Booster for WooCommerce – PDF Invoices, Abandoned Cart, Variation Swatches & 100+ Tools

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$K_PATH_CACHE".

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "'save_bulk_and_quick_edit_fields_' . $this->id".

Mismatched text domain. Expected 'woocommerce-jetpack' but got 'gift-voucher'.

Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "add_wc_gateway_wcj_custom_classes".

Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "Booster_Onboarding".

Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "DATAMATRIXDEFS".

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$box'.

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

Missing $domain parameter in function call to __().

Detected usage of a non-sanitized input variable: $_SERVER['DOCUMENT_ROOT']

$_SERVER['DOCUMENT_ROOT'] not unslashed before sanitization. Use wp_unslash() or similar

Using cURL functions is highly discouraged. Use wp_remote_get() instead.

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fread().

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fclose().

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$code'.

Using exclusionary parameters, like post__not_in, in calls to get_posts() should be done with caution, see https://wpvip.com/documentation/performance-improvements-by-removing-usage-of-post__not_in/ for more information.

Unescaped parameter $attribute_name used in $wpdb->get_row()\n$attribute_name assigned unsafely at line 145.

unlink() is discouraged. Use wp_delete_file() to delete a file.

Processing form data without nonce verification.

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fwrite().

parse_url() is discouraged because of inconsistency in the output across PHP versions; use wp_parse_url() instead.

The parameter "$args" at position #2 of get_terms() has been deprecated since WordPress version 4.5.0. Instead do not pass the parameter.

Function "str_contains()" requires WordPress 5.9.0, but your plugin minimum supported version is WordPress 5.8.0.

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fopen().

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: mkdir().