
Domain
Related
Contact Form 769 scoreWooCommerce22 scoreAll-in-One WP Migration and Backup34 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreAkismet Anti-spam: Spam Protection35 scoreGA Google Analytics – Connect Google Analytics to WordPress42 scoreEmail Address Encoder41 scoreNinjaFirewall (WP Edition) – Advanced Security Plugin and Firewall22 scoreSlimStat Analytics25 scoreConnect Matomo – Analytics Dashboard for WordPress27 scoreImage Watermark41 scoreProtect Uploads99 score
Author
Issue
Domain
Related
Contact Form 769 scoreWooCommerce22 scoreAll-in-One WP Migration and Backup34 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreAkismet Anti-spam: Spam Protection35 scoreGA Google Analytics – Connect Google Analytics to WordPress42 scoreEmail Address Encoder41 scoreNinjaFirewall (WP Edition) – Advanced Security Plugin and Firewall22 scoreSlimStat Analytics25 scoreConnect Matomo – Analytics Dashboard for WordPress27 scoreImage Watermark41 scoreProtect Uploads99 score
Related Plugins
BD Courier Order Ratio Checker
2k+ active installs
100
NETSENSAI Shield
1k+ active installs
100
Bob Go Smart Shipping for WooCommerce
500 active installs
100
Protect Uploads
30k+ active installs
99
Order Tracker for WooCommerce – let customers check orders themselves
900 active installs
99
Prevent Direct Access – Protect WordPress Files
10k+ active installs
98