PluginScore

TOCHAT.BE

Add a free WhatsApp click-to-chat button to your WordPress site. Easily connect your WhatsApp account and start chatting with customers instantly.

v1.3.4César MartínUpdated Added 800 installs100% rating
chatclick to chatwhatsappwhatsapp businesswhatsapp support chat
73
Score
2
Errors
71
Warnings
+0
Change

Category Scores

Security59
Repo91
Performance100
Maintainability83

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

73 findings

Maintainability

46

5 issue groups

Security

25

2 issue groups

Repo Compliance

2

2 issue groups

WARNINGSecurityRequest data is not unslashed$_GET['order'] not unslashed before sanitization. Use wp_unslash() or similar18
Category
Security
Occurrences
18
Severity
warning

Sample message

$_GET['order'] not unslashed before sanitization. Use wp_unslash() or similar

WordPress.Security.ValidatedSanitizedInput.MissingUnslash
WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.15
Category
Maintainability
Occurrences
15
Severity
warning

Sample message

Use of a direct database call is discouraged.

WordPress.DB.DirectDatabaseQuery.DirectQuery
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$about_message".14
Category
Maintainability
Occurrences
14
Severity
warning

Sample message

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$about_message".

WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedVariableFound
WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().13
Category
Maintainability
Occurrences
13
Severity
warning

Sample message

Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().

WordPress.DB.DirectDatabaseQuery.NoCaching
WARNINGSecurityDatabase parameter is not escapedUnescaped parameter $table used in $wpdb->get_var()\n$table assigned unsafely at line 173.7
Category
Security
Occurrences
7
Severity
warning

Sample message

Unescaped parameter $table used in $wpdb->get_var()\n$table assigned unsafely at line 173.

PluginCheck.Security.DirectDB.UnescapedDBParameter
WARNINGMaintainabilitySchema ChangeAttempting a database schema change is discouraged.3
Category
Maintainability
Occurrences
3
Severity
warning

Sample message

Attempting a database schema change is discouraged.

WordPress.DB.DirectDatabaseQuery.SchemaChange
ERRORRepo Complianceoutdated tested upto headerTested up to: 6.7 < 7.0. The "Tested up to" value in your plugin is not set to the current version of WordPress. This means your plugin will not show up in searches, as we require plugins to be compatible and documented as tested up to the most recent version of WordPress.1
Category
Repo Compliance
Occurrences
1
Severity
error

Sample message

Tested up to: 6.7 < 7.0. The "Tested up to" value in your plugin is not set to the current version of WordPress. This means your plugin will not show up in searches, as we require plugins to be compatible and documented as tested up to the most recent version of WordPress.

outdated_tested_upto_headerReference
WARNINGRepo Complianceplugin header nonexistent domain pathThe "Domain Path" header in the plugin file must point to an existing folder. Found: "languages"1
Category
Repo Compliance
Occurrences
1
Severity
warning

Sample message

The "Domain Path" header in the plugin file must point to an existing folder. Found: "languages"

plugin_header_nonexistent_domain_pathReference
ERRORMaintainabilityuninstall missing constant checkCheck for WP_UNINSTALL_PLUGIN constant missing.1
Category
Maintainability
Occurrences
1
Severity
error

Sample message

Check for WP_UNINSTALL_PLUGIN constant missing.

uninstall_missing_constant_checkReference

External Connections

Potential connections found in static code analysis.

11 domains

Outbound calls

27

External assets

1

Incoming endpoints

4

Notable Domains

tochat.be11 · outbound
api.whatsapp.com6 · outbound
chat.whatsapp.com1 · outbound
chatwith.io1 · outbound
wa.me1 · outbound
web.whatsapp.com1 · outbound

Platform / Reference Domains

w3.org3 · platform/reference
github.com1 · platform/reference
gnu.org1 · platform/reference

External Asset Domains

widget.tochat.be1 · asset

Incoming Endpoints

wp_ajax_nopriv_tochatbe_click_logpublic

wp_ajax

wp_ajax_nopriv_tochatbe_save_order_messagepublic

wp_ajax

Admin AJAX endpoints2
wp_ajax_tochatbe_click_logauthenticated

wp_ajax

wp_ajax_tochatbe_save_order_messageauthenticated

wp_ajax

Score History

First score snapshot

v1.3.4

73

Latest

Findings
73
Errors
2
Warnings
71
Check
2.0.0

Relationship Map

Author, categories, issues, domains, and nearby plugins.

36 nodes

Related Plugins

Automation Web Platform – Notifications and OTP for WooCommerce, Advanced Country Code

500 active installs

100
Floating Contact Button for MAX and Telegram

1k+ active installs

100
Bolt CTA Button – Floating Call Button for WordPress

1k+ active installs

99
Click to Chat – HoliThemes

700k+ active installs

99
Spice Social Share

4k+ active installs

99
Contactus

500 active installs

97