A simple, powerful WooCommerce wishlist plugin – help customers save favorites, buy later, or share gift ideas.
77
Score
12
Errors
40
Warnings
-6
Change
Category Scores
Security70
Repo94
Performance100
Maintainability73
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Maintainability
40
12 issue groups
Security
11
3 issue groups
Repo Compliance
1
1 issue group
WARNINGSecurityDatabase parameter is not escapedUnescaped parameter $collections used in $wpdb->get_var()\n$collections assigned unsafely at line 551.9
- Category
- Security
- Occurrences
- 9
- Severity
- warning
Sample message
Unescaped parameter $collections used in $wpdb->get_var()\n$collections assigned unsafely at line 551.
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$product".9
- Category
- Maintainability
- Occurrences
- 9
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$product".
ERRORMaintainabilitywp function not compatible with requires wpFunction "str_contains()" requires WordPress 5.9.0, but your plugin minimum supported version is WordPress 5.8.0.9
- Category
- Maintainability
- Occurrences
- 9
- Severity
- error
Sample message
Function "str_contains()" requires WordPress 5.9.0, but your plugin minimum supported version is WordPress 5.8.0.
WARNINGMaintainabilityNon-prefixed hook nameHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "ig_es_contact_subscribed".8
- Category
- Maintainability
- Occurrences
- 8
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "ig_es_contact_subscribed".
WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
WARNINGMaintainabilityDynamic hook nameHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "$after_hook".2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "$after_hook".
ERRORMaintainabilityOffloaded ContentOffloading images, js, css, and other scripts to your servers or any remote service is disallowed.1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
Offloading images, js, css, and other scripts to your servers or any remote service is disallowed.
WARNINGMaintainabilityDiscouraged PHP functionThe use of function set_time_limit() is discouraged1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
The use of function set_time_limit() is discouraged
WARNINGSecurityReplacements Wrong NumberIncorrect number of replacements passed to $wpdb->prepare(). Found 1 replacement parameters, expected 2.1
- Category
- Security
- Occurrences
- 1
- Severity
- warning
Sample message
Incorrect number of replacements passed to $wpdb->prepare(). Found 1 replacement parameters, expected 2.
Show 6 moreShow less
WARNINGSecurityUnfinished Prepare1
- Category
- Security
- Occurrences
- 1
- Severity
- warning
Sample message
Replacement variables found, but no valid placeholders found in the query.
WARNINGMaintainabilityNon-prefixed global variable1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "$name".
WARNINGMaintainabilitymismatched plugin name1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Plugin name "SaveTo Wishlist Lite – WooCommerce Wishlist" is different from the name declared in plugin header "SaveTo Wishlist Lite for WooCommerce".
ERRORMaintainabilityMissing direct file access protection1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
ERRORRepo Complianceoutdated tested upto header1
- Category
- Repo Compliance
- Occurrences
- 1
- Severity
- error
Sample message
Tested up to: 7.0 < 7.1. The "Tested up to" value in your plugin is not set to the current version of WordPress. This means your plugin will not show up in searches, as we require plugins to be compatible and documented as tested up to the most recent version of WordPress.
WARNINGMaintainabilitytrademarked term1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
The plugin name includes a restricted term. Your chosen plugin name - "SaveTo Wishlist Lite – WooCommerce Wishlist" - contains the restricted term "woocommerce" which cannot be used within in your plugin name, unless your plugin name contains one of the allowed patterns: "for woocommerce", "with woocommerce", "using woocommerce", or "and woocommerce". The term must still not appear anywhere else in your name.
External Connections
Potential connections found in static code analysis.
Outbound calls
96
External assets
0
Incoming endpoints
14
Notable Domains
savetowishlist.com9 · outbound
vuejs.org4 · outbound
facebook.com3 · outbound
pinterest.com3 · outbound
twitter.com3 · outbound
wa.me3 · outbound
Platform / Reference Domains
w3.org57 · platform/reference
wordpress.org5 · platform/reference
github.com4 · platform/reference
gnu.org1 · platform/reference
ps.w.org1 · platform/reference
External Asset Domains
No external asset domains detected.
