Accept Square payments, donations, and subscriptions on WordPress with a secure payment form builder.
23
Score
908
Errors
1,820
Warnings
+1
Change
Category Scores
Security0
Repo86
Performance100
Maintainability0
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Maintainability
1,911
20 issue groups
Security
540
3 issue groups
I18n
256
2 issue groups
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$VARS".1,560
- Category
- Maintainability
- Occurrences
- 1,560
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$VARS".
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '" <a href='{$skip_url}' class='button button-small button-secondary'>{$use_plugin_anonymously_text}</a>"'.525
- Category
- Security
- Occurrences
- 525
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '" <a href='{$skip_url}' class='button button-small button-secondary'>{$use_plugin_anonymously_text}</a>"'.
ERRORI18nText Domain MismatchMismatched text domain. Expected 'wp-easy-pay' but got 'wp_easy_pay'.238
- Category
- I18n
- Occurrences
- 238
- Severity
- error
Sample message
Mismatched text domain. Expected 'wp-easy-pay' but got 'wp_easy_pay'.
WARNINGMaintainabilityNon-prefixed functionFunctions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "_fs_text".117
- Category
- Maintainability
- Occurrences
- 117
- Severity
- warning
Sample message
Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "_fs_text".
ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;58
- Category
- Maintainability
- Occurrences
- 58
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
WARNINGMaintainabilityNon-prefixed classClasses declared by a theme/plugin should start with the theme/plugin prefix. Found: "FLWPEasyPayModule".56
- Category
- Maintainability
- Occurrences
- 56
- Severity
- warning
Sample message
Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "FLWPEasyPayModule".
WARNINGMaintainabilityNon-prefixed constantGlobal constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "FS_API__ADDRESS".26
- Category
- Maintainability
- Occurrences
- 26
- Severity
- warning
Sample message
Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "FS_API__ADDRESS".
ERRORMaintainabilitycurl curl setoptUsing cURL functions is highly discouraged. Use wp_remote_get() instead.22
- Category
- Maintainability
- Occurrences
- 22
- Severity
- error
Sample message
Using cURL functions is highly discouraged. Use wp_remote_get() instead.
ERRORI18nMissing Arg DomainMissing $domain parameter in function call to __().18
- Category
- I18n
- Occurrences
- 18
- Severity
- error
Sample message
Missing $domain parameter in function call to __().
WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.13
- Category
- Maintainability
- Occurrences
- 13
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
Show 15 moreShow less
ERRORSecurityException output is not escaped13
- Category
- Security
- Occurrences
- 13
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"[{$http_header[0]}] $http_body"'.
ERRORMaintainabilityOffloaded Content10
- Category
- Maintainability
- Occurrences
- 10
- Severity
- error
Sample message
Found call to wp_enqueue_script() with external resource. Offloading scripts to your servers or any remote service is disallowed.
WARNINGMaintainabilityerror log trigger error10
- Category
- Maintainability
- Occurrences
- 10
- Severity
- warning
Sample message
trigger_error() found. Debug code should not normally be used in production.
WARNINGMaintainabilityNo Caching9
- Category
- Maintainability
- Occurrences
- 9
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
ERRORMaintainabilitybadly named files7
- Category
- Maintainability
- Occurrences
- 7
- Severity
- error
Sample message
File and folder names must not contain spaces or special characters.
WARNINGMaintainabilityMissing Version4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- warning
Sample message
Resource version not set in call to wp_enqueue_script(). This means new versions of the script may not always be loaded due to browser caching.
WARNINGMaintainabilityNon-prefixed hook name3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "fs_plugins_api".
WARNINGMaintainabilityerror log error log3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
error_log() found. Debug code should not normally be used in production.
WARNINGMaintainabilitytrademarked term3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
The plugin name includes a restricted term. Your chosen plugin name - "WP Easy Pay – Payment and Donation Form Builder for Square" - contains the restricted term "wp" which cannot be used at all in your plugin name.
ERRORMaintainabilityShort PHP open tag found2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
Short PHP opening tag used with echo; expected "<?php echo basename ..." but found "<?= basename ..."
WARNINGSecurityDatabase parameter is not escaped2
- Category
- Security
- Occurrences
- 2
- Severity
- warning
Sample message
Unescaped parameter $table_name used in $wpdb->get_results()\n$table_name assigned unsafely at line 7.
WARNINGMaintainabilitySchema Change2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
Attempting a database schema change is discouraged.
WARNINGMaintainabilityslow db query meta query2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
Detected usage of meta_query, possible slow query.
WARNINGMaintainabilityerror log print r2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
print_r() found. Debug code should not normally be used in production.
