WP-Lister Lite for eBay

List products from WordPress on eBay. The easy way.

v3.8.8WP LabUpdated Added 2k+ installs88% rating0% support resolved
21
Score
6,697
Errors
5,129
Warnings
+0
Change

Category Scores

Security0
Repo77
Performance97
Maintainability0

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

11,826 findings

Security

5,928

12 issue groups

Maintainability

4,825

8 issue groups

I18n

757

5 issue groups

ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"$prev_id <br>"'.2,356
Category
Security
Occurrences
2,356
Severity
error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"$prev_id <br>"'.

ERRORSecurityUnsafe printing functionAll output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.1,481
Category
Security
Occurrences
1,481
Severity
error

Sample message

All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.

ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;1,459
Category
Maintainability
Occurrences
1,459
Severity
error

Sample message

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

WARNINGMaintainabilityNon-prefixed classClasses declared by a theme/plugin should start with the theme/plugin prefix. Found: &quot;ASQPreferencesType&quot;.1,384
Category
Maintainability
Occurrences
1,384
Severity
warning

Sample message

Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: &quot;ASQPreferencesType&quot;.

WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: &quot;$Facet_AccessRuleCurrentStatusCodeType&quot;.653
Category
Maintainability
Occurrences
653
Severity
warning

Sample message

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: &quot;$Facet_AccessRuleCurrentStatusCodeType&quot;.

WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.514
Category
Maintainability
Occurrences
514
Severity
warning

Sample message

Use of a direct database call is discouraged.

WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().486
Category
Maintainability
Occurrences
486
Severity
warning

Sample message

Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().

ERRORI18nMissing Translators CommentA function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.433
Category
I18n
Occurrences
433
Severity
error

Sample message

A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.

WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.422
Category
Security
Occurrences
422
Severity
warning

Sample message

Processing form data without nonce verification.

WARNINGSecurityRequest data is not unslashed$_GET[&#039;file&#039;] not unslashed before sanitization. Use wp_unslash() or similar348
Category
Security
Occurrences
348
Severity
warning

Sample message

$_GET[&#039;file&#039;] not unslashed before sanitization. Use wp_unslash() or similar

Show 15 more
WARNINGSecurityInterpolated SQL is not prepared321
Category
Security
Occurrences
321
Severity
warning

Sample message

Use placeholders and $wpdb-&gt;prepare(); found interpolated variable $account_id at &quot;ebay_auctions SET account_id = $account_id, site_id = $site_id &quot;

WARNINGSecurityInput is not sanitized319
Category
Security
Occurrences
319
Severity
warning

Sample message

Detected usage of a non-sanitized input variable: $_FILES[&#039;fupload&#039;][&#039;name&#039;]

WARNINGMaintainabilityerror log print r196
Category
Maintainability
Occurrences
196
Severity
warning

Sample message

print_r() found. Debug code should not normally be used in production.

WARNINGSecurityInput is not validated188
Category
Security
Occurrences
188
Severity
warning

Sample message

Detected usage of a possibly undefined superglobal array index: $_FILES[&#039;fupload&#039;][&#039;name&#039;]. Check that the array index exists before using it.

ERRORSecuritySQL query is not prepared148
Category
Security
Occurrences
148
Severity
error

Sample message

Use placeholders and $wpdb->prepare(); found $days_to_keep

ERRORSecurityException output is not escaped127
Category
Security
Occurrences
127
Severity
error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"Invalid value for enum '$class', must be one of: '$imploded'"'.

WARNINGSecurityMissing nonce verification112
Category
Security
Occurrences
112
Severity
warning

Sample message

Processing form data without nonce verification.

ERRORI18nMissing Arg Domain96
Category
I18n
Occurrences
96
Severity
error

Sample message

Missing $domain parameter in function call to __().

ERRORI18nUnordered Placeholders Text84
Category
I18n
Occurrences
84
Severity
error

Sample message

Multiple placeholders in translatable strings should be ordered. Expected "%1$s, %2$d", but got "%s, %d" in 'Listings for <a href="%s" target="_blank">product #%d</a>'.

ERRORI18nNon Singular String Literal Text81
Category
I18n
Occurrences
81
Severity
error

Sample message

The $text parameter must be a single text string literal. Found: $attribute->name

ERRORMaintainabilitywp function not compatible with requires wp72
Category
Maintainability
Occurrences
72
Severity
error

Sample message

Function "apply_filters_deprecated()" requires WordPress 4.6.0, but your plugin minimum supported version is WordPress 4.2.0.

ERRORSecurityDatabase parameter is not escaped69
Category
Security
Occurrences
69
Severity
error

Sample message

Unescaped parameter $account_id used in $wpdb->query()\n$account_id assigned unsafely at line 729.

ERRORI18nText Domain Mismatch63
Category
I18n
Occurrences
63
Severity
error

Sample message

Mismatched text domain. Expected 'wp-lister-for-ebay' but got 'woocommerce'.

ERRORMaintainabilitycurl curl setopt61
Category
Maintainability
Occurrences
61
Severity
error

Sample message

Using cURL functions is highly discouraged. Use wp_remote_get() instead.

WARNINGSecurityDatabase parameter is not escaped37
Category
Security
Occurrences
37
Severity
warning

Sample message

Unescaped parameter $join_sql used in $wpdb-&gt;get_results()

External Connections

Not analyzed yet.

Score History

First score snapshot

v3.8.8

21

Latest

Findings
11,826
Errors
6,697
Warnings
5,129
Check
2.0.0

Relationship Map

Author, categories, issues, domains, and nearby plugins.

28 nodes

Related Plugins