PluginScore

SuperFrete

Integração com a plataforma SuperFrete para WooCommerce.

v3.3.4SuperFreteUpdated Added 1k+ installs76% rating0% support resolved
fretelogisticashippingwoocommerce
34
Score
84
Errors
242
Warnings
+0
Change

Category Scores

Security0
Repo72
Performance100
Maintainability64

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

326 findings

Security

196

9 issue groups

Maintainability

76

10 issue groups

I18n

49

3 issue groups

Repo Compliance

3

3 issue groups

WARNINGSecurityRequest data is not unslashed$_GET['nonce'] not unslashed before sanitization. Use wp_unslash() or similar70
Category
Security
Occurrences
70
Severity
warning

Sample message

$_GET['nonce'] not unslashed before sanitization. Use wp_unslash() or similar

WordPress.Security.ValidatedSanitizedInput.MissingUnslash
ERRORI18nMissing Arg DomainMissing $domain parameter in function call to __().45
Category
I18n
Occurrences
45
Severity
error

Sample message

Missing $domain parameter in function call to __().

WordPress.WP.I18n.MissingArgDomainReference
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_GET['nonce']38
Category
Security
Occurrences
38
Severity
warning

Sample message

Detected usage of a non-sanitized input variable: $_GET['nonce']

WordPress.Security.ValidatedSanitizedInput.InputNotSanitized
WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.28
Category
Maintainability
Occurrences
28
Severity
warning

Sample message

Use of a direct database call is discouraged.

WordPress.DB.DirectDatabaseQuery.DirectQuery
WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().25
Category
Maintainability
Occurrences
25
Severity
warning

Sample message

Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().

WordPress.DB.DirectDatabaseQuery.NoCaching
WARNINGSecurityMissing nonce verificationProcessing form data without nonce verification.21
Category
Security
Occurrences
21
Severity
warning

Sample message

Processing form data without nonce verification.

WordPress.Security.NonceVerification.Missing
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$additional_css'.20
Category
Security
Occurrences
20
Severity
error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$additional_css'.

WordPress.Security.EscapeOutput.OutputNotEscapedReference
WARNINGSecurityInput is not validatedDetected usage of a possibly undefined superglobal array index: $_POST['address']. Check that the array index exists before using it.12
Category
Security
Occurrences
12
Severity
warning

Sample message

Detected usage of a possibly undefined superglobal array index: $_POST['address']. Check that the array index exists before using it.

WordPress.Security.ValidatedSanitizedInput.InputNotValidated
WARNINGSecurityInterpolated SQL is not preparedUse placeholders and $wpdb->prepare(); found interpolated variable $logs_table at "DELETE FROM $logs_table WHERE created_at < DATE_SUB(NOW(), INTERVAL 30 DAY)"11
Category
Security
Occurrences
11
Severity
warning

Sample message

Use placeholders and $wpdb->prepare(); found interpolated variable $logs_table at "DELETE FROM $logs_table WHERE created_at < DATE_SUB(NOW(), INTERVAL 30 DAY)"

WordPress.DB.PreparedSQL.InterpolatedNotPrepared
WARNINGSecurityDatabase parameter is not escapedUnescaped parameter $logs_table used in $wpdb->query()\n$logs_table assigned unsafely at line 115.10
Category
Security
Occurrences
10
Severity
warning

Sample message

Unescaped parameter $logs_table used in $wpdb->query()\n$logs_table assigned unsafely at line 115.

PluginCheck.Security.DirectDB.UnescapedDBParameter
Show 15 more
WARNINGSecurityNonce verification recommended8
Category
Security
Occurrences
8
Severity
warning

Sample message

Processing form data without nonce verification.

WordPress.Security.NonceVerification.Recommended
WARNINGMaintainabilityNon-prefixed global variable7
Category
Maintainability
Occurrences
7
Severity
warning

Sample message

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$attributes_string".

WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedVariableFound
ERRORMaintainabilitydate date6
Category
Maintainability
Occurrences
6
Severity
error

Sample message

date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.

WordPress.DateTime.RestrictedFunctions.date_date
WARNINGSecuritywp redirect wp redirect6
Category
Security
Occurrences
6
Severity
warning

Sample message

wp_redirect() found. Using wp_safe_redirect(), along with the "allowed_redirect_hosts" filter if needed, can help avoid any chances of malicious redirects within code. It is also important to remember to call exit() after a redirect so that no other unwanted code is executed.

WordPress.Security.SafeRedirect.wp_redirect_wp_redirectReference
WARNINGMaintainabilityunexpected markdown file4
Category
Maintainability
Occurrences
4
Severity
warning

Sample message

Unexpected markdown file "README-DEV.md" detected in plugin root. Only specific markdown files are expected in production plugins.

unexpected_markdown_file
ERRORI18nText Domain Mismatch3
Category
I18n
Occurrences
3
Severity
error

Sample message

Mismatched text domain. Expected 'superfrete' but got 'superfrete-product-page-shipping-calculator-woocommerce'.

