TrackShip auto-tracks orders, adds a branded tracking experience to your store and handles all customer touchpoints from shipping to delivery
25
Score
405
Errors
954
Warnings
+0
Change
Category Scores
Security0
Repo100
Performance100
Maintainability0
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Maintainability
725
13 issue groups
I18n
310
3 issue groups
Security
295
9 issue groups
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$a".370
- Category
- Maintainability
- Occurrences
- 370
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$a".
ERRORI18nMissing Arg DomainMissing $domain parameter in function call to esc_attr_e().150
- Category
- I18n
- Occurrences
- 150
- Severity
- error
Sample message
Missing $domain parameter in function call to esc_attr_e().
ERRORI18nNon Singular String Literal TextThe $text parameter must be a single text string literal. Found: $array['class']149
- Category
- I18n
- Occurrences
- 149
- Severity
- error
Sample message
The $text parameter must be a single text string literal. Found: $array['class']
WARNINGSecurityRequest data is not unslashed$_COOKIE['Notice'] not unslashed before sanitization. Use wp_unslash() or similar105
- Category
- Security
- Occurrences
- 105
- Severity
- warning
Sample message
$_COOKIE['Notice'] not unslashed before sanitization. Use wp_unslash() or similar
WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.102
- Category
- Maintainability
- Occurrences
- 102
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().98
- Category
- Maintainability
- Occurrences
- 98
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.69
- Category
- Security
- Occurrences
- 69
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGMaintainabilityNon-prefixed hook nameHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "add_multiple_emails_to_shipment_email".59
- Category
- Maintainability
- Occurrences
- 59
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "add_multiple_emails_to_shipment_email".
ERRORSecurityException output is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$bodyArray['error']['message']'.42
- Category
- Security
- Occurrences
- 42
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$bodyArray['error']['message']'.
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_GET['order_id']39
- Category
- Security
- Occurrences
- 39
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_GET['order_id']
Show 15 moreShow less
WARNINGMaintainabilityNon-prefixed class28
- Category
- Maintainability
- Occurrences
- 28
- Severity
- warning
Sample message
Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "TS4WC_Admin_Customizer".
ERRORMaintainabilityOffloaded Content14
- Category
- Maintainability
- Occurrences
- 14
- Severity
- error
Sample message
Found call to wp_enqueue_script() with external resource. Offloading scripts to your servers or any remote service is disallowed.
WARNINGSecurityInterpolated SQL is not prepared12
- Category
- Security
- Occurrences
- 12
- Severity
- warning
Sample message
Use placeholders and $wpdb->prepare(); found interpolated variable $column_name at "ALTER TABLE `{$wpdb->prefix}trackship_shipment_meta` ADD `$column_name` $type"
ERRORSecuritySQL query is not prepared11
- Category
- Security
- Occurrences
- 11
- Severity
- error
Sample message
Use placeholders and $wpdb->prepare(); found $count_sql
WARNINGMaintainabilityNon-prefixed function11
- Category
- Maintainability
- Occurrences
- 11
- Severity
- warning
Sample message
Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "WC_TrackShip_Email_Manager".
ERRORI18nText Domain Mismatch11
- Category
- I18n
- Occurrences
- 11
- Severity
- error
Sample message
Mismatched text domain. Expected 'trackship-for-woocommerce' but got ''.
WARNINGMaintainabilitySchema Change10
- Category
- Maintainability
- Occurrences
- 10
- Severity
- warning
Sample message
Attempting a database schema change is discouraged.
ERRORSecurityDatabase parameter is not escaped9
- Category
- Security
- Occurrences
- 9
- Severity
- error
Sample message
Unescaped parameter $count_sql used in $wpdb->get_var()\n$count_sql assigned unsafely at line 119.
WARNINGMaintainabilityerror log print r9
- Category
- Maintainability
- Occurrences
- 9
- Severity
- warning
Sample message
print_r() found. Debug code should not normally be used in production.
WARNINGMaintainabilityslow db query meta query7
- Category
- Maintainability
- Occurrences
- 7
- Severity
- warning
Sample message
Detected usage of meta_query, possible slow query.
WARNINGMaintainabilityslow db query meta key6
- Category
- Maintainability
- Occurrences
- 6
- Severity
- warning
Sample message
Detected usage of meta_key, possible slow query.
WARNINGMaintainabilityslow db query meta value6
- Category
- Maintainability
- Occurrences
- 6
- Severity
- warning
Sample message
Detected usage of meta_value, possible slow query.
ERRORMaintainabilitystrip tags strip tags5
- Category
- Maintainability
- Occurrences
- 5
- Severity
- error
Sample message
strip_tags() is discouraged. Use the more comprehensive wp_strip_all_tags() instead.
