PluginScore

Deliver via Shipos for WooCommerce

ShipOS - Auto Sync your WooCommerce store orders to all delivery companies and Automate your shipping

v3.1.1Matat TechnologiesUpdated Added 600 installs100% rating
Chitacargohfdshipmenttapuz
35
Score
11
Errors
78
Warnings
+0
Change

Category Scores

Security12
Repo85
Performance100
Maintainability79

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

89 findings

Security

43

6 issue groups

Maintainability

40

7 issue groups

I18n

4

2 issue groups

Supply Chain

1

1 issue group

WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.24
Category
Security
Occurrences
24
Severity
warning

Sample message

Processing form data without nonce verification.

WordPress.Security.NonceVerification.Recommended
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$app_url".16
Category
Maintainability
Occurrences
16
Severity
warning

Sample message

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$app_url".

WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedVariableFound
WARNINGSecurityMissing nonce verificationProcessing form data without nonce verification.11
Category
Security
Occurrences
11
Severity
warning

Sample message

Processing form data without nonce verification.

WordPress.Security.NonceVerification.Missing
WARNINGMaintainabilityNon-prefixed functionFunctions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "add_plugin_action_link".9
Category
Maintainability
Occurrences
9
Severity
warning

Sample message

Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "add_plugin_action_link".

WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedFunctionFound
WARNINGMaintainabilityNon-prefixed classClasses declared by a theme/plugin should start with the theme/plugin prefix. Found: "Shipos_Blocks_Integration".5
Category
Maintainability
Occurrences
5
Severity
warning

Sample message

Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "Shipos_Blocks_Integration".

WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedClassFound
ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;5
Category
Maintainability
Occurrences
5
Severity
error

Sample message

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

missing_direct_file_access_protectionReference
WARNINGSecuritywp redirect wp redirectwp_redirect() found. Using wp_safe_redirect(), along with the "allowed_redirect_hosts" filter if needed, can help avoid any chances of malicious redirects within code. It is also important to remember to call exit() after a redirect so that no other unwanted code is executed.3
Category
Security
Occurrences
3
Severity
warning

Sample message

wp_redirect() found. Using wp_safe_redirect(), along with the "allowed_redirect_hosts" filter if needed, can help avoid any chances of malicious redirects within code. It is also important to remember to call exit() after a redirect so that no other unwanted code is executed.

WordPress.Security.SafeRedirect.wp_redirect_wp_redirectReference
ERRORI18nMissing Arg DomainMissing $domain parameter in function call to __().3
Category
I18n
Occurrences
3
Severity
error

Sample message

Missing $domain parameter in function call to __().

WordPress.WP.I18n.MissingArgDomainReference
WARNINGMaintainabilityNon-prefixed hook nameHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "shipos_delivery_location".2
Category
Maintainability
Occurrences
2
Severity
warning

Sample message

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "shipos_delivery_location".

WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedHooknameFound
WARNINGMaintainabilityerror log error logerror_log() found. Debug code should not normally be used in production.2
Category
Maintainability
Occurrences
2
Severity
warning

Sample message

error_log() found. Debug code should not normally be used in production.

WordPress.PHP.DevelopmentFunctions.error_log_error_log
Show 7 more
WARNINGSecurityInput is not sanitized2
Category
Security
Occurrences
2
Severity
warning

Sample message

Detected usage of a non-sanitized input variable: $_GET['dvsfw_select_ids']

WordPress.Security.ValidatedSanitizedInput.InputNotSanitized
WARNINGSecurityRequest data is not unslashed2
Category
Security
Occurrences
2
Severity
warning

Sample message

$_GET['dvsfw_select_ids'] not unslashed before sanitization. Use wp_unslash() or similar

WordPress.Security.ValidatedSanitizedInput.MissingUnslash
WARNINGI18nDiscouraged text-domain loading1
Category
I18n
Occurrences
1
Severity
warning

Sample message

load_plugin_textdomain() has been discouraged since WordPress version 4.6. When your plugin is hosted on WordPress.org, you no longer need to manually include this function call for translations under your plugin slug. WordPress will automatically load the translations for you as needed.

PluginCheck.CodeAnalysis.DiscouragedFunctions.load_plugin_textdomainFoundReference
ERRORSecurityOutput is not escaped1
Category
Security
Occurrences
1
Severity
error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found 'ob_get_clean'.

WordPress.Security.EscapeOutput.OutputNotEscapedReference
ERRORSupply ChainHidden files included1
Category
Supply Chain
Occurrences
1
Severity
error

Sample message

Hidden files are not permitted.

hidden_files
ERRORRepo Complianceoutdated tested upto header1
Category
Repo Compliance
Occurrences
1
Severity
error

Sample message

Tested up to: 6.8 < 7.0. The "Tested up to" value in your plugin is not set to the current version of WordPress. This means your plugin will not show up in searches, as we require plugins to be compatible and documented as tested up to the most recent version of WordPress.

outdated_tested_upto_headerReference
WARNINGMaintainabilitytrademarked term1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

The plugin slug includes a restricted term. Your plugin slug - "wc-shipos-delivery" - contains the restricted term "wc" which cannot be used at all in your plugin slug.

trademarked_term

External Connections

Potential connections found in static code analysis.

18 domains

Outbound calls

47

External assets

0

Incoming endpoints

18

Notable Domains

maps.google.com4 · outbound
maps.googleapis.com4 · outbound
v2.vuejs.org4 · outbound
matat.co.il3 · outbound
app.shipos.co.il2 · outbound
html.spec.whatwg.org2 · outbound

Platform / Reference Domains

w3.org12 · platform/reference
github.com5 · platform/reference
gnu.org1 · platform/reference

External Asset Domains

No external asset domains detected.

Incoming Endpoints

/wp-json/wc/v3/dvsfw_sync_pickup_locationsREST

register_rest_route

/wp-json/wc/v3/dvsfw_update_custom_fieldREST

register_rest_route

/wp-json/wc/v3/order_shipment_cancelled_metaREST

register_rest_route

/wp-json/wc/v3/order_shipment_created_metaREST

register_rest_route

/wp-json/wc/v3/shipos_license_updateREST

register_rest_route

/wp-json/wc/v3/shipos_license_update_allREST

register_rest_route

Admin AJAX endpoints8
wp_ajax_dvsfw_get_coordinatesauthenticated

wp_ajax

wp_ajax_dvsfw_get_pickup_locationsauthenticated

wp_ajax

wp_ajax_dvsfw_reopen_shipauthenticated

wp_ajax

wp_ajax_matat_change_order_statusauthenticated

wp_ajax

wp_ajax_matat_get_order_detailsauthenticated

wp_ajax

wp_ajax_matat_open_new_orderauthenticated

wp_ajax

wp_ajax_matat_sync_pickup_pointauthenticated

wp_ajax

wp_ajax_save_shipos_pickup_locationauthenticated

wp_ajax

Score History

First score snapshot

v3.1.1

35

Latest

Findings
89
Errors
11
Warnings
78
Check
2.0.0

Relationship Map

Author, categories, issues, domains, and nearby plugins.

34 nodes

Related Plugins

Datalogics Ecommerce Delivery – Datalogics

500 active installs

39
Shipping by Rules for WooCommerce

500 active installs

39
HFD ePost Integration

1k+ active installs

31