ERRORMaintainabilitycurl curl error2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
Using cURL functions is highly discouraged. Use wp_remote_get() instead.
External Connections
Potential connections found in static code analysis.
Outbound calls
273
External assets
13
Incoming endpoints
14
Notable Domains
wpeasypay.com20 · outbound
php.net11 · outbound
freemius.com10 · outbound
tools.ietf.org8 · outbound
benalman.com4 · outbound
connect.squareup.com3 · outbound
Platform / Reference Domains
gnu.org116 · platform/reference
w3.org17 · platform/reference
github.com8 · platform/reference
wordpress.org8 · platform/reference
api.wordpress.org2 · platform/reference
make.wordpress.org2 · platform/reference
core.trac.wordpress.org1 · platform/reference
opensource.org1 · platform/reference
External Asset Domains
stackpath.bootstrapcdn.com4 · asset
challenges.cloudflare.com3 · asset + outbound
sandbox.web.squarecdn.com3 · asset + outbound
google.com2 · asset
web.squarecdn.com2 · asset
Incoming Endpoints
wp_ajax_nopriv_wpep_apply_couponpublic
wp_ajax
wp_ajax_nopriv_wpep_calculate_fee_datapublic
wp_ajax
wp_ajax_nopriv_wpep_delete_cofpublic
wp_ajax
wp_ajax_nopriv_wpep_file_uploadpublic
wp_ajax
wp_ajax_nopriv_wpep_payment_requestpublic
wp_ajax
Admin AJAX endpoints9
admin_post_fs_clone_resolutionauthenticated
admin_post
wp_ajax_fs_dismiss_notice_action_{$ajax_action_suffix}authenticated
wp_ajax
wp_ajax_fs_toggle_debug_modeauthenticated
wp_ajax
wp_ajax_wpep_apply_couponauthenticated
wp_ajax
wp_ajax_wpep_calculate_fee_dataauthenticated
wp_ajax
wp_ajax_wpep_delete_cofauthenticated
wp_ajax
wp_ajax_wpep_file_uploadauthenticated
wp_ajax
wp_ajax_wpep_payment_refundauthenticated
wp_ajax
wp_ajax_wpep_payment_requestauthenticated
wp_ajax
Score History
3 score snapshots
v4.5.3
23
Latest
- Findings
- 2,728
- Errors
- 908
- Warnings
- 1,820
- Check
- 2.0.0
v4.5.1
22
Score
- Findings
- 2,745
- Errors
- 910
- Warnings
- 1,835
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 23 | 2,728 | 908 | 1,820 | v4.5.3 | 2.0.0 |
| 22 | 2,745 | 910 | 1,835 | v4.5.1 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Author
Category
Issue
Domain
Related
Yoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce21 scoreAkismet Anti-spam: Spam Protection35 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder39 scoreClassic Editor63 scoreLiteSpeed Cache35 scoreAll-in-One WP Migration and Backup34 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreForminator Forms – Contact Form, Payment Form & Custom Form Builder24 scoreSureForms – Contact Form Builder, AI Forms, Payment Form, Survey & Quiz29 scoreFormidable Forms – WordPress Form Builder for Contact Forms, Calculators, Quizzes & More21 scoreCF7 Apps – Honeypot, Database, Redirection, Webhook, and Addons for Contact Form 724 scorePassword Protected — Lock Entire Site, Pages, Posts, Categories, and Partial Content26 score
Author
Category
Issue
Domain
Related
Yoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce21 scoreAkismet Anti-spam: Spam Protection35 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder39 scoreClassic Editor63 scoreLiteSpeed Cache35 scoreAll-in-One WP Migration and Backup34 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreForminator Forms – Contact Form, Payment Form & Custom Form Builder24 scoreSureForms – Contact Form Builder, AI Forms, Payment Form, Survey & Quiz29 scoreFormidable Forms – WordPress Form Builder for Contact Forms, Calculators, Quizzes & More21 scoreCF7 Apps – Honeypot, Database, Redirection, Webhook, and Addons for Contact Form 724 scorePassword Protected — Lock Entire Site, Pages, Posts, Categories, and Partial Content26 score
Related Plugins
FormFacade – Embed Google Forms in your website
1k+ active installs
83
Flutterwave Payments
600 active installs
79
76
Custom Form Builder, Contact Forms, Payment Forms, Surveys, Polls
900 active installs
68
SureDonation – Donation Forms, Fundraising Campaigns & Donor Management
1k+ active installs
60
AidWP – Donation & Payment Forms (Stripe Powered)
800 active installs
39