Stripe Tax – Sales tax automation for WooCommerce

Stripe Tax for WooCommerce allows you to easily calculate and collect sales tax, VAT, and GST on WooCommerce orders.

v2.0.4Stripe TaxUpdated 2026-06-11Added Jul 19, 202430k+ installs20% rating0% support resolved
36
Score
97
Errors
61
Warnings
+0
Change

Category Scores

Security0
Repo100
Performance100
Maintainability55

Top Issues by Category

Issues Details

158 issues found in latest scan

ERROR67
WordPress.Security.EscapeOutput.ExceptionNotEscaped

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"Cannot save property `{$key}` containing an API resource of type "'.

WARNING53
WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedVariableFound

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$allowed".

ERROR8
WordPress.WP.I18n.TextDomainMismatch

Mismatched text domain. Expected 'stripe-tax-for-woocommerce' but got 'stripe_tax_for_woocommerce'.

WARNING3
WordPress.PHP.DevelopmentFunctions.error_log_trigger_error

trigger_error() found. Debug code should not normally be used in production.

ERROR3
WordPress.WP.AlternativeFunctions.curl_curl_errno

Using cURL functions is highly discouraged. Use wp_remote_get() instead.

WARNING3
trademarked_term

The plugin name includes a restricted term. Your chosen plugin name - "Stripe Tax - Sales tax automation for WooCommerce" - contains the restricted term "stripe" and cannot be used to begin your plugin name. We disallow the use of certain terms in ways that are abused, or potentially infringe on and/or are misleading with regards to trademarks. You may use the term "stripe" elsewhere in your plugin name, such as "... for stripe".

WARNING2
WordPress.PHP.DevelopmentFunctions.error_log_error_log

error_log() found. Debug code should not normally be used in production.

ERROR2
WordPress.Security.EscapeOutput.OutputNotEscaped

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$message'.

ERROR2
WordPress.WP.AlternativeFunctions.curl_curl_error

Using cURL functions is highly discouraged. Use wp_remote_get() instead.

ERROR2
WordPress.WP.AlternativeFunctions.curl_curl_exec

Using cURL functions is highly discouraged. Use wp_remote_get() instead.

ERROR2
WordPress.WP.AlternativeFunctions.curl_curl_getinfo

Using cURL functions is highly discouraged. Use wp_remote_get() instead.

ERROR2
WordPress.WP.AlternativeFunctions.curl_curl_setopt_array

Using cURL functions is highly discouraged. Use wp_remote_get() instead.

ERROR2
WordPress.WP.AlternativeFunctions.parse_url_parse_url

parse_url() is discouraged because of inconsistency in the output across PHP versions; use wp_parse_url() instead.

ERROR2
missing_direct_file_access_protection

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

ERROR1
WordPress.WP.AlternativeFunctions.curl_curl_close

Using cURL functions is highly discouraged. Use wp_remote_get() instead.

ERROR1
WordPress.WP.AlternativeFunctions.curl_curl_init

Using cURL functions is highly discouraged. Use wp_remote_get() instead.

ERROR1
WordPress.WP.AlternativeFunctions.curl_curl_reset

Using cURL functions is highly discouraged. Use wp_remote_get() instead.

ERROR1
WordPress.WP.AlternativeFunctions.rand_mt_rand

mt_rand() is discouraged. Use the far less predictable wp_rand() instead.

ERROR1
WordPress.WP.I18n.MissingArgDomain

Missing $domain parameter in function call to __().

Latest Snapshot

Findings

158

Errors

97

Warnings

61

Score History

First score snapshot

First scan completed Jun 20, 2026

v2.0.4 · Plugin Check 2.0.0 · Model 2026.06-mvp-static-v2

Jun 20, 2026

v2.0.4

36

Latest

Findings
158
Errors
97
Warnings
61
Plugin Check
2.0.0
Model
2026.06-mvp-static-v2

Related Plugins