The original WooCommerce multi-vendor plugin. Easily create a WooCommerce marketplace with multi-seller, product vendor stores & vendor commissions.
Category Scores
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Maintainability
674
19 issue groups
Security
75
6 issue groups
WARNINGMaintainabilityNon Prefixed Class FoundClasses declared by a theme/plugin should start with the theme/plugin prefix. Found: "APICredentialsType".515
- Category
- Maintainability
- Occurrences
- 515
- Severity
- warning
Sample message
Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "APICredentialsType".
ERRORMaintainabilitymissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;98
- Category
- Maintainability
- Occurrences
- 98
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
ERRORSecurityException Not EscapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"Config file $fileName not found"'.26
- Category
- Security
- Occurrences
- 26
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"Config file $fileName not found"'.
WARNINGSecurityInput Not SanitizedDetected usage of a non-sanitized input variable: $_ENV['CONTENT_TYPE']16
- Category
- Security
- Occurrences
- 16
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_ENV['CONTENT_TYPE']
WARNINGSecurityMissing Unslash$_SERVER['CONTENT_TYPE'] not unslashed before sanitization. Use wp_unslash() or similar14
- Category
- Security
- Occurrences
- 14
- Severity
- warning
Sample message
$_SERVER['CONTENT_TYPE'] not unslashed before sanitization. Use wp_unslash() or similar
WARNINGMaintainabilityNon Prefixed Constant FoundGlobal constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "WCV_ABSPATH_ADMIN".11
- Category
- Maintainability
- Occurrences
- 11
- Severity
- warning
Sample message
Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "WCV_ABSPATH_ADMIN".
WARNINGSecurityInput Not ValidatedDetected usage of a possibly undefined superglobal array index: $_SERVER['HTTP_HOST']. Check that the array index exists before using it.10
- Category
- Security
- Occurrences
- 10
- Severity
- warning
Sample message
Detected usage of a possibly undefined superglobal array index: $_SERVER['HTTP_HOST']. Check that the array index exists before using it.
ERRORSecurityUnsupported Identifier PlaceholderThe %i modifier is only supported in WP 6.2 or higher. Found: "%i".6
- Category
- Security
- Occurrences
- 6
- Severity
- error
Sample message
The %i modifier is only supported in WP 6.2 or higher. Found: "%i".
ERRORMaintainabilitycurl curl errnoUsing cURL functions is highly discouraged. Use wp_remote_get() instead.6
- Category
- Maintainability
- Occurrences
- 6
- Severity
- error
Sample message
Using cURL functions is highly discouraged. Use wp_remote_get() instead.
ERRORMaintainabilitycurl curl execUsing cURL functions is highly discouraged. Use wp_remote_get() instead.6
- Category
- Maintainability
- Occurrences
- 6
- Severity
- error
Sample message
Using cURL functions is highly discouraged. Use wp_remote_get() instead.
Show 15 more issue groups
ERRORMaintainabilityparse url parse url6
- Category
- Maintainability
- Occurrences
- 6
- Severity
- error
Sample message
parse_url() is discouraged because of inconsistency in the output across PHP versions; use wp_parse_url() instead.
WARNINGMaintainabilityNon Prefixed Variable Found5
- Category
- Maintainability
- Occurrences
- 5
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$footer_name".
ERRORMaintainabilitycurl curl close4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- error
Sample message
Using cURL functions is highly discouraged. Use wp_remote_get() instead.
ERRORMaintainabilitycurl curl getinfo4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- error
Sample message
Using cURL functions is highly discouraged. Use wp_remote_get() instead.
WARNINGSecurityUnescaped DBParameter3
- Category
- Security
- Occurrences
- 3
- Severity
- warning
Sample message
Unescaped parameter $sql used in $wpdb->get_results()\n$sql assigned unsafely at line 246.
WARNINGMaintainabilitytrademarked term3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
The plugin name includes a restricted term. Your chosen plugin name - "WC Vendors - WooCommerce Multivendor, WooCommerce Marketplace, Product Vendors" - contains the restricted term "woocommerce" which cannot be used within in your plugin name, unless your plugin name contains one of the allowed patterns: "for woocommerce", "with woocommerce", "using woocommerce", or "and woocommerce". The term must still not appear anywhere else in your name.
WARNINGMaintainabilityerror log error log2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
error_log() found. Debug code should not normally be used in production.
WARNINGMaintainabilityerror log trigger error2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
trigger_error() found. Debug code should not normally be used in production.
ERRORMaintainabilitycurl curl error2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
Using cURL functions is highly discouraged. Use wp_remote_get() instead.
ERRORMaintainabilitycurl curl init2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
Using cURL functions is highly discouraged. Use wp_remote_get() instead.
ERRORMaintainabilitycurl curl setopt2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
Using cURL functions is highly discouraged. Use wp_remote_get() instead.
ERRORMaintainabilitycurl curl setopt array2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
Using cURL functions is highly discouraged. Use wp_remote_get() instead.
ERRORMaintainabilityrand mt rand2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
mt_rand() is discouraged. Use the far less predictable wp_rand() instead.
WARNINGMaintainabilityNo Code Found1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
No PHP code was found in this file and short open tags are not allowed by this install of PHP. This file may be using short open tags but PHP does not allow them.
WARNINGMaintainabilityNon Prefixed Hookname Found1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "wcv_dashboard_urls".
Score History
First score snapshot
v2.7.0
24
Latest
- Findings
- 752
- Errors
- 168
- Warnings
- 584
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 24 | 752 | 168 | 584 | v2.7.0 | 2.0.0 |
Related Plugins
10k+ active installs
10k+ active installs
10k+ active installs
20k+ active installs