Incoming Endpoints
wp_ajax_nopriv_stwlite_add_product_cart_to_wishlistpublic
wp_ajax
wp_ajax_nopriv_stwlite_add_to_cartpublic
wp_ajax
wp_ajax_nopriv_stwlite_add_to_wishlistpublic
wp_ajax
wp_ajax_nopriv_stwlite_check_product_in_wishlistpublic
wp_ajax
wp_ajax_nopriv_stwlite_remove_product_from_wishlistpublic
wp_ajax
wp_ajax_nopriv_stwlite_store_wishlist_from_local_storagepublic
wp_ajax
Admin AJAX endpoints8
wp_ajax_stwlite_add_product_cart_to_wishlistauthenticated
wp_ajax
wp_ajax_stwlite_add_to_cartauthenticated
wp_ajax
wp_ajax_stwlite_add_to_wishlistauthenticated
wp_ajax
wp_ajax_stwlite_check_product_in_wishlistauthenticated
wp_ajax
wp_ajax_stwlite_dismiss_importer_noticeauthenticated
wp_ajax
wp_ajax_stwlite_dismiss_review_requestauthenticated
wp_ajax
wp_ajax_stwlite_remove_product_from_wishlistauthenticated
wp_ajax
wp_ajax_stwlite_store_wishlist_from_local_storageauthenticated
wp_ajax
Score History
7 score snapshots
v1.1.4
77
Latest
- Findings
- 52
- Errors
- 12
- Warnings
- 40
- Check
- 2.1.0
v1.1.3
83
Score
- Findings
- 41
- Errors
- 8
- Warnings
- 33
- Check
- 2.1.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 77 | 52 | 12 | 40 | v1.1.4 | 2.1.0 |
| 83 | 41 | 8 | 33 | v1.1.3 | 2.1.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Author
Category
Issue
Domain
Related
WCBoost – Wishlist97 scoreQODE Wishlist for WooCommerce89 scoreElementor Website Builder – more than just a page builder39 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreLiteSpeed Cache35 scoreWooCommerce22 scoreAkismet Anti-spam: Spam Protection35 scoreContact Form 769 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreTI WooCommerce Wishlist24 scoreWPC Smart Wishlist for WooCommerce41 scoreProduct Feed PRO for WooCommerce by AdTribes – Product Feeds for WooCommerce79 scoreAdvanced Coupons for WooCommerce – BOGO Coupons, Store Credit & WooCommerce Coupon Plugin32 scoreWholesale Suite – B2B, Dynamic Pricing & WooCommerce Wholesale Prices35 score
Author
Category
Issue
Domain
Related
WCBoost – Wishlist97 scoreQODE Wishlist for WooCommerce89 scoreElementor Website Builder – more than just a page builder39 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreLiteSpeed Cache35 scoreWooCommerce22 scoreAkismet Anti-spam: Spam Protection35 scoreContact Form 769 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreTI WooCommerce Wishlist24 scoreWPC Smart Wishlist for WooCommerce41 scoreProduct Feed PRO for WooCommerce by AdTribes – Product Feeds for WooCommerce79 scoreAdvanced Coupons for WooCommerce – BOGO Coupons, Store Credit & WooCommerce Coupon Plugin32 scoreWholesale Suite – B2B, Dynamic Pricing & WooCommerce Wholesale Prices35 score
Related Plugins
100
Wishlist for WooCommerce
900 active installs
98
WCBoost – Wishlist
40k+ active installs
97
QODE Wishlist for WooCommerce
10k+ active installs
89
Wishlist for WooCommerce
900 active installs
83
Flexible Wishlist for WooCommerce – Ecommerce Wishlist & Save for later
800 active installs
80