Turn any device into a register for your WooCommerce store — same catalog, stock and prices, online or off.
31
Score
75
Errors
229
Warnings
+0
Change
Category Scores
Security0
Repo97
Performance98
Maintainability31
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Maintainability
149
16 issue groups
Security
115
7 issue groups
I18n
31
2 issue groups
WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.47
- Category
- Security
- Occurrences
- 47
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.37
- Category
- Maintainability
- Occurrences
- 37
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().35
- Category
- Maintainability
- Occurrences
- 35
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
WARNINGSecurityUnfinished PrepareReplacement variables found, but no valid placeholders found in the query.24
- Category
- Security
- Occurrences
- 24
- Severity
- warning
Sample message
Replacement variables found, but no valid placeholders found in the query.
ERRORI18nText Domain MismatchMismatched text domain. Expected 'woocommerce-pos' but got 'login'.23
- Category
- I18n
- Occurrences
- 23
- Severity
- error
Sample message
Mismatched text domain. Expected 'woocommerce-pos' but got 'login'.
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$error_string'.18
- Category
- Security
- Occurrences
- 18
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$error_string'.
WARNINGMaintainabilityslow db query meta keyDetected usage of meta_key, possible slow query.15
- Category
- Maintainability
- Occurrences
- 15
- Severity
- warning
Sample message
Detected usage of meta_key, possible slow query.
WARNINGSecurityDatabase parameter is not escapedUnescaped parameter $meta_id used in $wpdb->get_results()\n$meta_id assigned unsafely at line 319.10
- Category
- Security
- Occurrences
- 10
- Severity
- warning
Sample message
Unescaped parameter $meta_id used in $wpdb->get_results()\n$meta_id assigned unsafely at line 319.
WARNINGMaintainabilityslow db query meta queryDetected usage of meta_query, possible slow query.9
- Category
- Maintainability
- Occurrences
- 9
- Severity
- warning
Sample message
Detected usage of meta_query, possible slow query.
WARNINGMaintainabilityNon-prefixed hook nameHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "login_body_class".9
- Category
- Maintainability
- Occurrences
- 9
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "login_body_class".
Show 15 moreShow less
ERRORMaintainabilityMissing direct file access protection9
- Category
- Maintainability
- Occurrences
- 9
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
WARNINGMaintainabilityNon-prefixed global variable8
- Category
- Maintainability
- Occurrences
- 8
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$classes".
ERRORI18nMissing Arg Domain8
- Category
- I18n
- Occurrences
- 8
- Severity
- error
Sample message
Missing $domain parameter in function call to _e().
WARNINGMaintainabilityslow db query tax query7
- Category
- Maintainability
- Occurrences
- 7
- Severity
- warning
Sample message
Detected usage of tax_query, possible slow query.
WARNINGSecurityInput is not sanitized6
- Category
- Security
- Occurrences
- 6
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_POST['_wpnonce']
ERRORSecurityUnsafe printing function5
- Category
- Security
- Occurrences
- 5
- Severity
- error
Sample message
All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.
WARNINGSecurityRequest data is not unslashed5
- Category
- Security
- Occurrences
- 5
- Severity
- warning
Sample message
$_POST['_wpnonce'] not unslashed before sanitization. Use wp_unslash() or similar
ERRORMaintainabilityNon Enqueued Stylesheet5
- Category
- Maintainability
- Occurrences
- 5
- Severity
- error
Sample message
Stylesheets must be registered/enqueued via wp_enqueue_style()
WARNINGMaintainabilityDiscouraged PHP function3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
The use of function ini_set() is discouraged
ERRORMaintainabilityunlink unlink3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- error
Sample message
unlink() is discouraged. Use wp_delete_file() to delete a file.
WARNINGMaintainabilitytrademarked term3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
The plugin name includes a restricted term. Your chosen plugin name - "WCPOS - Point of Sale (POS) plugin for WooCommerce" - contains the restricted term "plugin" which cannot be used at all in your plugin name.
WARNINGMaintainabilityDynamic hook name2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "$hook_name".
WARNINGMaintainabilityerror log set error handler2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
set_error_handler() found. Debug code should not normally be used in production.
ERRORMaintainabilityNot Allowed1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
Use of heredoc syntax (<<<) is not allowed; use standard strings or inline HTML instead
WARNINGMaintainabilityprevent path disclosure error reporting1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
error_reporting() can lead to full path disclosure.
External Connections
Potential connections found in static code analysis.
Outbound calls
297
External assets
1
Incoming endpoints
2
Notable Domains
wcpos.com58 · outbound
php.net14 · outbound
docs.wcpos.com13 · outbound
tools.ietf.org10 · outbound
cdn.jsdelivr.net6 · outbound
json-schema.org4 · outbound
Platform / Reference Domains
opensource.org110 · platform/reference
github.com12 · platform/reference
w3.org6 · platform/reference
wordpress.org4 · platform/reference
External Asset Domains
No external asset domains detected.
Incoming Endpoints
No public endpoints detected.
Admin AJAX endpoints2
admin_post_wcpos_track_upgrade_clickauthenticated
admin_post
wp_ajax_wcpos_track_upgrade_click_ajaxauthenticated
wp_ajax
Score History
8 score snapshots
v1.9.16
31
Latest
- Findings
- 304
- Errors
- 75
- Warnings
- 229
- Check
- 2.0.0
v1.9.14
31
Score
- Findings
- 304
- Errors
- 75
- Warnings
- 229
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 31 | 304 | 75 | 229 | v1.9.16 | 2.0.0 |
| 31 | 304 | 75 | 229 | v1.9.14 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Author
Issue
Domain
Related
WooCommerce22 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder39 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreAkismet Anti-spam: Spam Protection35 scoreAll-in-One WP Migration and Backup34 scorePopup Builder & Popup Maker for WordPress – OptinMonster Email Marketing and Lead Generation34 scoreWooCommerce PayPal Payments37 scoreMailchimp for WooCommerce22 scoreDownload Manager22 scoreMercado Pago payments for WooCommerce30 scoreGeeky Bot – AI Sales Assistant for WooCommerce100 scoreGetResponse Official100 scoreQuiz Builder for WooCommerce – Product Recommendations99 score
Author
Issue
Domain
Related
WooCommerce22 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder39 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreAkismet Anti-spam: Spam Protection35 scoreAll-in-One WP Migration and Backup34 scorePopup Builder & Popup Maker for WordPress – OptinMonster Email Marketing and Lead Generation34 scoreWooCommerce PayPal Payments37 scoreMailchimp for WooCommerce22 scoreDownload Manager22 scoreMercado Pago payments for WooCommerce30 scoreGeeky Bot – AI Sales Assistant for WooCommerce100 scoreGetResponse Official100 scoreQuiz Builder for WooCommerce – Product Recommendations99 score
Related Plugins
Geeky Bot – AI Sales Assistant for WooCommerce
6k+ active installs
100
GetResponse Official
4k+ active installs
100
Quiz Builder for WooCommerce – Product Recommendations
2k+ active installs
99
Shop as Client for WooCommerce – Manual, Phone & Email Orders
600 active installs
99
Lemon Squeezy — Sell Digital Products, Subscriptions, and Licenses
500 active installs
99
BjornTech Swish for WooCommerce
2k+ active installs
98