List products from WordPress on eBay. The easy way.
Category Scores
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Security
5,928
12 issue groups
Maintainability
4,825
8 issue groups
I18n
757
5 issue groups
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"$prev_id <br>"'.2,356
- Category
- Security
- Occurrences
- 2,356
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"$prev_id <br>"'.
ERRORSecurityUnsafe printing functionAll output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.1,481
- Category
- Security
- Occurrences
- 1,481
- Severity
- error
Sample message
All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.
ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;1,459
- Category
- Maintainability
- Occurrences
- 1,459
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
WARNINGMaintainabilityNon-prefixed classClasses declared by a theme/plugin should start with the theme/plugin prefix. Found: "ASQPreferencesType".1,384
- Category
- Maintainability
- Occurrences
- 1,384
- Severity
- warning
Sample message
Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "ASQPreferencesType".
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$Facet_AccessRuleCurrentStatusCodeType".653
- Category
- Maintainability
- Occurrences
- 653
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$Facet_AccessRuleCurrentStatusCodeType".
WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.514
- Category
- Maintainability
- Occurrences
- 514
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().486
- Category
- Maintainability
- Occurrences
- 486
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
ERRORI18nMissing Translators CommentA function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.433
- Category
- I18n
- Occurrences
- 433
- Severity
- error
Sample message
A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.
WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.422
- Category
- Security
- Occurrences
- 422
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGSecurityRequest data is not unslashed$_GET['file'] not unslashed before sanitization. Use wp_unslash() or similar348
- Category
- Security
- Occurrences
- 348
- Severity
- warning
Sample message
$_GET['file'] not unslashed before sanitization. Use wp_unslash() or similar
Show 15 moreShow less
WARNINGSecurityInterpolated SQL is not prepared321
- Category
- Security
- Occurrences
- 321
- Severity
- warning
Sample message
Use placeholders and $wpdb->prepare(); found interpolated variable $account_id at "ebay_auctions SET account_id = $account_id, site_id = $site_id "
WARNINGSecurityInput is not sanitized319
- Category
- Security
- Occurrences
- 319
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_FILES['fupload']['name']
WARNINGMaintainabilityerror log print r196
- Category
- Maintainability
- Occurrences
- 196
- Severity
- warning
Sample message
print_r() found. Debug code should not normally be used in production.
WARNINGSecurityInput is not validated188
- Category
- Security
- Occurrences
- 188
- Severity
- warning
Sample message
Detected usage of a possibly undefined superglobal array index: $_FILES['fupload']['name']. Check that the array index exists before using it.
ERRORSecuritySQL query is not prepared148
- Category
- Security
- Occurrences
- 148
- Severity
- error
Sample message
Use placeholders and $wpdb->prepare(); found $days_to_keep
ERRORSecurityException output is not escaped127
- Category
- Security
- Occurrences
- 127
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"Invalid value for enum '$class', must be one of: '$imploded'"'.
WARNINGSecurityMissing nonce verification112
- Category
- Security
- Occurrences
- 112
- Severity
- warning
Sample message
Processing form data without nonce verification.
ERRORI18nMissing Arg Domain96
- Category
- I18n
- Occurrences
- 96
- Severity
- error
Sample message
Missing $domain parameter in function call to __().
ERRORI18nUnordered Placeholders Text84
- Category
- I18n
- Occurrences
- 84
- Severity
- error
Sample message
Multiple placeholders in translatable strings should be ordered. Expected "%1$s, %2$d", but got "%s, %d" in 'Listings for <a href="%s" target="_blank">product #%d</a>'.
ERRORI18nNon Singular String Literal Text81
- Category
- I18n
- Occurrences
- 81
- Severity
- error
Sample message
The $text parameter must be a single text string literal. Found: $attribute->name
ERRORMaintainabilitywp function not compatible with requires wp72
- Category
- Maintainability
- Occurrences
- 72
- Severity
- error
Sample message
Function "apply_filters_deprecated()" requires WordPress 4.6.0, but your plugin minimum supported version is WordPress 4.2.0.
ERRORSecurityDatabase parameter is not escaped69
- Category
- Security
- Occurrences
- 69
- Severity
- error
Sample message
Unescaped parameter $account_id used in $wpdb->query()\n$account_id assigned unsafely at line 729.
ERRORI18nText Domain Mismatch63
- Category
- I18n
- Occurrences
- 63
- Severity
- error
Sample message
Mismatched text domain. Expected 'wp-lister-for-ebay' but got 'woocommerce'.
ERRORMaintainabilitycurl curl setopt61
- Category
- Maintainability
- Occurrences
- 61
- Severity
- error
Sample message
Using cURL functions is highly discouraged. Use wp_remote_get() instead.
WARNINGSecurityDatabase parameter is not escaped37
- Category
- Security
- Occurrences
- 37
- Severity
- warning
Sample message
Unescaped parameter $join_sql used in $wpdb->get_results()
External Connections
Not analyzed yet.
Score History
First score snapshot
v3.8.8
21
Latest
- Findings
- 11,826
- Errors
- 6,697
- Warnings
- 5,129
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 21 | 11,826 | 6,697 | 5,129 | v3.8.8 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.