WordPress.WP.I18n.TextDomainMismatchReference
ERRORMaintainabilitywp function not compatible with requires wp2
Category
Maintainability
Occurrences
2
Severity
error

Sample message

Function "wp_date()" requires WordPress 5.3.0, but your plugin minimum supported version is WordPress 5.0.0.

wp_function_not_compatible_with_requires_wpReference
WARNINGMaintainabilitySchema Change1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

Attempting a database schema change is discouraged.

WordPress.DB.DirectDatabaseQuery.SchemaChange
WARNINGMaintainabilityNon-prefixed hook name1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "pisol_ppscw_auto_select_country".

WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedHooknameFound
ERRORMaintainabilityfile system operations mkdir1
Category
Maintainability
Occurrences
1
Severity
error

Sample message

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: mkdir().

WordPress.WP.AlternativeFunctions.file_system_operations_mkdir
ERRORMaintainabilitystrip tags strip tags1
Category
Maintainability
Occurrences
1
Severity
error

Sample message

strip_tags() is discouraged. Use the more comprehensive wp_strip_all_tags() instead.

WordPress.WP.AlternativeFunctions.strip_tags_strip_tags
ERRORI18nMissing Translators Comment1
Category
I18n
Occurrences
1
Severity
error

Sample message

A function call to _n_noop() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.

WordPress.WP.I18n.MissingTranslatorsCommentReference
ERRORRepo Compliancemismatched tested up to header1
Category
Repo Compliance
Occurrences
1
Severity
error

Sample message

Mismatched "Tested up to": 6.7 != 6.8.1. The "Tested up to" value in the readme file must match the "Tested up to" value in the plugin header. If the plugin header has a "Tested up to" value, it will override the readme value, which can cause confusion.

mismatched_tested_up_to_headerReference
ERRORRepo Complianceoutdated tested upto header1
Category
Repo Compliance
Occurrences
1
Severity
error

Sample message

Tested up to: 6.7 < 7.0. The "Tested up to" value in your plugin is not set to the current version of WordPress. This means your plugin will not show up in searches, as we require plugins to be compatible and documented as tested up to the most recent version of WordPress.

outdated_tested_upto_headerReference
ERRORRepo Compliancereadme description non official language1
Category
Repo Compliance
Occurrences
1
Severity
error

Sample message

The readme description contains unofficial language. It must be written in standard English.

readme_description_non_official_languageReference

External Connections

Potential connections found in static code analysis.

10 domains

Outbound calls

16

External assets

0

Incoming endpoints

20

Platform / Reference Domains

gnu.org1 · platform/reference

External Asset Domains

No external asset domains detected.

Incoming Endpoints

/wp-json/superfrete/v1/oauth/tokenREST

register_rest_route

/wp-json/superfrete/v1/webhookREST

register_rest_route

/wp-json/superfrete/v1/webhook/testREST

register_rest_route

wp_ajax_nopriv_superfrete_cal_shippingpublic

wp_ajax

wp_ajax_nopriv_superfrete_calculatepublic

wp_ajax

wp_ajax_nopriv_superfrete_oauth_proxypublic

wp_ajax

Admin AJAX endpoints13
admin_post_superfrete_pay_ticketauthenticated

admin_post

admin_post_superfrete_resend_orderauthenticated

admin_post

wp_ajax_check_superfrete_statusauthenticated

wp_ajax

wp_ajax_superfrete_cal_shippingauthenticated

wp_ajax

wp_ajax_superfrete_calculateauthenticated

wp_ajax

wp_ajax_superfrete_clear_webhook_logsauthenticated

wp_ajax

wp_ajax_superfrete_manual_retryauthenticated

wp_ajax

wp_ajax_superfrete_oauth_callbackauthenticated

wp_ajax

wp_ajax_superfrete_oauth_proxyauthenticated

wp_ajax

wp_ajax_superfrete_register_webhookauthenticated

wp_ajax

wp_ajax_superfrete_reset_customizationauthenticated

wp_ajax

wp_ajax_superfrete_save_customizationauthenticated

wp_ajax

1 more hidden

Score History

First score snapshot

v3.3.4

34

Latest

Findings
326
Errors
84
Warnings
242
Check
2.0.0

Relationship Map

Author, categories, issues, domains, and nearby plugins.

36 nodes

Related Plugins

Crypto Payment Gateway with Instant Payouts

1k+ active installs

100
Instant Approval Payment Gateway with Instant Payouts

2k+ active installs

100
Kliken: Ads + Pixel for Meta

40k+ active installs

100
Magnify – Suggestive Search Plugin

3k+ active installs

100
No Shipping Message for WooCommerce

3k+ active installs

100
RY City Select for WooCommerce

2k+ active installs

100