Conditional Fees for WooCommerce Lite

Conditional Fees for WooCommerce allows businesses to streamline their pricing strategies. They can apply correct tax rate & abide by regional tax …

v1.7.1Saad IqbalUpdated 1 year agoAdded 10 years ago500 installs86% rating

additional fee cart fee custom fee extra fee woocommerce

Score

592

Errors

1,298

Warnings

Change

Category Scores

Security0

Repo91

Performance100

Maintainability0

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

1,890 findings

Maintainability

1,330

17 issue groups

Security

523

4 issue groups

I18n

2 issue groups

Repo Compliance

2 issue groups

WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$account_addon_ids".1,081

Category: Maintainability
Occurrences: 1,081
Severity: warning

Sample message

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$account_addon_ids".

WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedVariableFound

ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '" <a href='{$skip_url}' class='button button-small button-secondary'>{$use_plugin_anonymously_text}</a>"'.513

Category: Security
Occurrences: 513
Severity: error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '" <a href='{$skip_url}' class='button button-small button-secondary'>{$use_plugin_anonymously_text}</a>"'.

WordPress.Security.EscapeOutput.OutputNotEscaped Reference

WARNINGMaintainabilityNon-prefixed functionFunctions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "_fs_text".100

Category: Maintainability
Occurrences: 100
Severity: warning

Sample message

Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "_fs_text".

WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedFunctionFound

WARNINGMaintainabilityNon-prefixed classClasses declared by a theme/plugin should start with the theme/plugin prefix. Found: "CFFW_Front".57

Category: Maintainability
Occurrences: 57
Severity: warning

Sample message

Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "CFFW_Front".

WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedClassFound

ERRORI18nText Domain MismatchMismatched text domain. Expected 'woo-add-custom-fee' but got 'conditional-fees-for-woocommerce-lite'.33

Category: I18n
Occurrences: 33
Severity: error

Sample message

Mismatched text domain. Expected 'woo-add-custom-fee' but got 'conditional-fees-for-woocommerce-lite'.

WordPress.WP.I18n.TextDomainMismatch Reference

WARNINGMaintainabilityNon-prefixed constantGlobal constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "FS_API__ADDRESS".30

Category: Maintainability
Occurrences: 30
Severity: warning

Sample message

Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "FS_API__ADDRESS".

WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedConstantFound

ERRORMaintainabilitywp function not compatible with requires wpFunction "get_network()" requires WordPress 4.6.0, but your plugin minimum supported version is WordPress 4.0.0.30

Category: Maintainability
Occurrences: 30
Severity: error

Sample message

Function "get_network()" requires WordPress 4.6.0, but your plugin minimum supported version is WordPress 4.0.0.

wp_function_not_compatible_with_requires_wp Reference

ERRORSecurityException output is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$message'.7

Category: Security
Occurrences: 7
Severity: error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$message'.

WordPress.Security.EscapeOutput.ExceptionNotEscaped Reference

WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.6

Category: Maintainability
Occurrences: 6
Severity: warning

Sample message

Use of a direct database call is discouraged.

WordPress.DB.DirectDatabaseQuery.DirectQuery

WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().5

Category: Maintainability
Occurrences: 5
Severity: warning

Sample message

Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().

WordPress.DB.DirectDatabaseQuery.NoCaching

Show 15 more

WARNINGMaintainabilityNon-prefixed hook name5

Category: Maintainability
Occurrences: 5
Severity: warning

Sample message

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "active_plugins".

WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedHooknameFound

WARNINGMaintainabilityMissing Version3

Category: Maintainability
Occurrences: 3
Severity: warning

Sample message

Resource version not set in call to wp_enqueue_script(). This means new versions of the script may not always be loaded due to browser caching.

WordPress.WP.EnqueuedResourceParameters.MissingVersion

ERRORMaintainabilityMissing direct file access protection3

Category: Maintainability
Occurrences: 3
Severity: error

Sample message

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

missing_direct_file_access_protection Reference

ERRORSecurityDatabase parameter is not escaped2

Category: Security
Occurrences: 2
Severity: error

Sample message

Unescaped parameter $query used in $wpdb->get_results()\n$query assigned unsafely at line 608.

PluginCheck.Security.DirectDB.UnescapedDBParameter

WARNINGMaintainabilitySchema Change2

Category: Maintainability
Occurrences: 2
Severity: warning

Sample message

Attempting a database schema change is discouraged.

WordPress.DB.DirectDatabaseQuery.SchemaChange

ERRORMaintainabilityplugin updater detected2

Category: Maintainability
Occurrences: 2
Severity: error

Sample message

Plugin Updater detected. These are not permitted in WordPress.org hosted plugins. Detected: class FS_Plugin_Updater

plugin_updater_detected

WARNINGMaintainabilityupdate modification detected2

Category: Maintainability
Occurrences: 2
Severity: warning

Sample message

Plugin Updater detected. Detected code which may be altering WordPress update routines. Detected: _site_transient_update_plugins

update_modification_detected Reference

ERRORMaintainabilityPlugin Directory Write1

Category: Maintainability
Occurrences: 1
Severity: error

Sample message

Plugin folders are deleted when upgraded. Do not save data to the plugin folder using copy(). Detected usage of constant WP_PLUGIN_DIR. Use wp_upload_dir() to get the uploads directory path or save to the database instead.

