Flashy is an all-in-one marketing platform for e-commerce websites to grow sales.
26
Score
432
Errors
186
Warnings
+0
Change
Category Scores
Security0
Repo88
Performance100
Maintainability13
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Security
375
12 issue groups
I18n
149
2 issue groups
Maintainability
63
11 issue groups
ERRORI18nText Domain MismatchMismatched text domain. Expected 'wp-flashy-marketing-automation' but got "flashy".146
- Category
- I18n
- Occurrences
- 146
- Severity
- error
Sample message
Mismatched text domain. Expected 'wp-flashy-marketing-automation' but got "flashy".
ERRORSecurityUnsafe printing functionAll output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.131
- Category
- Security
- Occurrences
- 131
- Severity
- error
Sample message
All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$account'.72
- Category
- Security
- Occurrences
- 72
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$account'.
WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.36
- Category
- Security
- Occurrences
- 36
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_COOKIE[$name]30
- Category
- Security
- Occurrences
- 30
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_COOKIE[$name]
WARNINGSecurityRequest data is not unslashed$_COOKIE[$name] not unslashed before sanitization. Use wp_unslash() or similar30
- Category
- Security
- Occurrences
- 30
- Severity
- warning
Sample message
$_COOKIE[$name] not unslashed before sanitization. Use wp_unslash() or similar
WARNINGSecurityInterpolated SQL is not preparedUse placeholders and $wpdb->prepare(); found interpolated variable $guests_per_page at "SELECT {$guest_table}.customer_id, {$guest_order}.order_id FROM {$guest_table} JOIN {$guest_order} ON {$guest_table}.customer_id = {$guest_order}.customer_id WHERE {$guest_table}.user_id IS NULL GROUP BY {$guest_table}.customer_id LIMIT $offset,$guests_per_page"23
- Category
- Security
- Occurrences
- 23
- Severity
- warning
Sample message
Use placeholders and $wpdb->prepare(); found interpolated variable $guests_per_page at "SELECT {$guest_table}.customer_id, {$guest_order}.order_id FROM {$guest_table} JOIN {$guest_order} ON {$guest_table}.customer_id = {$guest_order}.customer_id WHERE {$guest_table}.user_id IS NULL GROUP BY {$guest_table}.customer_id LIMIT $offset,$guests_per_page"
WARNINGSecurityInput is not validatedDetected usage of a possibly undefined superglobal array index: $_GET['flashy_export']. Check that the array index exists before using it.22
- Category
- Security
- Occurrences
- 22
- Severity
- warning
Sample message
Detected usage of a possibly undefined superglobal array index: $_GET['flashy_export']. Check that the array index exists before using it.
ERRORMaintainabilitycurl curl setoptUsing cURL functions is highly discouraged. Use wp_remote_get() instead.13
- Category
- Maintainability
- Occurrences
- 13
- Severity
- error
Sample message
Using cURL functions is highly discouraged. Use wp_remote_get() instead.
ERRORSecuritySQL query is not preparedUse placeholders and $wpdb->prepare(); found $check_table12
- Category
- Security
- Occurrences
- 12
- Severity
- error
Sample message
Use placeholders and $wpdb->prepare(); found $check_table
Show 15 moreShow less
ERRORMaintainabilityMissing direct file access protection10
- Category
- Maintainability
- Occurrences
- 10
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
WARNINGSecurityMissing nonce verification9
- Category
- Security
- Occurrences
- 9
- Severity
- warning
Sample message
Processing form data without nonce verification.
ERRORMaintainabilityShort PHP open tag found6
- Category
- Maintainability
- Occurrences
- 6
- Severity
- error
Sample message
Short PHP opening tag used with echo; expected "<?php echo $flashy_id ..." but found "<?= $flashy_id ..."
WARNINGMaintainabilityDynamic hook name6
- Category
- Maintainability
- Occurrences
- 6
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "$this->identifier . '_cron_interval'".
ERRORMaintainabilityOffloaded Content5
- Category
- Maintainability
- Occurrences
- 5
- Severity
- error
Sample message
Offloading images, js, css, and other scripts to your servers or any remote service is disallowed.
ERRORMaintainabilitystrip tags strip tags5
- Category
- Maintainability
- Occurrences
- 5
- Severity
- error
Sample message
strip_tags() is discouraged. Use the more comprehensive wp_strip_all_tags() instead.
WARNINGMaintainabilityDirect Query4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGMaintainabilityNo Caching4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
WARNINGMaintainabilityNon-prefixed function4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- warning
Sample message
Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "balance_points".
ERRORSecurityException output is not escaped4
- Category
- Security
- Occurrences
- 4
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"API call to $url failed: "'.
WARNINGSecurityDatabase parameter is not escaped3
- Category
- Security
- Occurrences
- 3
- Severity
- warning
Sample message
Unescaped parameter $guest_table used in $wpdb->get_results()\n$guest_table assigned unsafely at line 149.
ERRORSecurityDatabase parameter is not escaped3
- Category
- Security
- Occurrences
- 3
- Severity
- error
Sample message
Unescaped parameter $column used in $wpdb->get_row()\n$column assigned unsafely at line 268.
ERRORMaintainabilitydate date3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- error
Sample message
date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.
WARNINGMaintainabilityNon-prefixed class3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "WP_Async_Request".
ERRORI18nMissing Translators Comment3
- Category
- I18n
- Occurrences
- 3
- Severity
- error
Sample message
A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.
External Connections
Not analyzed yet.
Score History
First score snapshot
v2.0.13
26
Latest
- Findings
- 618
- Errors
- 432
- Warnings
- 186
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 26 | 618 | 432 | 186 | v2.0.13 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueRelated
Relationship links
Author
Category
Issue
Related
Wordfence Security – Firewall, Malware Scan, and Login Security21 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreClassic Editor63 scoreLiteSpeed Cache35 scoreWooCommerce22 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreJetpack – WP Security, Backup, Speed, & Growth22 scoreDuplicate Page40 scoreWordPress Importer25 scoreHostinger Reach – AI-Powered Email Marketing for WordPress40 scoreMailPoet – Newsletters, Email Marketing, and Automation23 scoreCart Abandonment Recovery for WooCommerce – Recover Lost Sales with Automated Emails26 scoreNewsletter – Send awesome emails from WordPress24 score
Author
Category
Issue
Related
Wordfence Security – Firewall, Malware Scan, and Login Security21 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreClassic Editor63 scoreLiteSpeed Cache35 scoreWooCommerce22 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreJetpack – WP Security, Backup, Speed, & Growth22 scoreDuplicate Page40 scoreWordPress Importer25 scoreHostinger Reach – AI-Powered Email Marketing for WordPress40 scoreMailPoet – Newsletters, Email Marketing, and Automation23 scoreCart Abandonment Recovery for WooCommerce – Recover Lost Sales with Automated Emails26 scoreNewsletter – Send awesome emails from WordPress24 score
Related Plugins
100
Email Marketing for WordPress and WooCommerce – Retainful
500 active installs
100
GetResponse Official
4k+ active installs
100
LeadConnector
20k+ active installs
100
Omnisend for Contact Form 7 Add-On
500 active installs
99
Recapture for Easy Digital Downloads
600 active installs
99