Everything you need to launch an online store in days and keep it growing for years. From your first sale to millions in revenue, Woo is with you.
22
Score
1,359
Errors
6,172
Warnings
+0
Change
Category Scores
Security0
Repo94
Performance76
Maintainability0
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Maintainability
4,807
13 issue groups
Security
2,478
11 issue groups
Performance
35
1 issue group
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$WC_Brands_Admin".1,321
- Category
- Maintainability
- Occurrences
- 1,321
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$WC_Brands_Admin".
WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.889
- Category
- Maintainability
- Occurrences
- 889
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().811
- Category
- Maintainability
- Occurrences
- 811
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
WARNINGMaintainabilityNon-prefixed functionFunctions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "WC".779
- Category
- Maintainability
- Occurrences
- 779
- Severity
- warning
Sample message
Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "WC".
ERRORSecurityException output is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '" {$oParserState->peek()} "'.641
- Category
- Security
- Occurrences
- 641
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '" {$oParserState->peek()} "'.
WARNINGMaintainabilityNon-prefixed classClasses declared by a theme/plugin should start with the theme/plugin prefix. Found: "Abstract_WC_Order_Data_Store_CPT".501
- Category
- Maintainability
- Occurrences
- 501
- Severity
- warning
Sample message
Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "Abstract_WC_Order_Data_Store_CPT".
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"\n$file, $func, $line\n"'.391
- Category
- Security
- Occurrences
- 391
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"\n$file, $func, $line\n"'.
WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.370
- Category
- Security
- Occurrences
- 370
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_COOKIE[$this->_cookie]360
- Category
- Security
- Occurrences
- 360
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_COOKIE[$this->_cookie]
WARNINGSecurityDatabase parameter is not escapedUnescaped parameter $address_table used in $wpdb->get_results()\n$address_table assigned unsafely at line 412.255
- Category
- Security
- Occurrences
- 255
- Severity
- warning
Sample message
Unescaped parameter $address_table used in $wpdb->get_results()\n$address_table assigned unsafely at line 412.
Show 15 moreShow less
WARNINGSecurityInterpolated SQL is not prepared213
- Category
- Security
- Occurrences
- 213
- Severity
- warning
Sample message
Use placeholders and $wpdb->prepare(); found interpolated variable $count_clause at "SELECT $count_clause FROM {$wpdb->prefix}wc_orders_meta WHERE meta_key=%s AND meta_value=%s"
WARNINGMaintainabilityNon-prefixed hook name194
- Category
- Maintainability
- Occurrences
- 194
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "'add_meta_boxes_' . $this->screen_id".
WARNINGSecurityMissing nonce verification100
- Category
- Security
- Occurrences
- 100
- Severity
- warning
Sample message
Processing form data without nonce verification.
ERRORMaintainabilityMissing direct file access protection84
- Category
- Maintainability
- Occurrences
- 84
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
WARNINGMaintainabilityDynamic hook name71
- Category
- Maintainability
- Occurrences
- 71
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "$filter . '_notification'".
WARNINGSecurityRequest data is not unslashed55
- Category
- Security
- Occurrences
- 55
- Severity
- warning
Sample message
$_GET['_wpnonce'] not unslashed before sanitization. Use wp_unslash() or similar
ERRORSecurityUnsafe printing function53
- Category
- Security
- Occurrences
- 53
- Severity
- error
Sample message
All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.
WARNINGMaintainabilitySchema Change48
- Category
- Maintainability
- Occurrences
- 48
- Severity
- warning
Sample message
Attempting a database schema change is discouraged.
WARNINGPerformancePost Not In exclude35
- Category
- Performance
- Occurrences
- 35
- Severity
- warning
Sample message
Using exclusionary parameters, like exclude, in calls to get_posts() should be done with caution, see https://wpvip.com/documentation/performance-improvements-by-removing-usage-of-post__not_in/ for more information.
ERRORMaintainabilitydate date31
- Category
- Maintainability
- Occurrences
- 31
- Severity
- error
Sample message
date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.
