Receba pagamentos por Boleto bancário, Pix, Cartão de Crédito, Open Finance, Assinaturas via Boleto e/ou Cartão de Crédito em sua loja WooCommerce com …
17
Score
886
Errors
553
Warnings
+0
Change
Category Scores
Security0
Repo46
Performance100
Maintainability0
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Security
697
7 issue groups
Maintainability
386
15 issue groups
I18n
295
2 issue groups
Supply Chain
5
1 issue group
ERRORSecurityException output is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"$name not found on class"'.280
- Category
- Security
- Occurrences
- 280
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"$name not found on class"'.
ERRORI18nNon Singular String Literal DomainThe $domain parameter must be a single text string literal. Found: Gerencianet_I18n::getTextDomain()279
- Category
- I18n
- Occurrences
- 279
- Severity
- error
Sample message
The $domain parameter must be a single text string literal. Found: Gerencianet_I18n::getTextDomain()
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$__composer_autoload_files".168
- Category
- Maintainability
- Occurrences
- 168
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$__composer_autoload_files".
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"Since $package $version: "'.158
- Category
- Security
- Occurrences
- 158
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"Since $package $version: "'.
WARNINGSecurityMissing nonce verificationProcessing form data without nonce verification.80
- Category
- Security
- Occurrences
- 80
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGSecurityRequest data is not unslashed$_GET['erro'] not unslashed before sanitization. Use wp_unslash() or similar76
- Category
- Security
- Occurrences
- 76
- Severity
- warning
Sample message
$_GET['erro'] not unslashed before sanitization. Use wp_unslash() or similar
ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;54
- Category
- Maintainability
- Occurrences
- 54
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
WARNINGMaintainabilityNon-prefixed functionFunctions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "arraycopy".53
- Category
- Maintainability
- Occurrences
- 53
- Severity
- warning
Sample message
Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "arraycopy".
WARNINGSecurityInput is not validatedDetected usage of a possibly undefined superglobal array index: $_FILES['woocommerce_wc_gerencianet_assinaturas_pix_gn_certificate_file']['error']. Check that the array index exists before using it.42
- Category
- Security
- Occurrences
- 42
- Severity
- warning
Sample message
Detected usage of a possibly undefined superglobal array index: $_FILES['woocommerce_wc_gerencianet_assinaturas_pix_gn_certificate_file']['error']. Check that the array index exists before using it.
WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.33
- Category
- Security
- Occurrences
- 33
- Severity
- warning
Sample message
Processing form data without nonce verification.
Show 15 moreShow less
WARNINGSecurityInput is not sanitized28
- Category
- Security
- Occurrences
- 28
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_FILES['woocommerce_wc_gerencianet_assinaturas_pix_gn_certificate_file']['name']
ERRORMaintainabilityNon Enqueued Script23
- Category
- Maintainability
- Occurrences
- 23
- Severity
- error
Sample message
Scripts must be registered/enqueued via wp_enqueue_script()
ERRORI18nText Domain Mismatch16
- Category
- I18n
- Occurrences
- 16
- Severity
- error
Sample message
Mismatched text domain. Expected 'woo-gerencianet-official' but got 'text-domain'.
ERRORMaintainabilitydate date14
- Category
- Maintainability
- Occurrences
- 14
- Severity
- error
Sample message
date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.
WARNINGMaintainabilityerror log trigger error14
- Category
- Maintainability
- Occurrences
- 14
- Severity
- warning
Sample message
trigger_error() found. Debug code should not normally be used in production.
ERRORMaintainabilityrand mt rand9
- Category
- Maintainability
- Occurrences
- 9
- Severity
- error
Sample message
mt_rand() is discouraged. Use the far less predictable wp_rand() instead.
WARNINGMaintainabilityerror log set error handler7
- Category
- Maintainability
- Occurrences
- 7
- Severity
- warning
Sample message
set_error_handler() found. Debug code should not normally be used in production.
ERRORMaintainabilityfile system operations fwrite7
- Category
- Maintainability
- Occurrences
- 7
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fwrite().
WARNINGMaintainabilityMissing Version7
- Category
- Maintainability
- Occurrences
- 7
- Severity
- warning
Sample message
Resource version not set in call to wp_enqueue_script(). This means new versions of the script may not always be loaded due to browser caching.
ERRORMaintainabilityNon Enqueued Stylesheet7
- Category
- Maintainability
- Occurrences
- 7
- Severity
- error
Sample message
Stylesheets must be registered/enqueued via wp_enqueue_style()
ERRORMaintainabilityOffloaded Content6
- Category
- Maintainability
- Occurrences
- 6
- Severity
- error
Sample message
Offloading images, js, css, and other scripts to your servers or any remote service is disallowed.
WARNINGMaintainabilityslow db query meta key6
- Category
- Maintainability
- Occurrences
- 6
- Severity
- warning
Sample message
Detected usage of meta_key, possible slow query.
