Extended Coupon Features for WooCommerce FREE

Additional functionality for WooCommerce Coupons: Allow discounts to be automatically applied, applying coupons via url, etc...

v3.4.2Soft79Updated 2026-02-14Added Jul 5, 201410k+ installs100% rating
36
Score
219
Errors
63
Warnings
+0
Change

Category Scores

Security0
Repo94
Performance100
Maintainability58

Top Issues by Category

i18n127
security105
maintainability44

Issues Details

282 issues found in latest scan

ERROR126
WordPress.WP.I18n.TextDomainMismatch

Mismatched text domain. Expected 'woocommerce-auto-added-coupons' but got 'woocommerce'.

ERROR42
WordPress.Security.EscapeOutput.ExceptionNotEscaped

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$args['type']'.

ERROR30
WordPress.Security.EscapeOutput.OutputNotEscaped

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$GLOBALS['wjecf_admin_notice']'.

WARNING9
WordPress.Security.NonceVerification.Recommended

Processing form data without nonce verification.

ERROR8
WordPress.Security.EscapeOutput.UnsafePrintingFunction

All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.

WARNING6
WordPress.DB.DirectDatabaseQuery.DirectQuery

Use of a direct database call is discouraged.

WARNING6
WordPress.DB.DirectDatabaseQuery.NoCaching

Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().

WARNING6
WordPress.Security.ValidatedSanitizedInput.InputNotSanitized

Detected usage of a non-sanitized input variable: $_GET['apply_coupon']

WARNING6
WordPress.Security.ValidatedSanitizedInput.MissingUnslash

$_GET['apply_coupon'] not unslashed before sanitization. Use wp_unslash() or similar

ERROR6
missing_direct_file_access_protection

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

WARNING5
WordPress.DB.SlowDBQuery.slow_db_query_meta_key

Detected usage of meta_key, possible slow query.

WARNING4
WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedHooknameFound

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "plugin_locale".

WARNING4
WordPress.PHP.DevelopmentFunctions.error_log_error_log

error_log() found. Debug code should not normally be used in production.

WARNING3
WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedVariableFound

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$thepostid".

WARNING3
WordPress.PHP.DevelopmentFunctions.error_log_print_r

print_r() found. Debug code should not normally be used in production.

WARNING2
WordPress.DB.SlowDBQuery.slow_db_query_meta_query

Detected usage of meta_query, possible slow query.

WARNING2
WordPress.Security.NonceVerification.Missing

Processing form data without nonce verification.

WARNING1
PluginCheck.CodeAnalysis.DiscouragedFunctions.load_plugin_textdomainFound

load_plugin_textdomain() has been discouraged since WordPress version 4.6. When your plugin is hosted on WordPress.org, you no longer need to manually include this function call for translations under your plugin slug. WordPress will automatically load the translations for you as needed.

ERROR1
PluginCheck.Security.DirectDB.UnescapedDBParameter

Unescaped parameter $delete_meta_ids used in $wpdb->query()\n$delete_meta_ids assigned unsafely at line 103.

ERROR1
WordPress.DB.PreparedSQL.NotPrepared

Use placeholders and $wpdb->prepare(); found $delete_meta_ids

WARNING1
WordPress.DB.SlowDBQuery.slow_db_query_meta_value

Detected usage of meta_value, possible slow query.

ERROR1
WordPress.DateTime.RestrictedFunctions.date_date

date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.

WARNING1
WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedClassFound

Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "Abstract_WJECF_Plugin".

WARNING1
WordPress.PHP.DevelopmentFunctions.error_log_debug_backtrace

debug_backtrace() found. Debug code should not normally be used in production.

ERROR1
WordPress.WP.DeprecatedParameters.Get_termsParam2Found

The parameter "'orderby=name&hide_empty=0'" at position #2 of get_terms() has been deprecated since WordPress version 4.5.0. Instead do not pass the parameter.

Latest Snapshot

Findings

282

Errors

219

Warnings

63

Score History

First score snapshot

First scan completed Jun 20, 2026

v3.4.2 · Plugin Check 2.0.0 · Model 2026.06-mvp-static-v2

Jun 20, 2026

v3.4.2

36

Latest

Findings
282
Errors
219
Warnings
63
Plugin Check
2.0.0
Model
2026.06-mvp-static-v2

Related Plugins