Fast and flexible AJAX product filters for WooCommerce. Filter by categories, attributes, price, tags, rating, and more. No page reloads.
22
Score
2,840
Errors
1,252
Warnings
+0
Change
Category Scores
Security0
Repo89
Performance84
Maintainability0
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Security
1,466
10 issue groups
I18n
1,434
2 issue groups
Maintainability
1,040
12 issue groups
Performance
12
1 issue group
ERRORI18nText Domain MismatchMismatched text domain. Expected 'woocommerce-ajax-filters' but got "BeRocket_AJAX_domain".1,412
- Category
- I18n
- Occurrences
- 1,412
- Severity
- error
Sample message
Mismatched text domain. Expected 'woocommerce-ajax-filters' but got "BeRocket_AJAX_domain".
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"&utm_term={$cur_plugin->info['plugin_sku']}' target='_blank'>"'.719
- Category
- Security
- Occurrences
- 719
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"&utm_term={$cur_plugin->info['plugin_sku']}' target='_blank'>"'.
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$additional".303
- Category
- Maintainability
- Occurrences
- 303
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$additional".
ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;171
- Category
- Maintainability
- Occurrences
- 171
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
ERRORSecurityUnsafe printing functionAll output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.165
- Category
- Security
- Occurrences
- 165
- Severity
- error
Sample message
All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.
WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.128
- Category
- Security
- Occurrences
- 128
- Severity
- warning
Sample message
Processing form data without nonce verification.
ERRORMaintainabilityShort PHP open tag foundShort PHP opening tag used with echo; expected "<?php echo $feature_condition ..." but found "<?= $feature_condition ..."123
- Category
- Maintainability
- Occurrences
- 123
- Severity
- error
Sample message
Short PHP opening tag used with echo; expected "<?php echo $feature_condition ..." but found "<?= $feature_condition ..."
WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.116
- Category
- Maintainability
- Occurrences
- 116
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().108
- Category
- Maintainability
- Occurrences
- 108
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
WARNINGSecurityRequest data is not unslashed$_GET[$filter_var] not unslashed before sanitization. Use wp_unslash() or similar100
- Category
- Security
- Occurrences
- 100
- Severity
- warning
Sample message
$_GET[$filter_var] not unslashed before sanitization. Use wp_unslash() or similar
Show 15 moreShow less
WARNINGSecurityInput is not sanitized91
- Category
- Security
- Occurrences
- 91
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_GET[$filter_var]
ERRORSecuritySQL query is not prepared79
- Category
- Security
- Occurrences
- 79
- Severity
- error
Sample message
Use placeholders and $wpdb->prepare(); found $definition_sql
WARNINGSecurityMissing nonce verification75
- Category
- Security
- Occurrences
- 75
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGMaintainabilityNon-prefixed hook name70
- Category
- Maintainability
- Occurrences
- 70
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "'before_wizard_run_'.$this->page_id".
ERRORSecurityDatabase parameter is not escaped55
- Category
- Security
- Occurrences
- 55
- Severity
- error
Sample message
Unescaped parameter $definition_sql used in $wpdb->query()\n$definition_sql assigned unsafely at line 284.
WARNINGMaintainabilityNon-prefixed function46
- Category
- Maintainability
- Occurrences
- 46
- Severity
- warning
Sample message
Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "BR_woocommerce_json_search_found_products".
ERRORMaintainabilityOffloaded Content34
- Category
- Maintainability
- Occurrences
- 34
- Severity
- error
Sample message
Offloading images, js, css, and other scripts to your servers or any remote service is disallowed.
WARNINGSecurityInput is not validated33
- Category
- Security
- Occurrences
- 33
- Severity
- warning
Sample message
Detected usage of a possibly undefined superglobal array index: $_GET['backup']. Check that the array index exists before using it.
WARNINGMaintainabilityMissing Version26
- Category
- Maintainability
- Occurrences
- 26
- Severity
- warning
Sample message
Resource version not set in call to wp_enqueue_style(). This means new versions of the style may not always be loaded due to browser caching.
ERRORI18nMissing Translators Comment22
- Category
- I18n
- Occurrences
- 22
- Severity
- error
Sample message
A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.
WARNINGSecurityInterpolated SQL is not prepared21
- Category
- Security
- Occurrences
- 21
- Severity
- warning
Sample message
Use placeholders and $wpdb->prepare(); found interpolated variable $field at AS tt ON t.term_id = tt.term_id WHERE tt.taxonomy = 'product_cat' AND $field = %s LIMIT 1"
WARNINGMaintainabilityDynamic hook name15
- Category
- Maintainability
- Occurrences
- 15
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "$hook_name . '_check_type_' . $condition['type']".