PluginCheck.CodeAnalysis.WriteFile.PluginDirectoryWrite

WARNINGMaintainabilityDynamic hook name1

Category: Maintainability
Occurrences: 1
Severity: warning

Sample message

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "{$module_type}_update_check_locales".

WordPress.NamingConventions.PrefixAllGlobals.DynamicHooknameFound

WARNINGMaintainabilityNon-prefixed interface1

Category: Maintainability
Occurrences: 1
Severity: warning

Sample message

Interfaces declared by a theme/plugin should start with the theme/plugin prefix. Found: "FS_I_Garbage_Collector".

WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedInterfaceFound

WARNINGSecuritywp redirect wp redirect1

Category: Security
Occurrences: 1
Severity: warning

Sample message

wp_redirect() found. Using wp_safe_redirect(), along with the "allowed_redirect_hosts" filter if needed, can help avoid any chances of malicious redirects within code. It is also important to remember to call exit() after a redirect so that no other unwanted code is executed.

WordPress.Security.SafeRedirect.wp_redirect_wp_redirect Reference

WARNINGMaintainabilityNot In Footer1

Category: Maintainability
Occurrences: 1
Severity: warning

Sample message

In footer ($in_footer) is not set explicitly wp_enqueue_script; It is recommended to load scripts in the footer. Please set this value to `true` to load it in the footer, or explicitly `false` if it should be loaded in the header.

WordPress.WP.EnqueuedResourceParameters.NotInFooter

ERRORRepo Complianceoutdated tested upto header1

Category: Repo Compliance
Occurrences: 1
Severity: error

Sample message

Tested up to: 6.7 < 7.0. The "Tested up to" value in your plugin is not set to the current version of WordPress. This means your plugin will not show up in searches, as we require plugins to be compatible and documented as tested up to the most recent version of WordPress.

outdated_tested_upto_header Reference

WARNINGRepo Compliancereadme parser warnings trimmed short description1

Category: Repo Compliance
Occurrences: 1
Severity: warning

Sample message

The "Short Description" section is too long and was truncated. A maximum of 150 characters is supported.

readme_parser_warnings_trimmed_short_description

WARNINGI18ntextdomain mismatch1

Category: I18n
Occurrences: 1
Severity: warning

Sample message

The "Text Domain" header in the plugin file does not match the slug. Found "conditional-fees-for-woocommerce-lite", expected "woo-add-custom-fee".

textdomain_mismatch Reference

External Connections

Potential connections found in static code analysis.

28 domains

Outbound calls

177

External assets

Incoming endpoints

Notable Domains

freemius.com8 · outbound

php.net6 · outbound

wpexperts.io5 · outbound

benalman.com2 · outbound

checkout.freemius-local.com2 · outbound

checkout.freemius.com2 · outbound

Platform / Reference Domains

gnu.org111 · platform/reference

w3.org9 · platform/reference

wordpress.org8 · platform/reference

api.wordpress.org2 · platform/reference

github.com2 · platform/reference

make.wordpress.org2 · platform/reference

core.trac.wordpress.org1 · platform/reference

External Asset Domains

No external asset domains detected.

Incoming Endpoints

No public endpoints detected.

Admin AJAX endpoints3

admin_post_fs_clone_resolutionauthenticated

admin_post

wp_ajax_fs_dismiss_notice_action_{$ajax_action_suffix}authenticated

wp_ajax

wp_ajax_fs_toggle_debug_modeauthenticated

wp_ajax

Score History

First score snapshot

12 days ago

v1.7.1

Latest

Findings: 1,890
Errors: 592
Warnings: 1,298
Check: 2.0.0

Scan	Score	Findings	Errors	Warnings	Plugin	Check
12 days agoLatest	24	1,890	592	1,298	v1.7.1	2.0.0

Relationship Map

Author, categories, issues, domains, and nearby plugins.

37 nodes

Loading map

PluginAuthorCategoryIssueDomainRelated

Relationship links

Issue

Domain

Related Plugins

Custom Fee Woocommerce

400 active installs

TT Extra Fee Option for WooCommerce

1k+ active installs

Risk Free Cash On Delivery (COD) – WooCommerce

400 active installs

PiWeb Conditional cart fee / Extra charge rule for WooCommerce

2k+ active installs

YayPricing – WooCommerce Dynamic Pricing & Discounts

3k+ active installs

Extra Fees for WooCommerce

7k+ active installs