EU VAT Assistant for WooCommerce

Extends the standard WooCommerce sale process and assists in achieving compliance with the new EU VAT regime starting on the 1st of January 2015.

v2.1.30.260413DiegoUpdated Added 5k+ installs100% rating
24
Score
1,742
Errors
495
Warnings
+0
Change

Category Scores

Security0
Repo94
Performance100
Maintainability0

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

2,237 findings

I18n

1,046

5 issue groups

Security

699

8 issue groups

Maintainability

404

12 issue groups

ERRORI18nNon Singular String Literal DomainThe $domain parameter must be a single text string literal. Found: $text_domain793
Category
I18n
Occurrences
793
Severity
error

Sample message

The $domain parameter must be a single text string literal. Found: $text_domain

ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"<div id=\"tab-{$tab_id}\" class=\"aelia settings-tab\">"'.360
Category
Security
Occurrences
360
Severity
error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"<div id=\"tab-{$tab_id}\" class=\"aelia settings-tab\">"'.

ERRORI18nNon Singular String Literal TextThe $text parameter must be a single text string literal. Found: '%s - Plugin not found: "%s". ' .\n 'This could be due by an incorrect name specified in ' .\n 'class "%s". Please report the issue to support.'164
Category
I18n
Occurrences
164
Severity
error

Sample message

The $text parameter must be a single text string literal. Found: '%s - Plugin not found: "%s". ' .\n 'This could be due by an incorrect name specified in ' .\n 'class "%s". Please report the issue to support.'

WARNINGMaintainabilityNon-prefixed hook nameHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: &quot;wc_aelia_&#039; . $menu_slug . &#039;_menu_permissions&quot;.98
Category
Maintainability
Occurrences
98
Severity
warning

Sample message

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: &quot;wc_aelia_&#039; . $menu_slug . &#039;_menu_permissions&quot;.

ERRORMaintainabilitydate datedate() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.89
Category
Maintainability
Occurrences
89
Severity
error

Sample message

date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.

ERRORSecurityException output is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"End-of-file reached, probably we got disconnected (sent $sent of $length)"'.79
Category
Security
Occurrences
79
Severity
error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"End-of-file reached, probably we got disconnected (sent $sent of $length)"'.

ERRORI18nMissing Translators CommentA function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.67
Category
I18n
Occurrences
67
Severity
error

Sample message

A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.

WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.66
Category
Security
Occurrences
66
Severity
warning

Sample message

Processing form data without nonce verification.

ERRORSecuritySQL query is not preparedUse placeholders and $wpdb->prepare(); found $SQL53
Category
Security
Occurrences
53
Severity
error

Sample message

Use placeholders and $wpdb->prepare(); found $SQL

WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: &quot;$WC_AeliaFoundationClasses&quot;.49
Category
Maintainability
Occurrences
49
Severity
warning

Sample message

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: &quot;$WC_AeliaFoundationClasses&quot;.

Show 15 more
WARNINGMaintainabilityDirect Query45
Category
Maintainability
Occurrences
45
Severity
warning

Sample message

Use of a direct database call is discouraged.

WARNINGMaintainabilityNo Caching45
Category
Maintainability
Occurrences
45
Severity
warning

Sample message

Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().

WARNINGSecurityRequest data is not unslashed43
Category
Security
Occurrences
43
Severity
warning

Sample message

$_COOKIE[$name] not unslashed before sanitization. Use wp_unslash() or similar

WARNINGSecurityInput is not sanitized38
Category
Security
Occurrences
38
Severity
warning

Sample message

Detected usage of a non-sanitized input variable: $_COOKIE[$name]

ERRORSecurityDatabase parameter is not escaped32
Category
Security
Occurrences
32
Severity
error

Sample message

Unescaped parameter $SQL used in $wpdb->get_results()\n$SQL assigned unsafely at line 101.

WARNINGSecurityMissing nonce verification28
Category
Security
Occurrences
28
Severity
warning

Sample message

Processing form data without nonce verification.

ERRORMaintainabilitycurl curl setopt22
Category
Maintainability
Occurrences
22
Severity
error

Sample message

Using cURL functions is highly discouraged. Use wp_remote_get() instead.

WARNINGMaintainabilityerror log trigger error14
Category
Maintainability
Occurrences
14
Severity
warning

Sample message

trigger_error() found. Debug code should not normally be used in production.

ERRORI18nMissing Arg Domain14
Category
I18n
Occurrences
14
Severity
error

Sample message

Missing $domain parameter in function call to __().

WARNINGMaintainabilityMissing Version13
Category
Maintainability
Occurrences
13
Severity
warning

Sample message

Resource version not set in call to wp_enqueue_script(). This means new versions of the script may not always be loaded due to browser caching.

WARNINGMaintainabilityShort URL found8
Category
Maintainability
Occurrences
8
Severity
warning

Sample message

Short URL detected (bit.ly). Use full URLs instead of URL shorteners.

ERRORI18nUnordered Placeholders Text8
Category
I18n
Occurrences
8
Severity
error

Sample message

Multiple placeholders in translatable strings should be ordered. Expected "%1$d, %2$d", but got "%d, %d" in 'Q%d %d'.

ERRORMaintainabilityShort PHP open tag found7
Category
Maintainability
Occurrences
7
Severity
error

Sample message

Short PHP opening tag used with echo; expected "<?php echo __ ..." but found "<?= __ ..."

WARNINGMaintainabilityerror log set error handler7
Category
Maintainability
Occurrences
7
Severity
warning

Sample message

set_error_handler() found. Debug code should not normally be used in production.

WARNINGMaintainabilityerror log var dump7
Category
Maintainability
Occurrences
7
Severity
warning

Sample message

var_dump() found. Debug code should not normally be used in production.

External Connections

Not analyzed yet.

Score History

First score snapshot

v2.1.30.260413

24

Latest

Findings
2,237
Errors
1,742
Warnings
495
Check
2.0.0

Relationship Map

Author, categories, issues, domains, and nearby plugins.

29 nodes

Related Plugins