WARNINGSecurityDatabase parameter is not escaped4
- Category
- Security
- Occurrences
- 4
- Severity
- warning
Sample message
Unescaped parameter $column_name used in $wpdb->query()\n$column_name assigned unsafely at line 718.
WARNINGSecurityLike Without Wildcards4
- Category
- Security
- Occurrences
- 4
- Severity
- warning
Sample message
Unless you are using SQL wildcards, using LIKE is inefficient. Use a straight compare instead. Found: LIKE 'delivered'.
External Connections
Potential connections found in static code analysis.
Outbound calls
107
External assets
11
Incoming endpoints
41
Notable Domains
docs.trackship.com19 · outbound
momentjs.com6 · outbound
api.trackship.com5 · outbound
docs.woocommerce.com3 · outbound
cdnjs.cloudflare.com2 · outbound
rest.clicksend.com2 · outbound
Platform / Reference Domains
External Asset Domains
my.trackship.com11 · asset + outbound
trackship.com11 · asset + outbound
cdn.datatables.net9 · asset + outbound
cdn.jsdelivr.net3 · asset
trackship.github.io2 · asset
fonts.googleapis.com1 · asset
Incoming Endpoints
/wp-json/wc-analytics/data/get_shipments_providersREST
register_rest_route
/wp-json/wc-analytics/reports/data/shipments_by_providerREST
register_rest_route
/wp-json/wc-analytics/reports/data/trackship/statsREST
register_rest_route
/wp-json/wc/v1/check_ts4wc_installedREST
register_rest_route
/wp-json/wc/v1/disconnect_from_trackshipREST
register_rest_route
/wp-json/wc/v1/tracking-webhookREST
register_rest_route
Admin AJAX endpoints33
wp_ajax_add_trackship_mapping_rowauthenticated
wp_ajax
wp_ajax_bulk_shipment_status_from_settingsauthenticated
wp_ajax
wp_ajax_bulk_shipment_status_from_shipmentsauthenticated
wp_ajax
wp_ajax_dashboard_page_count_queryauthenticated
wp_ajax
wp_ajax_get_admin_tracking_widgetauthenticated
wp_ajax
wp_ajax_get_shipment_status_from_shipmentsauthenticated
wp_ajax
wp_ajax_get_tracking_infoauthenticated
wp_ajax
wp_ajax_get_trackship_logsauthenticated
wp_ajax
wp_ajax_get_trackship_shipmentsauthenticated
wp_ajax
wp_ajax_log_details_popupauthenticated
wp_ajax
wp_ajax_metabox_get_shipment_statusauthenticated
wp_ajax
wp_ajax_remove_tracking_eventauthenticated
wp_ajax
21 more hidden
Score History
4 score snapshots
v2.0.7
25
Latest
- Findings
- 1,359
- Errors
- 405
- Warnings
- 954
- Check
- 2.0.0
v2.0.6
25
Score
- Findings
- 1,359
- Errors
- 405
- Warnings
- 954
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 25 | 1,359 | 405 | 954 | v2.0.7 | 2.0.0 |
| 25 | 1,359 | 405 | 954 | v2.0.6 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Author
Category
Issue
Domain
Related
LiteSpeed Cache35 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder39 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce21 scoreAkismet Anti-spam: Spam Protection35 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreWP Mail SMTP by WPForms – The Most Popular SMTP and Email Log Plugin30 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreAdvanced Custom Fields (ACF®)23 scoreMonsterInsights – Google Analytics Dashboard for WordPress (Website Stats Made Easy)25 scoreGoogle for WooCommerce38 scoreWooCommerce PayPal Payments37 scoreWooCommerce Stripe Payment Gateway29 score
Author
Category
Issue
Domain
Related
LiteSpeed Cache35 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder39 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce21 scoreAkismet Anti-spam: Spam Protection35 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreWP Mail SMTP by WPForms – The Most Popular SMTP and Email Log Plugin30 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreAdvanced Custom Fields (ACF®)23 scoreMonsterInsights – Google Analytics Dashboard for WordPress (Website Stats Made Easy)25 scoreGoogle for WooCommerce38 scoreWooCommerce PayPal Payments37 scoreWooCommerce Stripe Payment Gateway29 score
Related Plugins
Kliken: Ads + Pixel for Meta
30k+ active installs
100
Paystack WooCommerce Payment Gateway
30k+ active installs
100
Store Vacation Lite for WooCommerce
20k+ active installs
100
EAN Barcode Generator for WooCommerce: UPC, ISBN & GTIN Inventory
10k+ active installs
100
Visa Acceptance Solutions
10k+ active installs
100
No Gutenberg? – Choose Where to Use the Block Editor or the Classic Editor
9k+ active installs
100