Add awb# to orders, create tracking page, send tracking info via sms & email. Works best with Shiprocket, Shipmozo, Delhivery & Nimbuspost.
23
Score
477
Errors
576
Warnings
+0
Change
Category Scores
Security0
Repo88
Performance98
Maintainability0
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Security
606
7 issue groups
I18n
269
4 issue groups
Maintainability
156
14 issue groups
ERRORI18nMissing Arg DomainMissing $domain parameter in function call to __().230
- Category
- I18n
- Occurrences
- 230
- Severity
- error
Sample message
Missing $domain parameter in function call to __().
WARNINGSecurityRequest data is not unslashed$_GET[$filter_id] not unslashed before sanitization. Use wp_unslash() or similar160
- Category
- Security
- Occurrences
- 160
- Severity
- warning
Sample message
$_GET[$filter_id] not unslashed before sanitization. Use wp_unslash() or similar
WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.132
- Category
- Security
- Occurrences
- 132
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGSecurityMissing nonce verificationProcessing form data without nonce verification.96
- Category
- Security
- Occurrences
- 96
- Severity
- warning
Sample message
Processing form data without nonce verification.
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$awb_n'.81
- Category
- Security
- Occurrences
- 81
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$awb_n'.
WARNINGSecurityInput is not validatedDetected usage of a possibly undefined superglobal array index: $_GET['id']. Check that the array index exists before using it.78
- Category
- Security
- Occurrences
- 78
- Severity
- warning
Sample message
Detected usage of a possibly undefined superglobal array index: $_GET['id']. Check that the array index exists before using it.
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_GET['action']56
- Category
- Security
- Occurrences
- 56
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_GET['action']
ERRORMaintainabilitydate datedate() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.42
- Category
- Maintainability
- Occurrences
- 42
- Severity
- error
Sample message
date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.
ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;38
- Category
- Maintainability
- Occurrences
- 38
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
ERRORI18nText Domain MismatchMismatched text domain. Expected 'shipment-tracker-for-woocommerce' but got 'bt-sync-order'.30
- Category
- I18n
- Occurrences
- 30
- Severity
- error
Sample message
Mismatched text domain. Expected 'shipment-tracker-for-woocommerce' but got 'bt-sync-order'.
Show 15 moreShow less
WARNINGMaintainabilityerror log error log23
- Category
- Maintainability
- Occurrences
- 23
- Severity
- warning
Sample message
error_log() found. Debug code should not normally be used in production.
ERRORMaintainabilityShort PHP open tag found20
- Category
- Maintainability
- Occurrences
- 20
- Severity
- error
Sample message
Short PHP opening tag used with echo; expected "<?php echo $order_number ..." but found "<?= $order_number ..."
WARNINGMaintainabilityNo PHP code found5
- Category
- Maintainability
- Occurrences
- 5
- Severity
- warning
Sample message
No PHP code was found in this file and short open tags are not allowed by this install of PHP. This file may be using short open tags but PHP does not allow them.
WARNINGMaintainabilityslow db query meta key5
- Category
- Maintainability
- Occurrences
- 5
- Severity
- warning
Sample message
Detected usage of meta_key, possible slow query.
ERRORI18nNon Singular String Literal Domain5
- Category
- I18n
- Occurrences
- 5
- Severity
- error
Sample message
The $domain parameter must be a single text string literal. Found: $plugin_info['Name']
ERRORI18nNon Singular String Literal Text4
- Category
- I18n
- Occurrences
- 4
- Severity
- error
Sample message
The $text parameter must be a single text string literal. Found: $title
WARNINGMaintainabilityunexpected markdown file4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- warning
Sample message
Unexpected markdown file "hooks-admin.md" detected in plugin root. Only specific markdown files are expected in production plugins.
ERRORSecurityUnsafe printing function3
- Category
- Security
- Occurrences
- 3
- Severity
- error
Sample message
All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.
WARNINGMaintainabilityMissing Version3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
Resource version not set in call to wp_register_style(). This means new versions of the style may not always be loaded due to browser caching.
ERRORMaintainabilityNo Explicit Version3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- error
Sample message
Version parameter is not explicitly set or has been set to an equivalent of "false" for wp_register_script; This means that the WordPress core version will be used which is not recommended for plugin or theme development.