WARNINGMaintainabilityslow db query tax query14
- Category
- Maintainability
- Occurrences
- 14
- Severity
- warning
Sample message
Detected usage of tax_query, possible slow query.
WARNINGMaintainabilityNot In Footer14
- Category
- Maintainability
- Occurrences
- 14
- Severity
- warning
Sample message
In footer ($in_footer) is not set explicitly wp_register_script; It is recommended to load scripts in the footer. Please set this value to `true` to load it in the footer, or explicitly `false` if it should be loaded in the header.
WARNINGPerformancePost Not In post not in12
- Category
- Performance
- Occurrences
- 12
- Severity
- warning
Sample message
Using exclusionary parameters, like post__not_in, in calls to get_posts() should be done with caution, see https://wpvip.com/documentation/performance-improvements-by-removing-usage-of-post__not_in/ for more information.
External Connections
Potential connections found in static code analysis.
Outbound calls
268
External assets
16
Incoming endpoints
16
Notable Domains
woocommerce-terms-popup.berocket.com16 · outbound
woocommerce-product-labels.berocket.com9 · outbound
fontawesome.com8 · outbound
e8e3g4v6.delivery.rocketcdn.me7 · outbound
docs.berocket.com5 · outbound
woocommerce-products-filter.berocket.com5 · outbound
Platform / Reference Domains
wordpress.org7 · platform/reference
github.com6 · platform/reference
w3.org2 · platform/reference
opensource.org1 · platform/reference
External Asset Domains
berocket.com154 · asset + outbound
apicdn.berocket.com35 · asset + outbound
berocket.ams3.cdn.digitaloceanspaces.com14 · asset + outbound
use.fontawesome.com2 · asset
youtube.com1 · asset
Incoming Endpoints
No public endpoints detected.
Admin AJAX endpoints16
wp_ajax_berocket_admin_close_noticeauthenticated
wp_ajax
wp_ajax_berocket_error_notices_getauthenticated
wp_ajax
wp_ajax_berocket_feature_request_sendauthenticated
wp_ajax
wp_ajax_berocket_information_close_noticeauthenticated
wp_ajax
wp_ajax_berocket_rate_stars_closeauthenticated
wp_ajax
wp_ajax_berocket_subscribe_emailauthenticated
wp_ajax
wp_ajax_br_test_keyauthenticated
wp_ajax
wp_ajax_br_test_keysauthenticated
wp_ajax
wp_ajax_braapf_additional_table_statusauthenticated
wp_ajax
wp_ajax_brapf_regenerate_additional_tablesauthenticated
wp_ajax
wp_ajax_brfr_confirm_import_settingsauthenticated
wp_ajax
wp_ajax_brfr_get_export_settingsauthenticated
wp_ajax
4 more hidden
Score History
3 score snapshots
v3.2.2
22
Latest
- Findings
- 4,092
- Errors
- 2,840
- Warnings
- 1,252
- Check
- 2.0.0
v3.2.1
22
Score
- Findings
- 4,092
- Errors
- 2,832
- Warnings
- 1,260
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 22 | 4,092 | 2,840 | 1,252 | v3.2.2 | 2.0.0 |
| 22 | 4,092 | 2,832 | 1,260 | v3.2.1 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Author
Category
Issue
Domain
Related
Content Views – Post Grid & Filter (Shortcode, Blocks, Elementor Widgets)90 scoreBlog Filter – Post Grid Filter by Category or Tag89 scoreCategory AJAX Filter — Advanced Filter for Posts & Custom Post Types54 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreClassic Editor63 scoreLiteSpeed Cache35 scoreWooCommerce21 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreAkismet Anti-spam: Spam Protection35 scoreAll-in-One WP Migration and Backup34 scoreJetpack – WP Security, Backup, Speed, & Growth22 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreAdvanced Product Labels for WooCommerce23 score
Author
Category
Issue
Domain
Related
Content Views – Post Grid & Filter (Shortcode, Blocks, Elementor Widgets)90 scoreBlog Filter – Post Grid Filter by Category or Tag89 scoreCategory AJAX Filter — Advanced Filter for Posts & Custom Post Types54 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreClassic Editor63 scoreLiteSpeed Cache35 scoreWooCommerce21 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreAkismet Anti-spam: Spam Protection35 scoreAll-in-One WP Migration and Backup34 scoreJetpack – WP Security, Backup, Speed, & Growth22 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreAdvanced Product Labels for WooCommerce23 score
Related Plugins
Content Views – Post Grid & Filter (Shortcode, Blocks, Elementor Widgets)
100k+ active installs
90
Blog Filter – Post Grid Filter by Category or Tag
7k+ active installs
89
Category AJAX Filter — Advanced Filter for Posts & Custom Post Types
6k+ active installs
54