Lightweight, user-friendly plugin to sell products/services on WordPress. Easily add a shopping cart and start accepting orders in minutes.
22
Score
796
Errors
536
Warnings
+0
Change
Category Scores
Security0
Repo79
Performance100
Maintainability0
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Security
1,088
8 issue groups
Maintainability
143
13 issue groups
I18n
62
4 issue groups
ERRORSecurityUnsafe printing functionAll output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.333
- Category
- Security
- Occurrences
- 333
- Severity
- error
Sample message
All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$ajax_post_url'.235
- Category
- Security
- Occurrences
- 235
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$ajax_post_url'.
WARNINGSecurityRequest data is not unslashed$_COOKIE['ap_id'] not unslashed before sanitization. Use wp_unslash() or similar188
- Category
- Security
- Occurrences
- 188
- Severity
- warning
Sample message
$_COOKIE['ap_id'] not unslashed before sanitization. Use wp_unslash() or similar
ERRORSecurityException output is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"Cannot save property `{$key}` containing an API resource of type "'.78
- Category
- Security
- Occurrences
- 78
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"Cannot save property `{$key}` containing an API resource of type "'.
WARNINGSecurityInput is not validatedDetected usage of a possibly undefined superglobal array index: $_POST['post_ID']. Check that the array index exists before using it.73
- Category
- Security
- Occurrences
- 73
- Severity
- warning
Sample message
Detected usage of a possibly undefined superglobal array index: $_POST['post_ID']. Check that the array index exists before using it.
WARNINGSecurityMissing nonce verificationProcessing form data without nonce verification.66
- Category
- Security
- Occurrences
- 66
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.58
- Category
- Security
- Occurrences
- 58
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_COOKIE['ap_id']57
- Category
- Security
- Occurrences
- 57
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_COOKIE['ap_id']
WARNINGMaintainabilityNon-prefixed functionFunctions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "check_shipping_region_str".35
- Category
- Maintainability
- Occurrences
- 35
- Severity
- warning
Sample message
Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "check_shipping_region_str".
ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;33
- Category
- Maintainability
- Occurrences
- 33
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
Show 15 moreShow less
ERRORI18nMissing Arg Domain28
- Category
- I18n
- Occurrences
- 28
- Severity
- error
Sample message
Missing $domain parameter in function call to __().
ERRORI18nNon Singular String Literal Text19
- Category
- I18n
- Occurrences
- 19
- Severity
- error
Sample message
The $text parameter must be a single text string literal. Found: $baseShipping
WARNINGMaintainabilityDynamic hook name12
- Category
- Maintainability
- Occurrences
- 12
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "PayPal_Utility_Functions::hook('generate_paypal_js_sdk_args')".
WARNINGMaintainabilityNon-prefixed constant11
- Category
- Maintainability
- Occurrences
- 11
- Severity
- warning
Sample message
Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "WP_CART_CURRENCY_SYMBOL".
ERRORMaintainabilitydate date10
- Category
- Maintainability
- Occurrences
- 10
- Severity
- error
Sample message
date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.
ERRORI18nText Domain Mismatch9
- Category
- I18n
- Occurrences
- 9
- Severity
- error
Sample message
Mismatched text domain. Expected 'wordpress-simple-paypal-shopping-cart' but got 'nggallery'.
WARNINGMaintainabilityNon-prefixed hook name8
- Category
- Maintainability
- Occurrences
- 8
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "plugin_locale".
ERRORMaintainabilityfile system operations fopen7
- Category
- Maintainability
- Occurrences
- 7
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fopen().
ERRORMaintainabilityfile system operations fclose6
- Category
- Maintainability
- Occurrences
- 6
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fclose().
ERRORMaintainabilityfile system operations fwrite6
- Category
- Maintainability
- Occurrences
- 6
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fwrite().
ERRORI18nMissing Translators Comment6
- Category
- I18n
- Occurrences
- 6
- Severity
- error
Sample message
A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.
WARNINGMaintainabilityNot In Footer5
- Category
- Maintainability
- Occurrences
- 5
- Severity
- warning
Sample message
In footer ($in_footer) is not set explicitly wp_register_script; It is recommended to load scripts in the footer. Please set this value to `true` to load it in the footer, or explicitly `false` if it should be loaded in the header.
WARNINGMaintainabilityNon-prefixed global variable4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$after_cart_reset_redirect_url".
WARNINGMaintainabilityNon-prefixed class3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "WPSPSC_COUPON_ITEM".
WARNINGMaintainabilityerror log trigger error3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
trigger_error() found. Debug code should not normally be used in production.
External Connections
Not analyzed yet.
Score History
First score snapshot
v5.3.0
22
Latest
- Findings
- 1,332
- Errors
- 796
- Warnings
- 536
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 22 | 1,332 | 796 | 536 | v5.3.0 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueRelated
Relationship links
Issue
Related
WooCommerce22 scoreClassic Editor63 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreAkismet Anti-spam: Spam Protection35 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreAll-in-One WP Migration and Backup34 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreDuplicate Page40 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreWordPress Importer25 scorePopup Builder & Popup Maker for WordPress – OptinMonster Email Marketing and Lead Generation32 scoreWooCommerce PayPal Payments37 scoreMailchimp for WooCommerce24 scoreDownload Manager22 score
Issue
Related
WooCommerce22 scoreClassic Editor63 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreAkismet Anti-spam: Spam Protection35 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreAll-in-One WP Migration and Backup34 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreDuplicate Page40 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreWordPress Importer25 scorePopup Builder & Popup Maker for WordPress – OptinMonster Email Marketing and Lead Generation32 scoreWooCommerce PayPal Payments37 scoreMailchimp for WooCommerce24 scoreDownload Manager22 score
Related Plugins
GetResponse Official
4k+ active installs
100
Live Carts for WooCommerce: Track Real-Time, Abandoned, and Converted Carts!
600 active installs
100
CoCart – Headless REST API for WooCommerce
1k+ active installs
99
Lemon Squeezy — Sell Digital Products, Subscriptions, and Licenses
500 active installs
99
Quiz Builder for WooCommerce – Product Recommendations
2k+ active installs
99
RaCar Clear Cart for WooCommerce
400 active installs
99