WooCommerce PDF invoice generator with automatic email attachment. Create packing slips, shipping labels, credit notes, multilingual.
49
Score
56
Errors
151
Warnings
+0
Change
Category Scores
Security36
Repo91
Performance100
Maintainability29
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Maintainability
179
17 issue groups
Security
26
5 issue groups
Repo Compliance
2
2 issue groups
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$base_dir".93
- Category
- Maintainability
- Occurrences
- 93
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$base_dir".
WARNINGSecurityRequest data is not unslashed$_REQUEST['email'] not unslashed before sanitization. Use wp_unslash() or similar14
- Category
- Security
- Occurrences
- 14
- Severity
- warning
Sample message
$_REQUEST['email'] not unslashed before sanitization. Use wp_unslash() or similar
WARNINGMaintainabilityDynamic hook nameHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "$this->client->getSlug() . '_extra_uninstall_reasons'".13
- Category
- Maintainability
- Occurrences
- 13
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "$this->client->getSlug() . '_extra_uninstall_reasons'".
ERRORMaintainabilitywp function not compatible with requires wpFunction "has_custom_logo()" requires WordPress 4.5.0, but your plugin minimum supported version is WordPress 4.4.0.12
- Category
- Maintainability
- Occurrences
- 12
- Severity
- error
Sample message
Function "has_custom_logo()" requires WordPress 4.5.0, but your plugin minimum supported version is WordPress 4.4.0.
WARNINGMaintainabilityNon-prefixed functionFunctions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "calan_upload_filter_is_writable".9
- Category
- Maintainability
- Occurrences
- 9
- Severity
- warning
Sample message
Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "calan_upload_filter_is_writable".
ERRORMaintainabilityfile system operations fcloseFile operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fclose().9
- Category
- Maintainability
- Occurrences
- 9
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fclose().
ERRORMaintainabilityfile system operations fopenFile operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fopen().7
- Category
- Maintainability
- Occurrences
- 7
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fopen().
ERRORMaintainabilityfile system operations mkdirFile operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: mkdir().7
- Category
- Maintainability
- Occurrences
- 7
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: mkdir().
ERRORMaintainabilityfile system operations fwriteFile operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fwrite().6
- Category
- Maintainability
- Occurrences
- 6
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fwrite().
ERRORMaintainabilityfile system operations is writableFile operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: is_writable().6
- Category
- Maintainability
- Occurrences
- 6
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: is_writable().
Show 14 moreShow less
WARNINGMaintainabilityprevent path disclosure error reporting4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- warning
Sample message
error_reporting() can lead to full path disclosure.
WARNINGSecurityNonce verification recommended4
- Category
- Security
- Occurrences
- 4
- Severity
- warning
Sample message
Processing form data without nonce verification.
ERRORMaintainabilityfile system operations touch4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: touch().
WARNINGSecurityInput is not sanitized3
- Category
- Security
- Occurrences
- 3
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_FILES['file']['tmp_name']
WARNINGSecurityInput is not validated3
- Category
- Security
- Occurrences
- 3
- Severity
- warning
Sample message
Detected usage of a possibly undefined superglobal array index: $_FILES['file']['size']. Check that the array index exists before using it.
ERRORMaintainabilityNot Allowed2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
Use of heredoc syntax (<<<) is not allowed; use standard strings or inline HTML instead
WARNINGMaintainabilityDirect Query2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGMaintainabilityNo Caching2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
WARNINGSecuritywp redirect wp redirect2
- Category
- Security
- Occurrences
- 2
- Severity
- warning
Sample message
wp_redirect() found. Using wp_safe_redirect(), along with the "allowed_redirect_hosts" filter if needed, can help avoid any chances of malicious redirects within code. It is also important to remember to call exit() after a redirect so that no other unwanted code is executed.
ERRORMaintainabilityfile system operations is writeable1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: is_writeable().
WARNINGMaintainabilitymismatched plugin name1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Plugin name "PDF Invoices & Packing Slips for WooCommerce – Challan" is different from the name declared in plugin header "Challan - PDF Invoice & Packing Slip for WooCommerce".
ERRORMaintainabilityMissing direct file access protection1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
ERRORRepo Compliancereadme mismatched header requires1
- Category
- Repo Compliance
- Occurrences
- 1
- Severity
- error
Sample message
Mismatched Requires at least: 3.6 != 4.4. "Requires at least" needs to be exactly the same with that in your main plugin file's header.
WARNINGRepo Compliancereadme parser warnings trimmed short description1
- Category
- Repo Compliance
- Occurrences
- 1
- Severity
- warning
Sample message
The "Short Description" section is too long and was truncated. A maximum of 150 characters is supported.
External Connections
Not analyzed yet.
Score History
First score snapshot
v3.7.85
49
Latest
- Findings
- 207
- Errors
- 56
- Warnings
- 151
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 49 | 207 | 56 | 151 | v3.7.85 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueRelated
Relationship links
Author
Category
Issue
Non-prefixed global variable93 findingsRequest data is not unslashed14 findingsDynamic hook name13 findingswp function not compatible with requires wp12 findingsNon-prefixed function9 findingsfile system operations fclose9 findingsfile system operations fopen7 findingsfile system operations mkdir7 findings
Related
WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes & Shipping Labels94 scorePrint Invoice & Delivery Notes for WooCommerce95 scoreSliced Invoices – WordPress Invoice Plugin26 scoremPDF add-on for RTL and Unicode Support99 scorePDF Builder for WooCommerce. Create invoices,packing slips and more25 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce21 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder39 scoreClassic Editor63 scoreLiteSpeed Cache35 scoreAkismet Anti-spam: Spam Protection35 scoreAll-in-One WP Migration and Backup34 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 score
Author
Category
Issue
Non-prefixed global variable93 findingsRequest data is not unslashed14 findingsDynamic hook name13 findingswp function not compatible with requires wp12 findingsNon-prefixed function9 findingsfile system operations fclose9 findingsfile system operations fopen7 findingsfile system operations mkdir7 findings
Related
WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes & Shipping Labels94 scorePrint Invoice & Delivery Notes for WooCommerce95 scoreSliced Invoices – WordPress Invoice Plugin26 scoremPDF add-on for RTL and Unicode Support99 scorePDF Builder for WooCommerce. Create invoices,packing slips and more25 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce21 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder39 scoreClassic Editor63 scoreLiteSpeed Cache35 scoreAkismet Anti-spam: Spam Protection35 scoreAll-in-One WP Migration and Backup34 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 score
Related Plugins
mPDF add-on for RTL and Unicode Support
4k+ active installs
99
Print Invoice & Delivery Notes for WooCommerce
30k+ active installs
95
94
Sliced Invoices – WordPress Invoice Plugin
5k+ active installs
26
PDF Builder for WooCommerce. Create invoices,packing slips and more
2k+ active installs
25
PDF Invoice for WooCommerce + Drag and Drop Template Builder
400 active installs
25