Send WooCommerce SMS notifications, COD OTP verification, Login with OTP, abandoned cart recovery, order updates to customers & admins.
24
Score
831
Errors
1,903
Warnings
+0
Change
Category Scores
Security0
Repo100
Performance94
Maintainability0
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Security
1,189
10 issue groups
Maintainability
1,162
12 issue groups
I18n
305
3 issue groups
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$Jet_forms".302
- Category
- Maintainability
- Occurrences
- 302
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$Jet_forms".
WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.293
- Category
- Security
- Occurrences
- 293
- Severity
- warning
Sample message
Processing form data without nonce verification.
ERRORI18nMissing Translators CommentA function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.238
- Category
- I18n
- Occurrences
- 238
- Severity
- error
Sample message
A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.
WARNINGMaintainabilityNon-prefixed hook nameHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "ab_cart_exit_intent_button_html".220
- Category
- Maintainability
- Occurrences
- 220
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "ab_cart_exit_intent_button_html".
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$_SERVER['HTTP_REFERER']'.201
- Category
- Security
- Occurrences
- 201
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$_SERVER['HTTP_REFERER']'.
WARNINGSecurityMissing nonce verificationProcessing form data without nonce verification.168
- Category
- Security
- Occurrences
- 168
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.152
- Category
- Maintainability
- Occurrences
- 152
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().137
- Category
- Maintainability
- Occurrences
- 137
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
WARNINGMaintainabilityNon-prefixed classClasses declared by a theme/plugin should start with the theme/plugin prefix. Found: "AffiliateManager".114
- Category
- Maintainability
- Occurrences
- 114
- Severity
- warning
Sample message
Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "AffiliateManager".
WARNINGSecurityInterpolated SQL is not preparedUse placeholders and $wpdb->prepare(); found interpolated variable $bookingId at "SELECT * FROM $tableName WHERE booking_id = $bookingId and source = '$source'"111
- Category
- Security
- Occurrences
- 111
- Severity
- warning
Sample message
Use placeholders and $wpdb->prepare(); found interpolated variable $bookingId at "SELECT * FROM $tableName WHERE booking_id = $bookingId and source = '$source'"
Show 15 moreShow less
WARNINGSecurityRequest data is not unslashed111
- Category
- Security
- Occurrences
- 111
- Severity
- warning
Sample message
$_GET['cart'] not unslashed before sanitization. Use wp_unslash() or similar
WARNINGSecurityInput is not sanitized86
- Category
- Security
- Occurrences
- 86
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_GET['nonce']
ERRORSecuritySQL query is not prepared83
- Category
- Security
- Occurrences
- 83
- Severity
- error
Sample message
Use placeholders and $wpdb->prepare(); found $appointment_id
WARNINGSecurityInput is not validated76
- Category
- Security
- Occurrences
- 76
- Severity
- warning
Sample message
Detected usage of a possibly undefined superglobal array index: $_GET['page']. Check that the array index exists before using it.
ERRORMaintainabilityMissing direct file access protection69
- Category
- Maintainability
- Occurrences
- 69
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
ERRORMaintainabilitydate date67
- Category
- Maintainability
- Occurrences
- 67
- Severity
- error
Sample message
date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.
ERRORI18nText Domain Mismatch54
- Category
- I18n
- Occurrences
- 54
- Severity
- error
Sample message
Mismatched text domain. Expected 'sms-alert' but got 'affiliates-manager'.
WARNINGSecurityDatabase parameter is not escaped46
- Category
- Security
- Occurrences
- 46
- Severity
- warning
Sample message
Unescaped parameter $field_table_name used in $wpdb->get_results()\n$field_table_name assigned unsafely at line 178.
WARNINGMaintainabilityMixed line endings23
- Category
- Maintainability
- Occurrences
- 23
- Severity
- warning
Sample message
File has mixed line endings; this may cause incorrect results
WARNINGMaintainabilityNon-prefixed function23
- Category
- Maintainability
- Occurrences
- 23
- Severity
- warning
Sample message
Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "SAintegrationLoadFiles".
ERRORMaintainabilityNo Explicit Version21
- Category
- Maintainability
- Occurrences
- 21
- Severity
- error
Sample message
Version parameter is not explicitly set or has been set to an equivalent of "false" for wp_register_script; This means that the WordPress core version will be used which is not recommended for plugin or theme development.
ERRORMaintainabilityrand rand19
- Category
- Maintainability
- Occurrences
- 19
- Severity
- error
Sample message
rand() is discouraged. Use the far less predictable wp_rand() instead.
ERRORMaintainabilitywp function not compatible with requires wp15
- Category
- Maintainability
- Occurrences
- 15
- Severity
- error
Sample message
Function "apply_shortcodes()" requires WordPress 5.4.0, but your plugin minimum supported version is WordPress 4.6.0.
ERRORSecurityDatabase parameter is not escaped14
- Category
- Security
- Occurrences
- 14
- Severity
- error
Sample message
Unescaped parameter $cart_session_id used in $wpdb->get_var()\n$cart_session_id assigned unsafely at line 2365.
ERRORI18nNon Singular String Literal Text13
- Category
- I18n
- Occurrences
- 13
- Severity
- error
Sample message
The $text parameter must be a single text string literal. Found: $btn_text
External Connections
Potential connections found in static code analysis.
Outbound calls
298
External assets
0
Incoming endpoints
2
Notable Domains
smsalert.co.in124 · outbound
kb.smsalert.co.in31 · outbound
youtu.be13 · outbound
youtube.com3 · outbound
chatondesk.com1 · outbound
Platform / Reference Domains
gnu.org120 · platform/reference
wordpress.org5 · platform/reference
opensource.org1 · platform/reference
External Asset Domains
No external asset domains detected.
Incoming Endpoints
No public endpoints detected.
Admin AJAX endpoints2
admin_post_save_sms_alert_settingsauthenticated
admin_post
wp_ajax_wc_sms_alert_sms_send_order_smsauthenticated
wp_ajax
Score History
2 score snapshots
v3.9.6
24
Latest
- Findings
- 2,734
- Errors
- 831
- Warnings
- 1,903
- Check
- 2.0.0
v3.9.5
24
Score
- Findings
- 2,733
- Errors
- 832
- Warnings
- 1,901
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 24 | 2,734 | 831 | 1,903 | v3.9.6 | 2.0.0 |
| 24 | 2,733 | 832 | 1,901 | v3.9.5 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Category
Issue
Domain
Related
OTP Login & Register Woocommerce34 scoreOTP Login With Phone Number, OTP Verification92 scoreShopMagic – Twilio SMS35 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder35 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce22 scoreAkismet Anti-spam: Spam Protection35 scoreLiteSpeed Cache35 scoreAll-in-One WP Migration and Backup34 score
Category
Issue
Domain
Related
OTP Login & Register Woocommerce34 scoreOTP Login With Phone Number, OTP Verification92 scoreShopMagic – Twilio SMS35 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder35 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce22 scoreAkismet Anti-spam: Spam Protection35 scoreLiteSpeed Cache35 scoreAll-in-One WP Migration and Backup34 score
Related Plugins
OTP Login With Phone Number, OTP Verification
900 active installs
92
ShopMagic – Twilio SMS
800 active installs
35
OTP Login & Register Woocommerce
1k+ active installs
34