PostFinance Checkout
23
Score
995
Errors
221
Warnings
+0
Change
Category Scores
Security0
Repo85
Performance100
Maintainability0
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
I18n
663
1 issue group
Security
303
7 issue groups
Maintainability
231
17 issue groups
ERRORI18nText Domain MismatchMismatched text domain. Expected 'woo-postfinance-checkout' but got 'woo-postfinancecheckout'.663
- Category
- I18n
- Occurrences
- 663
- Severity
- error
Sample message
Mismatched text domain. Expected 'woo-postfinance-checkout' but got 'woo-postfinancecheckout'.
ERRORSecurityException output is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"Invalid value for enum '$class', must be one of: '$imploded'"'.144
- Category
- Security
- Occurrences
- 144
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"Invalid value for enum '$class', must be one of: '$imploded'"'.
WARNINGSecurityDatabase parameter is not escapedUnescaped parameter $old_table_name used in $wpdb->query()\n$old_table_name assigned unsafely at line 710.90
- Category
- Security
- Occurrences
- 90
- Severity
- warning
Sample message
Unescaped parameter $old_table_name used in $wpdb->query()\n$old_table_name assigned unsafely at line 710.
ERRORMaintainabilitycurl curl setoptUsing cURL functions is highly discouraged. Use wp_remote_get() instead.81
- Category
- Maintainability
- Occurrences
- 81
- Severity
- error
Sample message
Using cURL functions is highly discouraged. Use wp_remote_get() instead.
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$_wc_postfinancecheckout_renewal_cart_setup".33
- Category
- Maintainability
- Occurrences
- 33
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$_wc_postfinancecheckout_renewal_cart_setup".
WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.30
- Category
- Security
- Occurrences
- 30
- Severity
- warning
Sample message
Processing form data without nonce verification.
ERRORMaintainabilityparse url parse urlparse_url() is discouraged because of inconsistency in the output across PHP versions; use wp_parse_url() instead.27
- Category
- Maintainability
- Occurrences
- 27
- Severity
- error
Sample message
parse_url() is discouraged because of inconsistency in the output across PHP versions; use wp_parse_url() instead.
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$this'.18
- Category
- Security
- Occurrences
- 18
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$this'.
WARNINGMaintainabilityerror log error logerror_log() found. Debug code should not normally be used in production.12
- Category
- Maintainability
- Occurrences
- 12
- Severity
- warning
Sample message
error_log() found. Debug code should not normally be used in production.
WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.9
- Category
- Maintainability
- Occurrences
- 9
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
Show 15 moreShow less
WARNINGMaintainabilityNo Caching9
- Category
- Maintainability
- Occurrences
- 9
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
WARNINGSecurityInput is not sanitized9
- Category
- Security
- Occurrences
- 9
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_POST['changes'][$first_key]
WARNINGSecurityRequest data is not unslashed9
- Category
- Security
- Occurrences
- 9
- Severity
- warning
Sample message
$_POST['changes'][$first_key] not unslashed before sanitization. Use wp_unslash() or similar
ERRORMaintainabilitycurl curl error9
- Category
- Maintainability
- Occurrences
- 9
- Severity
- error
Sample message
Using cURL functions is highly discouraged. Use wp_remote_get() instead.
ERRORMaintainabilityfile system operations fclose9
- Category
- Maintainability
- Occurrences
- 9
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fclose().
WARNINGMaintainabilityerror log print r6
- Category
- Maintainability
- Occurrences
- 6
- Severity
- warning
Sample message
print_r() found. Debug code should not normally be used in production.
ERRORMaintainabilitycurl curl exec6
- Category
- Maintainability
- Occurrences
- 6
- Severity
- error
Sample message
Using cURL functions is highly discouraged. Use wp_remote_get() instead.
ERRORMaintainabilitycurl curl getinfo6
- Category
- Maintainability
- Occurrences
- 6
- Severity
- error
Sample message
Using cURL functions is highly discouraged. Use wp_remote_get() instead.
