PluginScore

Email Inquiry & Cart Options for WooCommerce

Set Product Page Rules, Hide Add to Cart, Hide Price, Show Email Inquiry, Filter Rules by Roles for logged in users. 100% Mobile responsive Email Inqu …

v3.5.0Steve TrumanUpdated Added 800 installs64% rating
WooCommerce Brochure PageWooCommerce Catalog VisibilityWooCommerce Email InquiryWooCommerce add to cartwoocommerce
28
Score
194
Errors
291
Warnings
+0
Change

Category Scores

Security0
Repo80
Performance100
Maintainability32

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

485 findings

Maintainability

243

13 issue groups

Security

198

8 issue groups

I18n

33

4 issue groups

ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$GLOBALS[WC_EMAIL_INQUIRY_PREFIX.'admin_interface']'.132
Category
Security
Occurrences
132
Severity
error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$GLOBALS[WC_EMAIL_INQUIRY_PREFIX.'admin_interface']'.

WordPress.Security.EscapeOutput.OutputNotEscapedReference
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$$id_attribute".91
Category
Maintainability
Occurrences
91
Severity
warning

Sample message

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$$id_attribute".

WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedVariableFound
WARNINGMaintainabilityDynamic hook nameHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "$this->option_name . '_settings_fields'".75
Category
Maintainability
Occurrences
75
Severity
warning

Sample message

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "$this->option_name . '_settings_fields'".

WordPress.NamingConventions.PrefixAllGlobals.DynamicHooknameFound
WARNINGMaintainabilityNon-prefixed functionFunctions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "register_block_a3_wc_ei_button".19
Category
Maintainability
Occurrences
19
Severity
warning

Sample message

Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "register_block_a3_wc_ei_button".

WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedFunctionFound
WARNINGSecurityInput is not validatedDetected usage of a possibly undefined superglobal array index: $_POST[$this->google_api_key_option]. Check that the array index exists before using it.16
Category
Security
Occurrences
16
Severity
warning

Sample message

Detected usage of a possibly undefined superglobal array index: $_POST[$this->google_api_key_option]. Check that the array index exists before using it.

WordPress.Security.ValidatedSanitizedInput.InputNotValidated
WARNINGMaintainabilityNon-prefixed constantGlobal constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "WC_EMAIL_INQUIRY_CSS_URL".15
Category
Maintainability
Occurrences
15
Severity
warning

Sample message

Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "WC_EMAIL_INQUIRY_CSS_URL".

WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedConstantFound
ERRORI18nMissing Arg DomainMissing $domain parameter in function call to __().15
Category
I18n
Occurrences
15
Severity
error

Sample message

Missing $domain parameter in function call to __().

WordPress.WP.I18n.MissingArgDomainReference
ERRORI18nMissing Translators CommentA function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.15
Category
I18n
Occurrences
15
Severity
error

Sample message

A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.

WordPress.WP.I18n.MissingTranslatorsCommentReference
WARNINGMaintainabilityNon-prefixed hook nameHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "a3_admin_ui_script_params".14
Category
Maintainability
Occurrences
14
Severity
warning

Sample message

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "a3_admin_ui_script_params".

WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedHooknameFound
WARNINGSecurityMissing nonce verificationProcessing form data without nonce verification.12
Category
Security
Occurrences
12
Severity
warning

Sample message

Processing form data without nonce verification.

WordPress.Security.NonceVerification.Missing
Show 15 more
WARNINGSecurityNonce verification recommended12
Category
Security
Occurrences
12
Severity
warning

Sample message

Processing form data without nonce verification.

WordPress.Security.NonceVerification.Recommended
WARNINGSecurityRequest data is not unslashed8
Category
Security
Occurrences
8
Severity
warning

Sample message

$_GET['tab'] not unslashed before sanitization. Use wp_unslash() or similar

WordPress.Security.ValidatedSanitizedInput.MissingUnslash
ERRORMaintainabilityMissing direct file access protection8
Category
Maintainability
Occurrences
8
Severity
error

Sample message

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

missing_direct_file_access_protectionReference
WARNINGMaintainabilityNon-prefixed class7
Category
Maintainability
Occurrences
7
Severity
warning

Sample message

Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "Compile_Less_Sass".

WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedClassFound
WARNINGSecurityInput is not sanitized7
Category
Security
Occurrences
7
Severity
warning

Sample message

Detected usage of a non-sanitized input variable: $_GET['tab']

WordPress.Security.ValidatedSanitizedInput.InputNotSanitized
ERRORSecurityUnsafe printing function6
Category
Security
Occurrences
6
Severity
error

Sample message

All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.

