WooCommerce Square

Securely accept payments, synchronize sales, and seamlessly manage inventory and product data between WooCommerce and Square POS.

v5.4.0WooCommerceUpdated 2026-05-28Added Jan 29, 201880k+ installs42% rating90% support resolved
78
Score
6
Errors
266
Warnings
+0
Change

Category Scores

Security78
Repo100
Performance100
Maintainability49

Top Issues by Category

Issues Details

272 issues found in latest scan

WARNING150
WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedHooknameFound

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "'wc_payment_gateway_' . $this->get_id() . '_supports_' . str_replace( '-', '_', $name )".

WARNING28
WordPress.DB.DirectDatabaseQuery.DirectQuery

Use of a direct database call is discouraged.

WARNING26
WordPress.DB.DirectDatabaseQuery.NoCaching

Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().

WARNING26
WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedVariableFound

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$action_key".

WARNING12
WordPress.NamingConventions.PrefixAllGlobals.DynamicHooknameFound

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "{$this->identifier}_cron_interval".

WARNING8
WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedConstantFound

Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "DOING_SQUARE_SYNC".

ERROR6
missing_direct_file_access_protection

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

WARNING5
PluginCheck.Security.DirectDB.UnescapedDBParameter

Unescaped parameter $meta_key_in used in $wpdb->query()\n$meta_key_in assigned unsafely at line 1501.

WARNING3
WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedClassFound

Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "WC_Square_Access_Token_Email".

WARNING3
trademarked_term

The plugin name includes a restricted term. Your chosen plugin name - "WooCommerce Square" - contains the restricted term "woocommerce" which cannot be used within in your plugin name, unless your plugin name contains one of the allowed patterns: "for woocommerce", "with woocommerce", "using woocommerce", or "and woocommerce". The term must still not appear anywhere else in your name.

WARNING2
WordPress.Security.ValidatedSanitizedInput.InputNotSanitized

Detected usage of a non-sanitized input variable: $_REQUEST['data']

WARNING1
WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedFunctionFound

Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "wc_square".

WARNING1
WordPress.WP.EnqueuedResourceParameters.NotInFooter

In footer ($in_footer) is not set explicitly wp_enqueue_script; It is recommended to load scripts in the footer. Please set this value to `true` to load it in the footer, or explicitly `false` if it should be loaded in the header.

WARNING1
missing_composer_json_file

The "/vendor" directory using composer exists, but "composer.json" file is missing.

Latest Snapshot

Findings

272

Errors

6

Warnings

266

Score History

First score snapshot

First scan completed Jun 20, 2026

v5.4.0 · Plugin Check 2.0.0 · Model 2026.06-mvp-static-v2

Jun 20, 2026

v5.4.0

78

Latest

Findings
272
Errors
6
Warnings
266
Plugin Check
2.0.0
Model
2026.06-mvp-static-v2

Related Plugins