WARNINGMaintainabilityslow db query meta value6
- Category
- Maintainability
- Occurrences
- 6
- Severity
- warning
Sample message
Detected usage of meta_value, possible slow query.
WARNINGMaintainabilityNon-prefixed namespace5
- Category
- Maintainability
- Occurrences
- 5
- Severity
- warning
Sample message
Namespaces declared by a theme/plugin should start with the theme/plugin prefix. Found: "GN_Includes".
ERRORSupply ChainHidden files included5
- Category
- Supply Chain
- Occurrences
- 5
- Severity
- error
Sample message
Hidden files are not permitted.
External Connections
Potential connections found in static code analysis.
Outbound calls
212
External assets
8
Incoming endpoints
12
Notable Domains
apache.org41 · outbound
php.net31 · outbound
datatracker.ietf.org26 · outbound
tools.ietf.org16 · outbound
bugs.php.net4 · outbound
curl.haxx.se4 · outbound
Platform / Reference Domains
github.com16 · platform/reference
w3.org4 · platform/reference
opensource.org2 · platform/reference
gnu.org1 · platform/reference
wordpress.org1 · platform/reference
External Asset Domains
gerencianet.com.br8 · asset + outbound
cdn.datatables.net3 · asset
cdn.jsdelivr.net2 · asset
cdnjs.cloudflare.com1 · asset
youtube.com1 · asset
Incoming Endpoints
wp_ajax_nopriv_check_pix_paymentpublic
wp_ajax
wp_ajax_nopriv_gn_check_order_statuspublic
wp_ajax
wp_ajax_nopriv_woocommerce_gerencianet_cancel_subscriptionpublic
wp_ajax
wp_ajax_nopriv_woocommerce_gerencianet_retry_pix_subscription_chargepublic
wp_ajax
Admin AJAX endpoints8
admin_post_gn_download_logsauthenticated
admin_post
admin_post_register_webhookauthenticated
admin_post
wp_ajax_check_pix_paymentauthenticated
wp_ajax
wp_ajax_gn_check_order_statusauthenticated
wp_ajax
wp_ajax_woocommerce_gerencianet_assinatura_retryauthenticated
wp_ajax
wp_ajax_woocommerce_gerencianet_cancel_subscriptionauthenticated
wp_ajax
wp_ajax_woocommerce_gerencianet_card_retryauthenticated
wp_ajax
wp_ajax_woocommerce_gerencianet_retry_pix_subscription_chargeauthenticated
wp_ajax
Score History
First score snapshot
v3.2.0
17
Latest
- Findings
- 1,439
- Errors
- 886
- Warnings
- 553
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 17 | 1,439 | 886 | 553 | v3.2.0 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Plugin
Author
Category
Issue
Exception output is not escaped280 findingsNon Singular String Literal Domain279 findingsNon-prefixed global variable168 findingsOutput is not escaped158 findingsMissing nonce verification80 findingsRequest data is not unslashed76 findingsMissing direct file access protection54 findingsNon-prefixed function53 findings
Domain
Related
Yoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce21 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreWP Mail SMTP by WPForms – The Most Popular SMTP and Email Log Plugin30 scoreJetpack – WP Security, Backup, Speed, & Growth22 scoreAdvanced Custom Fields (ACF®)23 scoreLimit Login Attempts Security – Login Security, 2FA, Firewall, Brute Force Prevention25 scoreManageWP Worker23 scoreBreadcrumb NavXT36 scoreThe Events Calendar23 scoreWP-PageNavi36 scoreWooPayments: Integrated WooCommerce Payments31 scoreWooCommerce Tax (formerly WooCommerce Shipping & Tax)30 score
Plugin
Author
Category
Issue
Exception output is not escaped280 findingsNon Singular String Literal Domain279 findingsNon-prefixed global variable168 findingsOutput is not escaped158 findingsMissing nonce verification80 findingsRequest data is not unslashed76 findingsMissing direct file access protection54 findingsNon-prefixed function53 findings
Domain
Related
Yoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce21 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreWP Mail SMTP by WPForms – The Most Popular SMTP and Email Log Plugin30 scoreJetpack – WP Security, Backup, Speed, & Growth22 scoreAdvanced Custom Fields (ACF®)23 scoreLimit Login Attempts Security – Login Security, 2FA, Firewall, Brute Force Prevention25 scoreManageWP Worker23 scoreBreadcrumb NavXT36 scoreThe Events Calendar23 scoreWP-PageNavi36 scoreWooPayments: Integrated WooCommerce Payments31 scoreWooCommerce Tax (formerly WooCommerce Shipping & Tax)30 score
Related Plugins
Instant Approval Payment Gateway with Instant Payouts
2k+ active installs
100
Crypto Payment Gateway with Instant Payouts
1k+ active installs
100
Pay With MetaMask For WooCommerce – Cryptocurrency Payment Gateway
500 active installs
99
Cash On Pickup for WooCommerce
8k+ active installs
98
BjornTech Swish for WooCommerce
2k+ active installs
98
BT iPay Payments
900 active installs
98