WARNINGMaintainabilityslow db query meta query29
- Category
- Maintainability
- Occurrences
- 29
- Severity
- warning
Sample message
Detected usage of meta_query, possible slow query.
ERRORMaintainabilityDeprecated parameter: get_terms parameter 226
- Category
- Maintainability
- Occurrences
- 26
- Severity
- error
Sample message
The parameter ""child_of=$id&menu_order=ASC&hide_empty=0"" at position #2 of get_terms() has been deprecated since WordPress version 4.5.0. Instead do not pass the parameter.
WARNINGMaintainabilityNon-prefixed interface23
- Category
- Maintainability
- Occurrences
- 23
- Severity
- warning
Sample message
Interfaces declared by a theme/plugin should start with the theme/plugin prefix. Found: "CronExpression_FieldInterface".
ERRORSecurityDatabase parameter is not escaped20
- Category
- Security
- Occurrences
- 20
- Severity
- error
Sample message
Unescaped parameter $column used in $wpdb->get_row()\n$column assigned unsafely at line 266.
WARNINGSecurityInput is not validated20
- Category
- Security
- Occurrences
- 20
- Severity
- warning
Sample message
Detected usage of a possibly undefined superglobal array index: $_POST['access_expires']. Check that the array index exists before using it.
External Connections
Potential connections found in static code analysis.
Outbound calls
295
External assets
5
Incoming endpoints
0
Notable Domains
woocommerce.com109 · outbound
schemas.wp.org14 · outbound
cloudup.com12 · outbound
wordpress.com7 · outbound
developer.woocommerce.com6 · outbound
public-api.wordpress.com5 · outbound
Platform / Reference Domains
w3.org68 · platform/reference
make.wordpress.org14 · platform/reference
github.com13 · platform/reference
wordpress.org5 · platform/reference
ps.w.org2 · platform/reference
codex.wordpress.org1 · platform/reference
developer.wordpress.org1 · platform/reference
External Asset Domains
s1.wp.com4 · asset
base-ui.com1 · asset
Incoming Endpoints
No public endpoints detected.
Score History
6 score snapshots
v10.9.4
22
Latest
- Findings
- 7,531
- Errors
- 1,359
- Warnings
- 6,172
- Check
- 2.0.0
v10.9.3
22
Score
- Findings
- 7,531
- Errors
- 1,359
- Warnings
- 6,172
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 22 | 7,531 | 1,359 | 6,172 | v10.9.4 | 2.0.0 |
| 22 | 7,531 | 1,359 | 6,172 | v10.9.3 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Plugin
Author
Issue
Domain
Related
Akismet Anti-spam: Spam Protection35 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder35 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreAll-in-One WP Migration and Backup34 scoreLiteSpeed Cache35 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreJetpack – WP Security, Backup, Speed, & Growth22 scorePopup Builder & Popup Maker for WordPress – OptinMonster Email Marketing and Lead Generation32 scoreWP Super Cache25 scoreWooCommerce PayPal Payments37 scoreWooCommerce Legacy REST API31 scoreLimit Login Attempts40 scoreMailchimp for WooCommerce24 score
Plugin
Author
Issue
Domain
Related
Akismet Anti-spam: Spam Protection35 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder35 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreAll-in-One WP Migration and Backup34 scoreLiteSpeed Cache35 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreJetpack – WP Security, Backup, Speed, & Growth22 scorePopup Builder & Popup Maker for WordPress – OptinMonster Email Marketing and Lead Generation32 scoreWP Super Cache25 scoreWooCommerce PayPal Payments37 scoreWooCommerce Legacy REST API31 scoreLimit Login Attempts40 scoreMailchimp for WooCommerce24 score
Related Plugins
GetResponse Official
4k+ active installs
100
Lemon Squeezy — Sell Digital Products, Subscriptions, and Licenses
500 active installs
99
Quiz Builder for WooCommerce – Product Recommendations
2k+ active installs
99
Wishlist for WooCommerce
900 active installs
99
NIF (Num. de Contribuinte Português) for WooCommerce
5k+ active installs
98
Portugal CTT Tracking for WooCommerce
600 active installs
98