Quaderno: Global Tax & Invoicing Automation for WooCommerce

Automate global tax calculations and compliant invoicing for WooCommerce. Handle sales tax, VAT, GST worldwide with instant reports.

v2.7.16polimorficoUpdated Added 500 installs94% rating
35
Score
4
Errors
70
Warnings
+0
Change

Category Scores

Security16
Repo90
Performance100
Maintainability85

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

74 findings

Security

50

4 issue groups

Maintainability

21

8 issue groups

I18n

2

1 issue group

Supply Chain

1

1 issue group

WARNINGSecurityMissing nonce verificationProcessing form data without nonce verification.19
Category
Security
Occurrences
19
Severity
warning

Sample message

Processing form data without nonce verification.

WARNINGSecurityRequest data is not unslashed$_POST['alert_id'] not unslashed before sanitization. Use wp_unslash() or similar13
Category
Security
Occurrences
13
Severity
warning

Sample message

$_POST['alert_id'] not unslashed before sanitization. Use wp_unslash() or similar

WARNINGSecurityInput is not validatedDetected usage of a possibly undefined superglobal array index: $_POST['billing_address_1']. Check that the array index exists before using it.10
Category
Security
Occurrences
10
Severity
warning

Sample message

Detected usage of a possibly undefined superglobal array index: $_POST['billing_address_1']. Check that the array index exists before using it.

WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.8
Category
Security
Occurrences
8
Severity
warning

Sample message

Processing form data without nonce verification.

WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.7
Category
Maintainability
Occurrences
7
Severity
warning

Sample message

Use of a direct database call is discouraged.

WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().7
Category
Maintainability
Occurrences
7
Severity
warning

Sample message

Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().

WARNINGMaintainabilityNot In FooterIn footer ($in_footer) is not set explicitly wp_enqueue_script; It is recommended to load scripts in the footer. Please set this value to `true` to load it in the footer, or explicitly `false` if it should be loaded in the header.2
Category
Maintainability
Occurrences
2
Severity
warning

Sample message

In footer ($in_footer) is not set explicitly wp_enqueue_script; It is recommended to load scripts in the footer. Please set this value to `true` to load it in the footer, or explicitly `false` if it should be loaded in the header.

ERRORI18nMissing Translators CommentA function call to _n() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.2
Category
I18n
Occurrences
2
Severity
error

Sample message

A function call to _n() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.

ERRORMaintainabilitydate datedate() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.1
Category
Maintainability
Occurrences
1
Severity
error

Sample message

date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.

WARNINGMaintainabilityNon-prefixed classClasses declared by a theme/plugin should start with the theme/plugin prefix. Found: "WooCommerce_Quaderno".1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "WooCommerce_Quaderno".

Show 4 more
WARNINGMaintainabilityMissing Version1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

Resource version not set in call to wp_enqueue_script(). This means new versions of the script may not always be loaded due to browser caching.

ERRORSupply ChainHidden files included1
Category
Supply Chain
Occurrences
1
Severity
error

Sample message

Hidden files are not permitted.

WARNINGMaintainabilitymismatched plugin name1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

Plugin name "Quaderno: Global Tax & Invoicing Automation for WooCommerce" is different from the name declared in plugin header "Quaderno for WooCommerce".

WARNINGMaintainabilitytrademarked term1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

The plugin slug includes a restricted term. Your plugin slug - "woocommerce-quaderno" - contains the restricted term "woocommerce" which cannot be used within in your plugin slug, unless your plugin slug contains one of the allowed patterns: "for woocommerce", "with woocommerce", "using woocommerce", or "and woocommerce". The term must still not appear anywhere else in your plugin slug.

External Connections

Potential connections found in static code analysis.

6 domains

Outbound calls

23

External assets

0

Incoming endpoints

1

Notable Domains

quadernoapp.com3 · outbound
quaderno.io1 · outbound
support.quaderno.io1 · outbound

Platform / Reference Domains

opensource.org15 · platform/reference
wordpress.org2 · platform/reference
gnu.org1 · platform/reference

External Asset Domains

No external asset domains detected.

Incoming Endpoints

No public endpoints detected.

Admin AJAX endpoints1
wp_ajax_dismiss_quaderno_alertauthenticated

wp_ajax

Score History

2 score snapshots

+0
1007550250Jun 25, 2026, 09:04 PM UTC Score 35/100 Plugin v2.7.15 Plugin Check 2.0.0 4 errors, 70 warningsJun 30, 2026, 01:05 PM UTC Score 35/100 Plugin v2.7.16 Plugin Check 2.0.0 4 errors, 70 warningsJun 25, 2026Jun 30, 2026

v2.7.16

35

Latest

Findings
74
Errors
4
Warnings
70
Check
2.0.0

v2.7.15

35

Score

Findings
74
Errors
4
Warnings
70
Check
2.0.0

Relationship Map

Author, categories, issues, domains, and nearby plugins.

32 nodes

Related Plugins