ERRORMaintainabilityfile system operations fopen6
- Category
- Maintainability
- Occurrences
- 6
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fopen().
ERRORMaintainabilityfile system operations fwrite6
- Category
- Maintainability
- Occurrences
- 6
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fwrite().
WARNINGMaintainabilityNon-prefixed class3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "WooCommerce_PostFinanceCheckout".
WARNINGMaintainabilityNon-prefixed global variable3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "$name".
WARNINGMaintainabilityerror log set error handler3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
set_error_handler() found. Debug code should not normally be used in production.
WARNINGSecurityInput is not validated3
- Category
- Security
- Occurrences
- 3
- Severity
- warning
Sample message
Detected usage of a possibly undefined superglobal array index: $_POST['changes'][$first_key]. Check that the array index exists before using it.
ERRORMaintainabilitycurl curl close3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- error
Sample message
Using cURL functions is highly discouraged. Use wp_remote_get() instead.
External Connections
Potential connections found in static code analysis.
Outbound calls
297
External assets
0
Incoming endpoints
3
Notable Domains
postfinance.ch176 · outbound
apache.org105 · outbound
checkout.postfinance.ch3 · outbound
plugin-documentation.postfinance-checkout.ch2 · outbound
woo.com2 · outbound
app-wallee.com1 · outbound
Platform / Reference Domains
github.com6 · platform/reference
developer.wordpress.org2 · platform/reference
External Asset Domains
No external asset domains detected.
Incoming Endpoints
No public endpoints detected.
Admin AJAX endpoints3
wp_ajax_woocommerce_postfinancecheckout_execute_completionauthenticated
wp_ajax
wp_ajax_woocommerce_postfinancecheckout_execute_voidauthenticated
wp_ajax
wp_ajax_woocommerce_postfinancecheckout_update_orderauthenticated
wp_ajax
Score History
2 score snapshots
v3.4.6
23
Latest
- Findings
- 1,216
- Errors
- 995
- Warnings
- 221
- Check
- 2.0.0
v3.4.5
23
Score
- Findings
- 1,193
- Errors
- 979
- Warnings
- 214
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 23 | 1,216 | 995 | 221 | v3.4.6 | 2.0.0 |
| 23 | 1,193 | 979 | 214 | v3.4.5 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Author
Issue
Domain
Related
WCBoost – Wishlist97 scorePrint Invoice & Delivery Notes for WooCommerce95 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreJetpack – WP Security, Backup, Speed, & Growth22 scoreWooCommerce21 scoreWP Mail SMTP by WPForms – The Most Popular SMTP and Email Log Plugin30 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreAdvanced Custom Fields (ACF®)23 scoreKlarna for WooCommerce54 scoreConversion Tracking for WooCommerce35 scoreEcwid by Lightspeed Ecommerce Shopping Cart23 scoreJapanized for WooCommerce35 score
Author
Issue
Domain
Related
WCBoost – Wishlist97 scorePrint Invoice & Delivery Notes for WooCommerce95 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreJetpack – WP Security, Backup, Speed, & Growth22 scoreWooCommerce21 scoreWP Mail SMTP by WPForms – The Most Popular SMTP and Email Log Plugin30 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreAdvanced Custom Fields (ACF®)23 scoreKlarna for WooCommerce54 scoreConversion Tracking for WooCommerce35 scoreEcwid by Lightspeed Ecommerce Shopping Cart23 scoreJapanized for WooCommerce35 score
Related Plugins
TWB Woocommerce Reviews
600 active installs
99
Stock Exporter for WooCommerce
1k+ active installs
98
HyperPay Payments
600 active installs
98
WCBoost – Wishlist
50k+ active installs
97
Print Invoice & Delivery Notes for WooCommerce
30k+ active installs
95
Showcase Payment Options (icons)
1k+ active installs
93