Efí Bank

Receba pagamentos por Boleto bancário, Pix, Cartão de Crédito, Open Finance, Assinaturas via Boleto e/ou Cartão de Crédito em sua loja WooCommerce com …

v3.2.0Efí BankUpdated Added 400 installs72% rating
17
Score
886
Errors
553
Warnings
+0
Change

Category Scores

Security0
Repo46
Performance100
Maintainability0

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

1,439 findings

Security

697

7 issue groups

Maintainability

386

15 issue groups

I18n

295

2 issue groups

Supply Chain

5

1 issue group

ERRORSecurityException output is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"$name not found on class"'.280
Category
Security
Occurrences
280
Severity
error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"$name not found on class"'.

ERRORI18nNon Singular String Literal DomainThe $domain parameter must be a single text string literal. Found: Gerencianet_I18n::getTextDomain()279
Category
I18n
Occurrences
279
Severity
error

Sample message

The $domain parameter must be a single text string literal. Found: Gerencianet_I18n::getTextDomain()

WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$__composer_autoload_files".168
Category
Maintainability
Occurrences
168
Severity
warning

Sample message

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$__composer_autoload_files".

ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"Since $package $version: "'.158
Category
Security
Occurrences
158
Severity
error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"Since $package $version: "'.

WARNINGSecurityMissing nonce verificationProcessing form data without nonce verification.80
Category
Security
Occurrences
80
Severity
warning

Sample message

Processing form data without nonce verification.

WARNINGSecurityRequest data is not unslashed$_GET['erro'] not unslashed before sanitization. Use wp_unslash() or similar76
Category
Security
Occurrences
76
Severity
warning

Sample message

$_GET['erro'] not unslashed before sanitization. Use wp_unslash() or similar

ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;54
Category
Maintainability
Occurrences
54
Severity
error

Sample message

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

WARNINGMaintainabilityNon-prefixed functionFunctions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "arraycopy".53
Category
Maintainability
Occurrences
53
Severity
warning

Sample message

Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "arraycopy".

WARNINGSecurityInput is not validatedDetected usage of a possibly undefined superglobal array index: $_FILES['woocommerce_wc_gerencianet_assinaturas_pix_gn_certificate_file']['error']. Check that the array index exists before using it.42
Category
Security
Occurrences
42
Severity
warning

Sample message

Detected usage of a possibly undefined superglobal array index: $_FILES['woocommerce_wc_gerencianet_assinaturas_pix_gn_certificate_file']['error']. Check that the array index exists before using it.

WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.33
Category
Security
Occurrences
33
Severity
warning

Sample message

Processing form data without nonce verification.

Show 15 more
WARNINGSecurityInput is not sanitized28
Category
Security
Occurrences
28
Severity
warning

Sample message

Detected usage of a non-sanitized input variable: $_FILES['woocommerce_wc_gerencianet_assinaturas_pix_gn_certificate_file']['name']

ERRORMaintainabilityNon Enqueued Script23
Category
Maintainability
Occurrences
23
Severity
error

Sample message

Scripts must be registered/enqueued via wp_enqueue_script()

ERRORI18nText Domain Mismatch16
Category
I18n
Occurrences
16
Severity
error

Sample message

Mismatched text domain. Expected 'woo-gerencianet-official' but got 'text-domain'.

ERRORMaintainabilitydate date14
Category
Maintainability
Occurrences
14
Severity
error

Sample message

date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.

WARNINGMaintainabilityerror log trigger error14
Category
Maintainability
Occurrences
14
Severity
warning

Sample message

trigger_error() found. Debug code should not normally be used in production.

ERRORMaintainabilityrand mt rand9
Category
Maintainability
Occurrences
9
Severity
error

Sample message

mt_rand() is discouraged. Use the far less predictable wp_rand() instead.

WARNINGMaintainabilityerror log set error handler7
Category
Maintainability
Occurrences
7
Severity
warning

Sample message

set_error_handler() found. Debug code should not normally be used in production.

ERRORMaintainabilityfile system operations fwrite7
Category
Maintainability
Occurrences
7
Severity
error

Sample message

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fwrite().

WARNINGMaintainabilityMissing Version7
Category
Maintainability
Occurrences
7
Severity
warning

Sample message

Resource version not set in call to wp_enqueue_script(). This means new versions of the script may not always be loaded due to browser caching.

ERRORMaintainabilityNon Enqueued Stylesheet7
Category
Maintainability
Occurrences
7
Severity
error

Sample message

Stylesheets must be registered/enqueued via wp_enqueue_style()

ERRORMaintainabilityOffloaded Content6
Category
Maintainability
Occurrences
6
Severity
error

Sample message

Offloading images, js, css, and other scripts to your servers or any remote service is disallowed.

WARNINGMaintainabilityslow db query meta key6
Category
Maintainability
Occurrences
6
Severity
warning

Sample message

Detected usage of meta_key, possible slow query.

WARNINGMaintainabilityslow db query meta value6
Category
Maintainability
Occurrences
6
Severity
warning

Sample message

Detected usage of meta_value, possible slow query.

WARNINGMaintainabilityNon-prefixed namespace5
Category
Maintainability
Occurrences
5
Severity
warning

Sample message

Namespaces declared by a theme/plugin should start with the theme/plugin prefix. Found: "GN_Includes".

ERRORSupply ChainHidden files included5
Category
Supply Chain
Occurrences
5
Severity
error

Sample message

Hidden files are not permitted.

External Connections

Potential connections found in static code analysis.

53 domains

Outbound calls

212

External assets

8

Incoming endpoints

12

Notable Domains

apache.org41 · outbound
php.net31 · outbound
datatracker.ietf.org26 · outbound
tools.ietf.org16 · outbound
bugs.php.net4 · outbound
curl.haxx.se4 · outbound

Platform / Reference Domains

github.com16 · platform/reference
w3.org4 · platform/reference
opensource.org2 · platform/reference
gnu.org1 · platform/reference
wordpress.org1 · platform/reference

External Asset Domains

gerencianet.com.br8 · asset + outbound
youtube.com1 · asset

Incoming Endpoints

wp_ajax_nopriv_check_pix_paymentpublic

wp_ajax

wp_ajax_nopriv_gn_check_order_statuspublic

wp_ajax

wp_ajax_nopriv_woocommerce_gerencianet_cancel_subscriptionpublic

wp_ajax

wp_ajax_nopriv_woocommerce_gerencianet_retry_pix_subscription_chargepublic

wp_ajax

Admin AJAX endpoints8
admin_post_gn_download_logsauthenticated

admin_post

admin_post_register_webhookauthenticated

admin_post

wp_ajax_check_pix_paymentauthenticated

wp_ajax

wp_ajax_gn_check_order_statusauthenticated

wp_ajax

wp_ajax_woocommerce_gerencianet_assinatura_retryauthenticated

wp_ajax

wp_ajax_woocommerce_gerencianet_cancel_subscriptionauthenticated

wp_ajax

wp_ajax_woocommerce_gerencianet_card_retryauthenticated

wp_ajax

wp_ajax_woocommerce_gerencianet_retry_pix_subscription_chargeauthenticated

wp_ajax

Score History

First score snapshot

v3.2.0

17

Latest

Findings
1,439
Errors
886
Warnings
553
Check
2.0.0

Relationship Map

Author, categories, issues, domains, and nearby plugins.

37 nodes

Related Plugins