Securely accept payments, synchronize sales, and seamlessly manage inventory and product data between WooCommerce and Square POS.
Prioritized issue groups from the latest Plugin Check scan
Maintainability
259
11 issue groups
Security
7
2 issue groups
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "'wc_payment_gateway_' . $this->get_id() . '_supports_' . str_replace( '-', '_', $name )".
Sample message
Use of a direct database call is discouraged.
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$action_key".
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "{$this->identifier}_cron_interval".
Sample message
Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "DOING_SQUARE_SYNC".
Sample message
Unescaped parameter $meta_key_in used in $wpdb->query()\n$meta_key_in assigned unsafely at line 1501.
Sample message
Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "WC_Square_Access_Token_Email".
Sample message
The plugin name includes a restricted term. Your chosen plugin name - "WooCommerce Square" - contains the restricted term "woocommerce" which cannot be used within in your plugin name, unless your plugin name contains one of the allowed patterns: "for woocommerce", "with woocommerce", "using woocommerce", or "and woocommerce". The term must still not appear anywhere else in your name.
Sample message
Detected usage of a non-sanitized input variable: $_REQUEST['data']
Sample message
Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "wc_square".
Sample message
In footer ($in_footer) is not set explicitly wp_enqueue_script; It is recommended to load scripts in the footer. Please set this value to `true` to load it in the footer, or explicitly `false` if it should be loaded in the header.
Sample message
The "/vendor" directory using composer exists, but "composer.json" file is missing.
Potential connections found in static code analysis.
Outbound calls
278
External assets
0
Incoming endpoints
22
No external asset domains detected.
register_rest_route
register_rest_route
wp_ajax
wp_ajax
wp_ajax
wp_ajax
wp_ajax
wp_ajax
wp_ajax
wp_ajax
wp_ajax
wp_ajax
wp_ajax
wp_ajax
wp_ajax
wp_ajax
wp_ajax
wp_ajax
2 more hidden
3 score snapshots
v5.4.2
79
Latest
v5.4.1
78
Score
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 79 | 266 | 0 | 266 | v5.4.2 | 2.0.0 |
| 78 | 272 | 6 | 266 | v5.4.1 | 2.0.0 |
Author, categories, issues, domains, and nearby plugins.