WARNINGMaintainabilityNot In Footer3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
In footer ($in_footer) is not set explicitly wp_register_script; It is recommended to load scripts in the footer. Please set this value to `true` to load it in the footer, or explicitly `false` if it should be loaded in the header.
ERRORMaintainabilityNon Enqueued Stylesheet3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- error
Sample message
Stylesheets must be registered/enqueued via wp_enqueue_style()
ERRORMaintainabilitybadly named files3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- error
Sample message
File and folder names must not contain spaces or special characters.
ERRORMaintainabilityOffloaded Content2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
Offloading images, js, css, and other scripts to your servers or any remote service is disallowed.
WARNINGMaintainabilityslow db query meta query2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
Detected usage of meta_query, possible slow query.
External Connections
Potential connections found in static code analysis.
Outbound calls
246
External assets
0
Incoming endpoints
54
Notable Domains
shipment-tracker-for-woocommerce.bitss.tech78 · outbound
amitmittal.tech8 · outbound
quickengage.bitss.in8 · outbound
app.shiprocket.in6 · outbound
youtu.be6 · outbound
ship.nimbuspost.com5 · outbound
Platform / Reference Domains
External Asset Domains
No external asset domains detected.
Incoming Endpoints
/wp-json/apex/v1/create-orderREST
register_rest_route
wp_ajax_nopriv_bt_get_tracking_datapublic
wp_ajax
wp_ajax_nopriv_get_coriers_name_for_ship24public
wp_ajax
wp_ajax_nopriv_get_pincode_data_checkout_pagepublic
wp_ajax
wp_ajax_nopriv_get_pincode_data_product_pagepublic
wp_ajax
Admin AJAX endpoints49
wp_ajax_api_call_for_delhivery_test_connectionauthenticated
wp_ajax
wp_ajax_api_call_for_ekart_test_connectionauthenticated
wp_ajax
wp_ajax_api_call_for_fship_test_connectionauthenticated
wp_ajax
wp_ajax_api_call_for_ithink_test_connectionauthenticated
wp_ajax
wp_ajax_api_call_for_proship_test_connectionauthenticated
wp_ajax
wp_ajax_api_call_for_ship24_test_connectionauthenticated
wp_ajax
wp_ajax_api_call_for_shipmozo_test_connectionauthenticated
wp_ajax
wp_ajax_api_call_for_shipway_test_connectionauthenticated
wp_ajax
wp_ajax_api_call_for_sync_order_by_order_idauthenticated
wp_ajax
wp_ajax_api_call_for_test_connectionauthenticated
wp_ajax
wp_ajax_api_call_hide_bt_sst_premium_noticeauthenticated
wp_ajax
wp_ajax_api_check_for_nimbuspost_test_connectionauthenticated
wp_ajax
37 more hidden
Score History
2 score snapshots
v1.5.6
23
Latest
- Findings
- 1,053
- Errors
- 477
- Warnings
- 576
- Check
- 2.0.0
v1.5.5.1
23
Score
- Findings
- 1,021
- Errors
- 462
- Warnings
- 559
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 23 | 1,053 | 477 | 576 | v1.5.6 | 2.0.0 |
| 23 | 1,021 | 462 | 559 | v1.5.5.1 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Author
Issue
Domain
Related
Wordfence Security – Firewall, Malware Scan, and Login Security21 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreClassic Editor63 scoreLiteSpeed Cache35 scoreWooCommerce21 scoreAll-in-One WP Migration and Backup34 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWP Mail SMTP by WPForms – The Most Popular SMTP and Email Log Plugin30 scoreHostinger Tools82 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreAdvanced Custom Fields (ACF®)23 score
Author
Issue
Domain
Related
Wordfence Security – Firewall, Malware Scan, and Login Security21 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreClassic Editor63 scoreLiteSpeed Cache35 scoreWooCommerce21 scoreAll-in-One WP Migration and Backup34 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWP Mail SMTP by WPForms – The Most Popular SMTP and Email Log Plugin30 scoreHostinger Tools82 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreAdvanced Custom Fields (ACF®)23 score