WordPress.Security.EscapeOutput.UnsafePrintingFunctionReference
ERRORSecurityException output is not escaped5
Category
Security
Occurrences
5
Severity
error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"$msg: $loc"'.

WordPress.Security.EscapeOutput.ExceptionNotEscapedReference
WARNINGMaintainabilityDiscouraged PHP function3
Category
Maintainability
Occurrences
3
Severity
warning

Sample message

The use of function ini_set() is discouraged

Squiz.PHP.DiscouragedFunctions.Discouraged
ERRORMaintainabilityfile system operations is writable3
Category
Maintainability
Occurrences
3
Severity
error

Sample message

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: is_writable().

WordPress.WP.AlternativeFunctions.file_system_operations_is_writable
WARNINGMaintainabilityMissing Version3
Category
Maintainability
Occurrences
3
Severity
warning

Sample message

Resource version not set in call to wp_enqueue_style(). This means new versions of the style may not always be loaded due to browser caching.

WordPress.WP.EnqueuedResourceParameters.MissingVersion
ERRORMaintainabilitystrip tags strip tags2
Category
Maintainability
Occurrences
2
Severity
error

Sample message

strip_tags() is discouraged. Use the more comprehensive wp_strip_all_tags() instead.

WordPress.WP.AlternativeFunctions.strip_tags_strip_tags
ERRORMaintainabilityNon Enqueued Stylesheet2
Category
Maintainability
Occurrences
2
Severity
error

Sample message

Stylesheets must be registered/enqueued via wp_enqueue_style()

WordPress.WP.EnqueuedResources.NonEnqueuedStylesheet
ERRORI18nUnordered Placeholders Text2
Category
I18n
Occurrences
2
Severity
error

Sample message

Multiple placeholders in translatable strings should be ordered. Expected "%1$s, %2$s", but got "%s, %s" in 'Advanced Settings - Upgrade to the <a href="%s" target="_blank">%s License</a> to activate these settings.'.

WordPress.WP.I18n.UnorderedPlaceholdersTextReference
WARNINGI18nDiscouraged text-domain loading1
Category
I18n
Occurrences
1
Severity
warning

Sample message

load_plugin_textdomain() has been discouraged since WordPress version 4.6. When your plugin is hosted on WordPress.org, you no longer need to manually include this function call for translations under your plugin slug. WordPress will automatically load the translations for you as needed.

PluginCheck.CodeAnalysis.DiscouragedFunctions.load_plugin_textdomainFoundReference
WARNINGMaintainabilityDirect Query1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

Use of a direct database call is discouraged.

WordPress.DB.DirectDatabaseQuery.DirectQuery

External Connections

Potential connections found in static code analysis.

42 domains

Outbound calls

89

External assets

0

Incoming endpoints

7

Notable Domains

a3rev.com7 · outbound
getharvest.com6 · outbound
developers.google.com3 · outbound
popper.js.org3 · outbound
blog.margenn.com2 · outbound
developer.mozilla.org2 · outbound

Platform / Reference Domains

github.com15 · platform/reference
w3.org5 · platform/reference
codex.wordpress.org4 · platform/reference
opensource.org1 · platform/reference
wordpress.org1 · platform/reference

External Asset Domains

No external asset domains detected.

Incoming Endpoints

wp_ajax_nopriv_public

wp_ajax

wp_ajax_nopriv_wc_ei_yellow_message_dismisspublic

wp_ajax

wp_ajax_nopriv_wc_ei_yellow_message_dontshowpublic

wp_ajax

wp_ajax_nopriv_wc_email_inquiry_public

wp_ajax

Admin AJAX endpoints3
wp_ajax_wc_ei_yellow_message_dismissauthenticated

wp_ajax

wp_ajax_wc_ei_yellow_message_dontshowauthenticated

wp_ajax

wp_ajax_wc_email_inquiry_authenticated

wp_ajax

Score History

First score snapshot

v3.5.0

28

Latest

Findings
485
Errors
194
Warnings
291
Check
2.0.0

Relationship Map

Author, categories, issues, domains, and nearby plugins.

37 nodes

Related Plugins

Custom Add to Cart labels for WooCommerce

5k+ active installs

79
Add to Cart Text Changer and Customize Button, Add Custom Icon

2k+ active installs

65
Modal Fly Cart & AJAX Add to Cart for WooCommerce

2k+ active installs

39
XT Ajax Add To Cart for WooCommerce

1k+ active installs

23