MultiStep Checkout for WooCommerce

MultiStep Checkout for WooCommerce Split up your WooCommerce Checkout form easily into simpler steps.

v2.3.4ThemeHighUpdated Added 4k+ installs96% rating
60
Score
46
Errors
57
Warnings
+0
Change

Category Scores

Security35
Repo94
Performance100
Maintainability82

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

103 findings

I18n

46

7 issue groups

Maintainability

29

5 issue groups

Security

27

5 issue groups

Repo Compliance

1

1 issue group

ERRORI18nNon Singular String Literal TextThe $text parameter must be a single text string literal. Found: $back_to_cart_button_text24
Category
I18n
Occurrences
24
Severity
error

Sample message

The $text parameter must be a single text string literal. Found: $back_to_cart_button_text

WARNINGMaintainabilityNon Prefixed Variable FoundGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$back_to_cart_button".21
Category
Maintainability
Occurrences
21
Severity
warning

Sample message

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$back_to_cart_button".

ERRORI18nText Domain MismatchMismatched text domain. Expected 'woo-multistep-checkout' but got "woocommerce".17
Category
I18n
Occurrences
17
Severity
error

Sample message

Mismatched text domain. Expected 'woo-multistep-checkout' but got "woocommerce".

WARNINGSecurityInput Not SanitizedDetected usage of a non-sanitized input variable: $_GET['page']9
Category
Security
Occurrences
9
Severity
warning

Sample message

Detected usage of a non-sanitized input variable: $_GET['page']

WARNINGSecurityMissing Unslash$_GET['page'] not unslashed before sanitization. Use wp_unslash() or similar8
Category
Security
Occurrences
8
Severity
warning

Sample message

$_GET['page'] not unslashed before sanitization. Use wp_unslash() or similar

WARNINGSecurityRecommendedProcessing form data without nonce verification.7
Category
Security
Occurrences
7
Severity
warning

Sample message

Processing form data without nonce verification.

WARNINGMaintainabilityNon Prefixed Hookname FoundHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "thwcfe_remove_disabled_fields_and_sections".5
Category
Maintainability
Occurrences
5
Severity
warning

Sample message

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "thwcfe_remove_disabled_fields_and_sections".

WARNINGSecurityMissingProcessing form data without nonce verification.2
Category
Security
Occurrences
2
Severity
warning

Sample message

Processing form data without nonce verification.

WARNINGI18nload plugin textdomain Foundload_plugin_textdomain() has been discouraged since WordPress version 4.6. When your plugin is hosted on WordPress.org, you no longer need to manually include this function call for translations under your plugin slug. WordPress will automatically load the translations for you as needed.1
Category
I18n
Occurrences
1
Severity
warning

Sample message

load_plugin_textdomain() has been discouraged since WordPress version 4.6. When your plugin is hosted on WordPress.org, you no longer need to manually include this function call for translations under your plugin slug. WordPress will automatically load the translations for you as needed.

WARNINGMaintainabilityNon Prefixed Function FoundFunctions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "is_woocommerce_active".1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "is_woocommerce_active".

Show 8 more
WARNINGSecurityInput Not Validated1
Category
Security
Occurrences
1
Severity
warning

Sample message

Detected usage of a possibly undefined superglobal array index: $_SERVER['SERVER_SOFTWARE']. Check that the array index exists before using it.

ERRORI18nLoad plugin textdomain Param2Found1
Category
I18n
Occurrences
1
Severity
error

Sample message

The parameter "FALSE" at position #2 of load_plugin_textdomain() has been deprecated since WordPress version 2.7.0. Use "" instead.

WARNINGMaintainabilityMissing Version1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

Resource version not set in call to wp_enqueue_style(). This means new versions of the style may not always be loaded due to browser caching.

ERRORI18nMissing Arg Domain1
Category
I18n
Occurrences
1
Severity
error

Sample message

Missing $domain parameter in function call to __().

ERRORI18nMissing Translators Comment1
Category
I18n
Occurrences
1
Severity
error

Sample message

A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.

ERRORI18nNo Empty Strings1
Category
I18n
Occurrences
1
Severity
error

Sample message

The $text text string should have translatable content. Found: '%s'

ERRORRepo Complianceplugin header no license1
Category
Repo Compliance
Occurrences
1
Severity
error

Sample message

Missing "License" in Plugin Header. Please update your Plugin Header with a valid GPLv2 (or later) compatible license.

WARNINGMaintainabilitytrademarked term1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

The plugin slug includes a restricted term. Your plugin slug - "woo-multistep-checkout" - contains the restricted term "woo" and cannot be used to begin your plugin slug. We disallow the use of certain terms in ways that are abused, or potentially infringe on and/or are misleading with regards to trademarks. You may use the term "woo" elsewhere in your plugin slug, such as "... for woo".

Score History

First score snapshot

v2.3.4

60

Latest

Findings
103
Errors
46
Warnings
57
Check
2.0.0

Related Plugins