Sola Payment Gateway for WooCommerce

Accept payments with the Sola gateway.

v1.2.88msteinUpdated Added 700 installs100% rating
32
Score
112
Errors
115
Warnings
+0
Change

Category Scores

Security0
Repo68
Performance100
Maintainability61

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

227 findings

Security

121

8 issue groups

I18n

63

4 issue groups

Maintainability

36

11 issue groups

Supply Chain

1

1 issue group

ERRORI18nMissing Translators CommentA function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.42
Category
I18n
Occurrences
42
Severity
error

Sample message

A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.

WARNINGSecurityMissing nonce verificationProcessing form data without nonce verification.25
Category
Security
Occurrences
25
Severity
warning

Sample message

Processing form data without nonce verification.

WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_FILES[$field_key]21
Category
Security
Occurrences
21
Severity
warning

Sample message

Detected usage of a non-sanitized input variable: $_FILES[$field_key]

WARNINGSecurityRequest data is not unslashed$_GET['key'] not unslashed before sanitization. Use wp_unslash() or similar21
Category
Security
Occurrences
21
Severity
warning

Sample message

$_GET['key'] not unslashed before sanitization. Use wp_unslash() or similar

ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$cvc_field'.19
Category
Security
Occurrences
19
Severity
error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$cvc_field'.

ERRORI18nText Domain MismatchMismatched text domain. Expected 'woo-cardknox-gateway' but got 'woocommerce'.15
Category
I18n
Occurrences
15
Severity
error

Sample message

Mismatched text domain. Expected 'woo-cardknox-gateway' but got 'woocommerce'.

WARNINGSecurityInput is not validatedDetected usage of a possibly undefined superglobal array index: $_POST['billingContact']. Check that the array index exists before using it.14
Category
Security
Occurrences
14
Severity
warning

Sample message

Detected usage of a possibly undefined superglobal array index: $_POST['billingContact']. Check that the array index exists before using it.

WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.12
Category
Security
Occurrences
12
Severity
warning

Sample message

Processing form data without nonce verification.

WARNINGMaintainabilityerror log print rprint_r() found. Debug code should not normally be used in production.10
Category
Maintainability
Occurrences
10
Severity
warning

Sample message

print_r() found. Debug code should not normally be used in production.

WARNINGMaintainabilityerror log error logerror_log() found. Debug code should not normally be used in production.6
Category
Maintainability
Occurrences
6
Severity
warning

Sample message

error_log() found. Debug code should not normally be used in production.

Show 15 more
ERRORSecurityUnsafe printing function6
Category
Security
Occurrences
6
Severity
error

Sample message

All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.

ERRORMaintainabilitystrip tags strip tags6
Category
Maintainability
Occurrences
6
Severity
error

Sample message

strip_tags() is discouraged. Use the more comprehensive wp_strip_all_tags() instead.

ERRORI18nNon Singular String Literal Text4
Category
I18n
Occurrences
4
Severity
error

Sample message

The $text parameter must be a single text string literal. Found: $buttonPrefix . ' Style'

ERRORSecurityException output is not escaped3
Category
Security
Occurrences
3
Severity
error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"Could not find $_tests_dir/includes/functions.php, have you run bin/install-wp-tests.sh ?"'.

ERRORMaintainabilityapplication detected3
Category
Maintainability
Occurrences
3
Severity
error

Sample message

Application files are not permitted.

ERRORMaintainabilitywp function not compatible with requires wp3
Category
Maintainability
Occurrences
3
Severity
error

Sample message

Function "has_block()" requires WordPress 5.0.0, but your plugin minimum supported version is WordPress 4.4.0.

WARNINGMaintainabilityMissing Version2
Category
Maintainability
Occurrences
2
Severity
warning

Sample message

Resource version not set in call to wp_enqueue_script(). This means new versions of the script may not always be loaded due to browser caching.

ERRORI18nUnordered Placeholders Text2
Category
I18n
Occurrences
2
Severity
error

Sample message

Multiple placeholders in translatable strings should be ordered. Expected "%1$s, %2$s", but got "%s, %s" in '%s - Order %s'.

WARNINGMaintainabilitytrademarked term2
Category
Maintainability
Occurrences
2
Severity
warning

Sample message

The plugin name includes a restricted term. Your chosen plugin name - "WooCommerce Cardknox Gateway" - contains the restricted term "woocommerce" which cannot be used within in your plugin name, unless your plugin name contains one of the allowed patterns: "for woocommerce", "with woocommerce", "using woocommerce", or "and woocommerce". The term must still not appear anywhere else in your name.

ERRORMaintainabilityForbidden PHP function found1
Category
Maintainability
Occurrences
1
Severity
error

Sample message

The use of function move_uploaded_file() is forbidden

ERRORMaintainabilityfile system operations chmod1
Category
Maintainability
Occurrences
1
Severity
error

Sample message

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: chmod().

WARNINGMaintainabilityNot In Footer1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

In footer ($in_footer) is not set explicitly wp_enqueue_script; It is recommended to load scripts in the footer. Please set this value to `true` to load it in the footer, or explicitly `false` if it should be loaded in the header.

ERRORSupply ChainHidden files included1
Category
Supply Chain
Occurrences
1
Severity
error

Sample message

Hidden files are not permitted.

ERRORRepo Complianceinvalid license1
Category
Repo Compliance
Occurrences
1
Severity
error

Sample message

Your plugin has an invalid license declared. Please update your readme with a valid SPDX license identifier.

WARNINGMaintainabilitymismatched plugin name1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

Plugin name "Sola Payment Gateway for WooCommerce" is different from the name declared in plugin header "WooCommerce Cardknox Gateway".

External Connections

Potential connections found in static code analysis.

11 domains

Outbound calls

43

External assets

10

Incoming endpoints

8

Notable Domains

api.cardknox.com4 · outbound
cardknox.com2 · outbound
en.wikipedia.org2 · outbound
x1.cardknox.com2 · outbound

Platform / Reference Domains

gnu.org10 · platform/reference
w3.org2 · platform/reference

External Asset Domains

cdn.cardknox.com21 · asset + outbound

Incoming Endpoints

wp_ajax_nopriv_applepay_cardknox_create_orderpublic

wp_ajax

wp_ajax_nopriv_cardknox_create_orderpublic

wp_ajax

wp_ajax_nopriv_get_datapublic

wp_ajax

wp_ajax_nopriv_update_cart_totalpublic

wp_ajax

Admin AJAX endpoints4
wp_ajax_applepay_cardknox_create_orderauthenticated

wp_ajax

wp_ajax_cardknox_create_orderauthenticated

wp_ajax

wp_ajax_get_dataauthenticated

wp_ajax

wp_ajax_update_cart_totalauthenticated

wp_ajax

Score History

First score snapshot

v1.2.88

32

Latest

Findings
227
Errors
112
Warnings
115
Check
2.0.0

Relationship Map

Author, categories, issues, domains, and nearby plugins.

37 nodes

Related Plugins