Bulk Order Form for WooCommerce

Automatically add a bulk or quick order form to your WooCommerce site with a single shortcode.

v3.7.2WP OvernightUpdated Added 900 installs92% rating
81
Score
8
Errors
98
Warnings
+0
Change

Category Scores

Security78
Repo100
Performance98
Maintainability68

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

106 findings

Maintainability

103

10 issue groups

Security

2

2 issue groups

Performance

1

1 issue group

WARNINGMaintainabilityNon-prefixed hook nameHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "wc_bof_' . $data['settings']['template'] . '_add_to_cart".57
Category
Maintainability
Occurrences
57
Severity
warning

Sample message

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "wc_bof_' . $data['settings']['template'] . '_add_to_cart".

WARNINGMaintainabilityNon-prefixed functionFunctions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "wc_bof_active_template".17
Category
Maintainability
Occurrences
17
Severity
warning

Sample message

Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "wc_bof_active_template".

WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$args".12
Category
Maintainability
Occurrences
12
Severity
warning

Sample message

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$args".

WARNINGMaintainabilityDynamic hook nameHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "$args['page_hook'] . '_add_extra_field'".6
Category
Maintainability
Occurrences
6
Severity
warning

Sample message

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "$args['page_hook'] . '_add_extra_field'".

ERRORMaintainabilitywp function not compatible with requires wpFunction "do_action_deprecated()" requires WordPress 4.6.0, but your plugin minimum supported version is WordPress 4.0.0.4
Category
Maintainability
Occurrences
4
Severity
error

Sample message

Function "do_action_deprecated()" requires WordPress 4.6.0, but your plugin minimum supported version is WordPress 4.0.0.

WARNINGMaintainabilityslow db query tax queryDetected usage of tax_query, possible slow query.2
Category
Maintainability
Occurrences
2
Severity
warning

Sample message

Detected usage of tax_query, possible slow query.

ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;2
Category
Maintainability
Occurrences
2
Severity
error

Sample message

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

ERRORSecuritySetting is missing a sanitization callbackSanitization missing for register_setting().1
Category
Security
Occurrences
1
Severity
error

Sample message

Sanitization missing for register_setting().

WARNINGMaintainabilityNon-prefixed classClasses declared by a theme/plugin should start with the theme/plugin prefix. Found: "WC_Bulk_Order_Form_Dependencies".1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "WC_Bulk_Order_Form_Dependencies".

WARNINGMaintainabilityNon-prefixed global variableGlobal constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "$key".1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "$key".

Show 3 more
ERRORSecurityOutput is not escaped1
Category
Security
Occurrences
1
Severity
error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found 'wc_esc_json'.

WARNINGPerformancePost Not In post not in1
Category
Performance
Occurrences
1
Severity
warning

Sample message

Using exclusionary parameters, like post__not_in, in calls to get_posts() should be done with caution, see https://wpvip.com/documentation/performance-improvements-by-removing-usage-of-post__not_in/ for more information.

WARNINGMaintainabilitytrademarked term1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

The plugin slug includes a restricted term. Your plugin slug - "woocommerce-bulk-order-form" - contains the restricted term "woocommerce" which cannot be used within in your plugin slug, unless your plugin slug contains one of the allowed patterns: "for woocommerce", "with woocommerce", "using woocommerce", or "and woocommerce". The term must still not appear anywhere else in your plugin slug.

External Connections

Potential connections found in static code analysis.

22 domains

Outbound calls

41

External assets

1

Incoming endpoints

6

Notable Domains

apache.org4 · outbound
brett-zamir.me3 · outbound
docs.woothemes.com2 · outbound
jsfromhell.com2 · outbound

Platform / Reference Domains

github.com3 · platform/reference
wordpress.org3 · platform/reference
codex.wordpress.org1 · platform/reference
opensource.org1 · platform/reference

External Asset Domains

wpovernight.com7 · asset + outbound

Incoming Endpoints

wp_ajax_nopriv_wcbulkorder_product_buy_nowpublic

wp_ajax

wp_ajax_nopriv_wcbulkorder_product_searchpublic

wp_ajax

wp_ajax_nopriv_wcbulkorder_product_single_buy_nowpublic

wp_ajax

Admin AJAX endpoints3
wp_ajax_wcbulkorder_product_buy_nowauthenticated

wp_ajax

wp_ajax_wcbulkorder_product_searchauthenticated

wp_ajax

wp_ajax_wcbulkorder_product_single_buy_nowauthenticated

wp_ajax

Score History

First score snapshot

v3.7.2

81

Latest

Findings
106
Errors
8
Warnings
98
Check
2.0.0

Relationship Map

Author, categories, issues, domains, and nearby plugins.

36 nodes

Related Plugins