PayPal's latest payment processing solution. Accept PayPal, Pay Later, credit/debit cards, alternative digital wallets and bank accounts.
37
Score
194
Errors
110
Warnings
+0
Change
Category Scores
Security0
Repo97
Performance98
Maintainability62
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Security
192
5 issue groups
Maintainability
110
11 issue groups
Performance
1
1 issue group
Repo Compliance
1
1 issue group
ERRORSecurityException output is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"Invalid WC_Order id {$order_id}."'.121
- Category
- Security
- Occurrences
- 121
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"Invalid WC_Order id {$order_id}."'.
ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;70
- Category
- Maintainability
- Occurrences
- 70
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_GET['change_payment_method']60
- Category
- Security
- Occurrences
- 60
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_GET['change_payment_method']
WARNINGMaintainabilityDynamic hook nameHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "$action_name".14
- Category
- Maintainability
- Occurrences
- 14
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "$action_name".
WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.6
- Category
- Maintainability
- Occurrences
- 6
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().6
- Category
- Maintainability
- Occurrences
- 6
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.6
- Category
- Security
- Occurrences
- 6
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGMaintainabilityNon-prefixed hook nameHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "deprecated_argument_run".3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "deprecated_argument_run".
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$hide_save_button".3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$hide_save_button".
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found 'wc_help_tip'.3
- Category
- Security
- Occurrences
- 3
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found 'wc_help_tip'.
Show 8 moreShow less
WARNINGMaintainabilitytrademarked term3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
The plugin name includes a restricted term. Your chosen plugin name - "WooCommerce PayPal Payments" - contains the restricted term "woocommerce" which cannot be used within in your plugin name, unless your plugin name contains one of the allowed patterns: "for woocommerce", "with woocommerce", "using woocommerce", or "and woocommerce". The term must still not appear anywhere else in your name.
WARNINGSecurityDatabase parameter is not escaped2
- Category
- Security
- Occurrences
- 2
- Severity
- warning
Sample message
Unescaped parameter $table used in $wpdb->query()\n$table assigned unsafely at line 285.
WARNINGMaintainabilityerror log error log2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
error_log() found. Debug code should not normally be used in production.
WARNINGMaintainabilityslow db query meta key1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Detected usage of meta_key, possible slow query.
WARNINGMaintainabilityNon-prefixed global symbol1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
The "woocommerce.feature_flags.woocommerce" prefix is not a valid namespace/function/class/variable/constant prefix in PHP.
WARNINGPerformancePost Not In exclude1
- Category
- Performance
- Occurrences
- 1
- Severity
- warning
Sample message
Using exclusionary parameters, like exclude, in calls to get_posts() should be done with caution, see https://wpvip.com/documentation/performance-improvements-by-removing-usage-of-post__not_in/ for more information.
WARNINGMaintainabilitymissing composer json file1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
The "/vendor" directory using composer exists, but "composer.json" file is missing.
WARNINGRepo Compliancereadme parser warnings trimmed section changelog1
- Category
- Repo Compliance
- Occurrences
- 1
- Severity
- warning
Sample message
The "Changelog" section is too long and was truncated. A maximum of 5000 characters is supported.
External Connections
Potential connections found in static code analysis.
Outbound calls
209
External assets
4
Incoming endpoints
5
Notable Domains
paypal.com49 · outbound
developer.paypal.com32 · outbound
sandbox.paypal.com31 · outbound
ratepay.com16 · outbound
woocommerce.com16 · outbound
js.braintreegateway.com5 · outbound
Platform / Reference Domains
github.com13 · platform/reference
developer.wordpress.org3 · platform/reference
core.trac.wordpress.org2 · platform/reference
opensource.org2 · platform/reference
wordpress.org1 · platform/reference
External Asset Domains
paypalobjects.com10 · asset + outbound
google.com4 · asset + outbound
fonts.googleapis.com2 · asset + outbound
Incoming Endpoints
wp_ajax_nopriv_public
wp_ajax
Admin AJAX endpoints1
wp_ajax_wc_shipment_tracking_save_formauthenticated
wp_ajax
Score History
3 score snapshots
v4.1.1
37
Latest
- Findings
- 304
- Errors
- 194
- Warnings
- 110
- Check
- 2.0.0
v4.1.0
37
Score
- Findings
- 304
- Errors
- 194
- Warnings
- 110
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 37 | 304 | 194 | 110 | v4.1.1 | 2.0.0 |
| 37 | 304 | 194 | 110 | v4.1.0 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Author
Issue
Domain
Related
WooCommerce22 scoreWooPayments: Integrated WooCommerce Payments30 scoreWooCommerce Stripe Payment Gateway30 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder35 scoreLiteSpeed Cache35 scoreAkismet Anti-spam: Spam Protection35 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreWP Mail SMTP by WPForms – The Most Popular SMTP and Email Log Plugin30 scoreJetpack – WP Security, Backup, Speed, & Growth22 scorePopup Builder & Popup Maker for WordPress – OptinMonster Email Marketing and Lead Generation32 scoreGoogle for WooCommerce37 score
Author
Issue
Domain
Related
WooCommerce22 scoreWooPayments: Integrated WooCommerce Payments30 scoreWooCommerce Stripe Payment Gateway30 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder35 scoreLiteSpeed Cache35 scoreAkismet Anti-spam: Spam Protection35 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreWP Mail SMTP by WPForms – The Most Popular SMTP and Email Log Plugin30 scoreJetpack – WP Security, Backup, Speed, & Growth22 scorePopup Builder & Popup Maker for WordPress – OptinMonster Email Marketing and Lead Generation32 scoreGoogle for WooCommerce37 score
Related Plugins
GetResponse Official
4k+ active installs
100
Live Carts for WooCommerce: Track Real-Time, Abandoned, and Converted Carts!
600 active installs
100
Visa Acceptance Solutions
10k+ active installs
100
Helcim for WooCommerce
800 active installs
99
Lemon Squeezy — Sell Digital Products, Subscriptions, and Licenses
500 active installs
99
Quiz Builder for WooCommerce – Product Recommendations
2k+ active installs
99