Add Serviceform pixel to your WordPress site quickly. Optional product data API available.
41
Score
17
Errors
24
Warnings
+0
Change
Category Scores
Security2
Repo97
Performance100
Maintainability79
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Security
20
7 issue groups
Maintainability
20
11 issue groups
Repo Compliance
1
1 issue group
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$checked'.6
- Category
- Security
- Occurrences
- 6
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$checked'.
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$api_key".5
- Category
- Maintainability
- Occurrences
- 5
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$api_key".
WARNINGSecurityInterpolated SQL is not preparedUse placeholders and $wpdb->prepare(); found interpolated variable $exclude_placeholders at \t\t\t\tAND oim.meta_value NOT IN ($exclude_placeholders)\n4
- Category
- Security
- Occurrences
- 4
- Severity
- warning
Sample message
Use placeholders and $wpdb->prepare(); found interpolated variable $exclude_placeholders at \t\t\t\tAND oim.meta_value NOT IN ($exclude_placeholders)\n
ERRORSecuritySetting is missing a sanitization callbackSanitization missing for register_setting().3
- Category
- Security
- Occurrences
- 3
- Severity
- error
Sample message
Sanitization missing for register_setting().
WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
ERRORSecuritySQL query is not preparedUse placeholders and $wpdb->prepare(); found $copurchase_query2
- Category
- Security
- Occurrences
- 2
- Severity
- error
Sample message
Use placeholders and $wpdb->prepare(); found $copurchase_query
WARNINGMaintainabilityNon-prefixed constantGlobal constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "CLI_MODE".2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "CLI_MODE".
WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.2
- Category
- Security
- Occurrences
- 2
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGSecurityRequest data is not unslashed$_COOKIE['sf-pxs'] not unslashed before sanitization. Use wp_unslash() or similar2
- Category
- Security
- Occurrences
- 2
- Severity
- warning
Sample message
$_COOKIE['sf-pxs'] not unslashed before sanitization. Use wp_unslash() or similar
Show 9 moreShow less
ERRORMaintainabilityfile system operations mkdir2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: mkdir().
ERRORMaintainabilityMissing direct file access protection2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
WARNINGMaintainabilityslow db query meta query1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Detected usage of meta_query, possible slow query.
ERRORMaintainabilitydate date1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.
WARNINGMaintainabilityNon-prefixed class1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "WC_Gateway_Serviceform_MobilePay".
WARNINGSecurityInput is not sanitized1
- Category
- Security
- Occurrences
- 1
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_SERVER['HTTP_HOST']
ERRORMaintainabilityfile system operations is writable1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: is_writable().
WARNINGMaintainabilityMissing Version1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Resource version not set in call to wp_enqueue_script(). This means new versions of the script may not always be loaded due to browser caching.
WARNINGRepo Compliancereadme parser warnings too many tags1
- Category
- Repo Compliance
- Occurrences
- 1
- Severity
- warning
Sample message
One or more tags were ignored. Please limit your plugin to 5 tags.
External Connections
Potential connections found in static code analysis.
Outbound calls
10
External assets
0
Incoming endpoints
8
Notable Domains
dash.serviceform.com5 · outbound
yourdomain.com2 · outbound
cdn.serviceform.com1 · outbound
docs.serviceform.com1 · outbound
serviceform.com1 · outbound
External Asset Domains
No external asset domains detected.
Incoming Endpoints
/wp-json/serviceform/v1/cartREST
register_rest_route
/wp-json/serviceform/v1/cart/addREST
register_rest_route
/wp-json/serviceform/v1/mobilepay/REST
register_rest_route
/wp-json/serviceform/v1/ordersREST
register_rest_route
/wp-json/serviceform/v1/product/(?P<id>\d+)REST
register_rest_route
/wp-json/serviceform/v1/productsREST
register_rest_route
Score History
3 score snapshots
v2.5.3
41
Latest
- Findings
- 41
- Errors
- 17
- Warnings
- 24
- Check
- 2.1.0
v2.5.1
41
Score
- Findings
- 41
- Errors
- 17
- Warnings
- 24
- Check
- 2.1.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 41 | 41 | 17 | 24 | v2.5.3 | 2.1.0 |
| 41 | 41 | 17 | 24 | v2.5.1 | 2.1.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Author
Issue
Domain
Related
Site Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce22 scoreAkismet Anti-spam: Spam Protection35 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder38 scoreClassic Editor63 scoreLiteSpeed Cache35 scoreAll-in-One WP Migration and Backup34 scoreMonsterInsights – Google Analytics Dashboard for WordPress (Website Stats Made Easy)25 scoreWP Statistics – Simple, privacy-friendly Google Analytics alternative25 scoreGA Google Analytics – Connect Google Analytics to WordPress42 scoreMeta pixel for WordPress98 scoreExactMetrics – Google Analytics Dashboard for WordPress (Website Stats Plugin)24 score
Author
Issue
Domain
Related
Site Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce22 scoreAkismet Anti-spam: Spam Protection35 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder38 scoreClassic Editor63 scoreLiteSpeed Cache35 scoreAll-in-One WP Migration and Backup34 scoreMonsterInsights – Google Analytics Dashboard for WordPress (Website Stats Made Easy)25 scoreWP Statistics – Simple, privacy-friendly Google Analytics alternative25 scoreGA Google Analytics – Connect Google Analytics to WordPress42 scoreMeta pixel for WordPress98 scoreExactMetrics – Google Analytics Dashboard for WordPress (Website Stats Plugin)24 score
Related Plugins
WP Client Reports
6k+ active installs
100
BD Courier Order Ratio Checker
2k+ active installs
100
VigIA – AI Visibility, Analytics & Control
1k+ active installs
100
Bob Go Smart Shipping for WooCommerce
500 active installs
100
Lightweight Google Analytics
400 active installs
100
PufferSights – AI Crawler Insights
10 active installs
100