This is the official WooCommerce extension to ship products using The Courier Guy.
35
Score
57
Errors
107
Warnings
+0
Change
Category Scores
Security0
Repo90
Performance100
Maintainability56
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Security
96
7 issue groups
Maintainability
50
14 issue groups
I18n
17
3 issue groups
Supply Chain
1
1 issue group
WARNINGSecurityMissing nonce verificationProcessing form data without nonce verification.30
- Category
- Security
- Occurrences
- 30
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGSecurityRequest data is not unslashed$_GET['q']['term'] not unslashed before sanitization. Use wp_unslash() or similar27
- Category
- Security
- Occurrences
- 27
- Severity
- warning
Sample message
$_GET['q']['term'] not unslashed before sanitization. Use wp_unslash() or similar
ERRORMaintainabilityShort PHP open tag foundShort PHP opening tag used with echo; expected "<?php echo esc_attr ..." but found "<?= esc_attr ..."24
- Category
- Maintainability
- Occurrences
- 24
- Severity
- error
Sample message
Short PHP opening tag used with echo; expected "<?php echo esc_attr ..." but found "<?= esc_attr ..."
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_POST['iihtcg_selector_input']22
- Category
- Security
- Occurrences
- 22
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_POST['iihtcg_selector_input']
ERRORI18nNon Singular String Literal TextThe $text parameter must be a single text string literal. Found: $displayName15
- Category
- I18n
- Occurrences
- 15
- Severity
- error
Sample message
The $text parameter must be a single text string literal. Found: $displayName
WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.13
- Category
- Security
- Occurrences
- 13
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.5
- Category
- Maintainability
- Occurrences
- 5
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().5
- Category
- Maintainability
- Occurrences
- 5
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
ERRORMaintainabilityNot AllowedUse of heredoc syntax (<<<) is not allowed; use standard strings or inline HTML instead3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- error
Sample message
Use of heredoc syntax (<<<) is not allowed; use standard strings or inline HTML instead
WARNINGMaintainabilityerror log error logerror_log() found. Debug code should not normally be used in production.2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
error_log() found. Debug code should not normally be used in production.
Show 15 moreShow less
WARNINGSecurityInput is not validated2
- Category
- Security
- Occurrences
- 2
- Severity
- warning
Sample message
Detected usage of a possibly undefined superglobal array index: $_GET['q']['term']. Check that the array index exists before using it.
ERRORMaintainabilityfile system operations readfile2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: readfile().
ERRORMaintainabilityunlink unlink2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
unlink() is discouraged. Use wp_delete_file() to delete a file.
WARNINGI18nDiscouraged text-domain loading1
- Category
- I18n
- Occurrences
- 1
- Severity
- warning
Sample message
load_plugin_textdomain() has been discouraged since WordPress version 4.6. When your plugin is hosted on WordPress.org, you no longer need to manually include this function call for translations under your plugin slug. WordPress will automatically load the translations for you as needed.
ERRORMaintainabilityPlugin Directory Write1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
Plugin folders are deleted when upgraded. Do not save data to the plugin folder using copy(). Detected usage of __FILE__ or __DIR__ magic constant. Use wp_upload_dir() to get the uploads directory path or save to the database instead.
ERRORSecuritySQL query is not prepared1
- Category
- Security
- Occurrences
- 1
- Severity
- error
Sample message
Use placeholders and $wpdb->prepare(); found $query
ERRORSecurityLike Wildcards In Query1
- Category
- Security
- Occurrences
- 1
- Severity
- error
Sample message
SQL wildcards for a LIKE query should be passed in through a replacement parameter. Found: LIKE '_transient_timeout_tcg_rate_cache%'.
ERRORMaintainabilitydate date1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.
ERRORMaintainabilityfile system operations fclose1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fclose().
ERRORMaintainabilityfile system operations fopen1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fopen().
ERRORMaintainabilityfile system operations fwrite1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fwrite().
ERRORMaintainabilityfile system operations mkdir1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: mkdir().
ERRORMaintainabilityfile system operations rmdir1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: rmdir().
ERRORI18nMissing Arg Domain1
- Category
- I18n
- Occurrences
- 1
- Severity
- error
Sample message
Missing $domain parameter in function call to esc_html__().
ERRORSupply ChainHidden files included1
- Category
- Supply Chain
- Occurrences
- 1
- Severity
- error
Sample message
Hidden files are not permitted.
External Connections
Potential connections found in static code analysis.
Outbound calls
170
External assets
0
Incoming endpoints
10
Notable Domains
docs.aws.amazon.com26 · outbound
cloudfront.amazonaws.com25 · outbound
cloudfront.cn-northwest-1.amazonaws.com.cn13 · outbound
cloudfront-fips.amazonaws.com11 · outbound
php.net5 · outbound
s3.amazonaws.com4 · outbound
Platform / Reference Domains
github.com1 · platform/reference
gnu.org1 · platform/reference
External Asset Domains
No external asset domains detected.
Incoming Endpoints
/wp-json/the-courier-guy/v1/insuranceREST
register_rest_route
/wp-json/the-courier-guy/v1/shipping-optionsREST
register_rest_route
/wp-json/the-courier-guy/v1/testREST
register_rest_route
/wp-json/the-courier-guy/v1/update-shipping-optionsREST
register_rest_route
wp_ajax_nopriv_tcg_update_shipping_optionspublic
wp_ajax
Admin AJAX endpoints4
admin_post_print_waybillauthenticated
admin_post
wp_ajax_dismissed_notice_handlerauthenticated
wp_ajax
wp_ajax_tcg_return_actionauthenticated
wp_ajax
wp_ajax_tcg_update_shipping_optionsauthenticated
wp_ajax
Score History
3 score snapshots
v5.5.2
35
Latest
- Findings
- 164
- Errors
- 57
- Warnings
- 107
- Check
- 2.0.0
v5.5.1
35
Score
- Findings
- 164
- Errors
- 57
- Warnings
- 107
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 35 | 164 | 57 | 107 | v5.5.2 | 2.0.0 |
| 35 | 164 | 57 | 107 | v5.5.1 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Author
Issue
Domain
Related
WooCommerce21 scoreAll-in-One WP Migration and Backup34 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreContact Form 769 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreClassic Editor63 scoreAkismet Anti-spam: Spam Protection35 scorePopup Builder & Popup Maker for WordPress – OptinMonster Email Marketing and Lead Generation32 scoreWooCommerce PayPal Payments37 scoreMailchimp for WooCommerce24 scoreDownload Manager22 scoreMercado Pago payments for WooCommerce30 scoreColissimo shipping methods for WooCommerce99 score
Author
Issue
Domain
Related
WooCommerce21 scoreAll-in-One WP Migration and Backup34 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreContact Form 769 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreClassic Editor63 scoreAkismet Anti-spam: Spam Protection35 scorePopup Builder & Popup Maker for WordPress – OptinMonster Email Marketing and Lead Generation32 scoreWooCommerce PayPal Payments37 scoreMailchimp for WooCommerce24 scoreDownload Manager22 scoreMercado Pago payments for WooCommerce30 scoreColissimo shipping methods for WooCommerce99 score
Related Plugins
GetResponse Official
4k+ active installs
100
No Shipping Message for WooCommerce
3k+ active installs
100
BD Courier Order Ratio Checker
2k+ active installs
100
WC – APG Free Shipping
1k+ active installs
100
bpost-shipping-platform
400 active installs
100
Colissimo shipping methods for WooCommerce
10k+ active installs
99