RY Tools for WooCommerce

Accept your WooCommerce store payment with ECPay / NewebPay / SmilePay and shipping with ECPay / NewebPay / SmilePay.

v3.8.4Richer YangUpdated Added 5k+ installs100% rating
46
Score
0
Errors
295
Warnings
+0
Change

Category Scores

Security16
Repo100
Performance100
Maintainability59

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

295 findings

Maintainability

240

11 issue groups

Security

55

5 issue groups

WARNINGMaintainabilityNon-prefixed classClasses declared by a theme/plugin should start with the theme/plugin prefix. Found: "RY_ECPay_Gateway_Atm".96
Category
Maintainability
Occurrences
96
Severity
warning

Sample message

Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "RY_ECPay_Gateway_Atm".

WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$checkout".68
Category
Maintainability
Occurrences
68
Severity
warning

Sample message

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$checkout".

WARNINGMaintainabilityNon-prefixed hook nameHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "'ry_admin_payment_info-' . $order->get_payment_method()".61
Category
Maintainability
Occurrences
61
Severity
warning

Sample message

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "'ry_admin_payment_info-' . $order->get_payment_method()".

WARNINGSecurityMissing nonce verificationProcessing form data without nonce verification.37
Category
Security
Occurrences
37
Severity
warning

Sample message

Processing form data without nonce verification.

WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_GET['_wpnonce']10
Category
Security
Occurrences
10
Severity
warning

Sample message

Detected usage of a non-sanitized input variable: $_GET['_wpnonce']

WARNINGMaintainabilityNon-prefixed constantGlobal constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "RY_WT_PLUGIN_BASENAME".4
Category
Maintainability
Occurrences
4
Severity
warning

Sample message

Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "RY_WT_PLUGIN_BASENAME".

WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.4
Category
Security
Occurrences
4
Severity
warning

Sample message

Processing form data without nonce verification.

WARNINGSecurityRequest data is not unslashed$_GET['_wpnonce'] not unslashed before sanitization. Use wp_unslash() or similar3
Category
Security
Occurrences
3
Severity
warning

Sample message

$_GET['_wpnonce'] not unslashed before sanitization. Use wp_unslash() or similar

WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.2
Category
Maintainability
Occurrences
2
Severity
warning

Sample message

Use of a direct database call is discouraged.

WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().2
Category
Maintainability
Occurrences
2
Severity
warning

Sample message

Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().

Show 6 more
WARNINGMaintainabilityslow db query meta key2
Category
Maintainability
Occurrences
2
Severity
warning

Sample message

Detected usage of meta_key, possible slow query.

WARNINGMaintainabilityNon-prefixed function2
Category
Maintainability
Occurrences
2
Severity
warning

Sample message

Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "RY_WT".

WARNINGMaintainabilityDiscouraged PHP function1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

The use of function set_time_limit() is discouraged

WARNINGMaintainabilityslow db query meta query1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

Detected usage of meta_query, possible slow query.

WARNINGSecuritywp redirect wp redirect1
Category
Security
Occurrences
1
Severity
warning

Sample message

wp_redirect() found. Using wp_safe_redirect(), along with the "allowed_redirect_hosts" filter if needed, can help avoid any chances of malicious redirects within code. It is also important to remember to call exit() after a redirect so that no other unwanted code is executed.

WARNINGMaintainabilitytrademarked term1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

The plugin slug includes a restricted term. Your plugin slug - "ry-woocommerce-tools" - contains the restricted term "woocommerce" which cannot be used within in your plugin slug, unless your plugin slug contains one of the allowed patterns: "for woocommerce", "with woocommerce", "using woocommerce", or "and woocommerce". The term must still not appear anywhere else in your plugin slug.

External Connections

Potential connections found in static code analysis.

16 domains

Outbound calls

67

External assets

2

Incoming endpoints

8

Notable Domains

ssl.smse.com.tw18 · outbound
ry-plugin.com10 · outbound
api.payuni.com.tw8 · outbound

Platform / Reference Domains

gnu.org1 · platform/reference

External Asset Domains

Incoming Endpoints

wp_ajax_nopriv_RY_SmilePay_getcodepublic

wp_ajax

Admin AJAX endpoints7
admin_post_ry-print-ecpay-shippingauthenticated

admin_post

admin_post_ry-print-smilepay-shippingauthenticated

admin_post

wp_ajax_RY_delete_shipping_infoauthenticated

wp_ajax

wp_ajax_RY_ecpay_get_shipping_noteauthenticated

wp_ajax

wp_ajax_RY_smilepay_get_shipping_noauthenticated

wp_ajax

wp_ajax_RY_smilepay_get_shipping_noteauthenticated

wp_ajax

wp_ajax_RY_SmilePay_getcodeauthenticated

wp_ajax

Score History

6 score snapshots

-37
1007550250Jun 21, 2026, 06:40 AM UTC Score 83/100 Plugin v3.6.6 Plugin Check 2.0.0 3 errors, 209 warningsJun 21, 2026, 12:03 PM UTC Score 46/100 Plugin v3.8.0 Plugin Check 2.0.0 0 errors, 298 warningsJun 22, 2026, 08:35 AM UTC Score 46/100 Plugin v3.8.1 Plugin Check 2.0.0 0 errors, 298 warningsJun 22, 2026, 12:33 PM UTC Score 46/100 Plugin v3.8.2 Plugin Check 2.0.0 0 errors, 298 warningsJun 24, 2026, 06:54 AM UTC Score 46/100 Plugin v3.8.3 Plugin Check 2.0.0 0 errors, 298 warningsJun 24, 2026, 02:00 PM UTC Score 46/100 Plugin v3.8.4 Plugin Check 2.0.0 0 errors, 295 warningsJun 21, 2026Jun 24, 2026

v3.8.4

46

Latest

Findings
295
Errors
0
Warnings
295
Check
2.0.0

v3.8.3

46

Score

Findings
298
Errors
0
Warnings
298
Check
2.0.0

Relationship Map

Author, categories, issues, domains, and nearby plugins.

36 nodes

Related Plugins