Cart PDF for WooCommerce

Adds ability for users and guests to download their WooCommerce cart as PDF

v3.2.0CloudCatchUpdated Added 1k+ installs100% rating
23
Score
531
Errors
172
Warnings
+0
Change

Category Scores

Security0
Repo89
Performance100
Maintainability0

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

703 findings

Security

351

6 issue groups

Maintainability

339

19 issue groups

ERRORSecurityException Not EscapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"Call to undefined method $class::$name()"'.307
Category
Security
Occurrences
307
Severity
error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"Call to undefined method $class::$name()"'.

WARNINGMaintainabilityNon Prefixed Variable FoundGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$_cr".128
Category
Maintainability
Occurrences
128
Severity
warning

Sample message

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$_cr".

ERRORMaintainabilitybadly named filesFile and folder names must not contain spaces or special characters.33
Category
Maintainability
Occurrences
33
Severity
error

Sample message

File and folder names must not contain spaces or special characters.

ERRORMaintainabilitymissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;33
Category
Maintainability
Occurrences
33
Severity
error

Sample message

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

ERRORMaintainabilityfile system operations freadFile operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fread().32
Category
Maintainability
Occurrences
32
Severity
error

Sample message

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fread().

ERRORSecurityOutput Not EscapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$Format'.17
Category
Security
Occurrences
17
Severity
error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$Format'.

ERRORMaintainabilityfile system operations fopenFile operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fopen().17
Category
Maintainability
Occurrences
17
Severity
error

Sample message

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fopen().

ERRORMaintainabilityfile system operations fcloseFile operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fclose().16
Category
Maintainability
Occurrences
16
Severity
error

Sample message

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fclose().

ERRORMaintainabilitydate datedate() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.14
Category
Maintainability
Occurrences
14
Severity
error

Sample message

date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.

ERRORMaintainabilityunlink unlinkunlink() is discouraged. Use wp_delete_file() to delete a file.14
Category
Maintainability
Occurrences
14
Severity
error

Sample message

unlink() is discouraged. Use wp_delete_file() to delete a file.

Show 15 more
ERRORMaintainabilitycurl curl setopt13
Category
Maintainability
Occurrences
13
Severity
error

Sample message

Using cURL functions is highly discouraged. Use wp_remote_get() instead.

WARNINGSecurityInput Not Sanitized10
Category
Security
Occurrences
10
Severity
warning

Sample message

Detected usage of a non-sanitized input variable: $_REQUEST['dest']

WARNINGSecurityMissing Unslash10
Category
Security
Occurrences
10
Severity
warning

Sample message

$_REQUEST['dest'] not unslashed before sanitization. Use wp_unslash() or similar

ERRORMaintainabilitystrip tags strip tags8
Category
Maintainability
Occurrences
8
Severity
error

Sample message

strip_tags() is discouraged. Use the more comprehensive wp_strip_all_tags() instead.

ERRORMaintainabilityfile system operations fwrite6
Category
Maintainability
Occurrences
6
Severity
error

Sample message

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fwrite().

WARNINGMaintainabilityNon Prefixed Constant Found5
Category
Maintainability
Occurrences
5
Severity
warning

Sample message

Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "_OTL_OLD_SPEC_COMPAT_2".

ERRORMaintainabilityparse url parse url5
Category
Maintainability
Occurrences
5
Severity
error

Sample message

parse_url() is discouraged because of inconsistency in the output across PHP versions; use wp_parse_url() instead.

WARNINGMaintainabilityerror log var export4
Category
Maintainability
Occurrences
4
Severity
warning

Sample message

var_export() found. Debug code should not normally be used in production.

WARNINGSecurityInput Not Validated4
Category
Security
Occurrences
4
Severity
warning

Sample message

Detected usage of a possibly undefined superglobal array index: $_REQUEST['dest']. Check that the array index exists before using it.

WARNINGSecurityRecommended3
Category
Security
Occurrences
3
Severity
warning

Sample message

Processing form data without nonce verification.

ERRORMaintainabilitycurl curl close3
Category
Maintainability
Occurrences
3
Severity
error

Sample message

Using cURL functions is highly discouraged. Use wp_remote_get() instead.

WARNINGMaintainabilityNon Prefixed Function Found2
Category
Maintainability
Occurrences
2
Severity
warning

Sample message

Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "child_wc_cart_pdf_remove_thumbnail_filters".

WARNINGMaintainabilityerror log print r2
Category
Maintainability
Occurrences
2
Severity
warning

Sample message

print_r() found. Debug code should not normally be used in production.

ERRORMaintainabilitycurl curl error2
Category
Maintainability
Occurrences
2
Severity
error

Sample message

Using cURL functions is highly discouraged. Use wp_remote_get() instead.

ERRORMaintainabilityfile system operations chmod2
Category
Maintainability
Occurrences
2
Severity
error

Sample message

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: chmod().

Score History

First score snapshot

v3.2.0

23

Latest

Findings
703
Errors
531
Warnings
172
Check
2.0.0