Shiptastic for WooCommerce is your all-in-one shipping and fulfillment solution for WooCommerce.
Prioritized issue groups from the latest Plugin Check scan
Maintainability
533
13 issue groups
Security
147
3 issue groups
I18n
135
1 issue group
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$$image_stream".
Sample message
A function call to _nx() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.
Sample message
Detected usage of a non-sanitized input variable: $_GET['_wpnonce']
Sample message
Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "_wc_shiptastic_keep_force_filename".
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "$this->get_hook_prefix() . 'is_shipped'".
Sample message
Use of a direct database call is discouraged.
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "admin_enqueue_scripts".
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found 'wc_help_tip'.
Sample message
Unescaped parameter $extra_checks used in $wpdb->get_results()\n$extra_checks assigned unsafely at line 513.
Sample message
Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "WC_STC_Email_Customer_Guest_Return_Shipment_Request".
Sample message
Function "get_metadata_raw()" requires WordPress 5.5.0, but your plugin minimum supported version is WordPress 5.4.0.
Sample message
The use of function ini_set() is discouraged
Sample message
Attempting a database schema change is discouraged.
Sample message
Writing files using ABSPATH may be problematic. Consider using wp_upload_dir() instead if storing user data or generated files.
Sample message
Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "WC_STC_IS_STANDALONE_PLUGIN".
Sample message
The "/vendor" directory using composer exists, but "composer.json" file is missing.
Potential connections found in static code analysis.
Outbound calls
162
External assets
0
Incoming endpoints
14
No external asset domains detected.
register_rest_route
wp_ajax
wp_ajax
wp_ajax
wp_ajax
admin_post
admin_post
admin_post
admin_post
admin_post
admin_post
wp_ajax
3 score snapshots
v5.1.1
29
Latest
v5.1.0
29
Score
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 29 | 815 | 154 | 661 | v5.1.1 | 2.0.0 |
| 29 | 816 | 154 | 662 | v5.1.0 | 2.0.0 |
Author, categories, issues, domains, and nearby plugins.