Recover lost revenue with Cart Abandonment Recovery for WooCommerce. Increase retention with Post Purchase Follow-Up Emails.
23
Score
798
Errors
2,193
Warnings
+0
Change
Category Scores
Security0
Repo91
Performance98
Maintainability0
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Security
1,536
9 issue groups
Maintainability
1,318
15 issue groups
I18n
27
1 issue group
ERRORSecuritySQL query is not preparedUse placeholders and $wpdb->prepare(); found $alter_query455
- Category
- Security
- Occurrences
- 455
- Severity
- error
Sample message
Use placeholders and $wpdb->prepare(); found $alter_query
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$VARS".435
- Category
- Maintainability
- Occurrences
- 435
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$VARS".
WARNINGSecurityDatabase parameter is not escapedUnescaped parameter $abandoned_table used in $wpdb->get_results()\n$abandoned_table assigned unsafely at line 4207.389
- Category
- Security
- Occurrences
- 389
- Severity
- warning
Sample message
Unescaped parameter $abandoned_table used in $wpdb->get_results()\n$abandoned_table assigned unsafely at line 4207.
WARNINGSecurityInterpolated SQL is not preparedUse placeholders and $wpdb->prepare(); found interpolated variable $abandoned_id at "SELECT * FROM $table WHERE `cid` = %d AND `data` LIKE '$abandoned_id'"336
- Category
- Security
- Occurrences
- 336
- Severity
- warning
Sample message
Use placeholders and $wpdb->prepare(); found interpolated variable $abandoned_id at "SELECT * FROM $table WHERE `cid` = %d AND `data` LIKE '$abandoned_id'"
WARNINGMaintainabilityNon-prefixed hook nameHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "_bwf_transient_file_saving".158
- Category
- Maintainability
- Occurrences
- 158
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "_bwf_transient_file_saving".
ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;146
- Category
- Maintainability
- Occurrences
- 146
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
WARNINGMaintainabilityAlternative PHP tag foundPossible use of ASP style opening tags detected; found: <% _(k).each(function(k,v) { %>\n143
- Category
- Maintainability
- Occurrences
- 143
- Severity
- warning
Sample message
Possible use of ASP style opening tags detected; found: <% _(k).each(function(k,v) { %>\n
WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.125
- Category
- Security
- Occurrences
- 125
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGSecurityRequest data is not unslashed$_COOKIE[$key] not unslashed before sanitization. Use wp_unslash() or similar110
- Category
- Security
- Occurrences
- 110
- Severity
- warning
Sample message
$_COOKIE[$key] not unslashed before sanitization. Use wp_unslash() or similar
WARNINGMaintainabilityAlternative PHP tag foundPossible use of ASP style short opening tags detected; found: <%= bwfan_events_js_data["cf7_form_submit"]...85
- Category
- Maintainability
- Occurrences
- 85
- Severity
- warning
Sample message
Possible use of ASP style short opening tags detected; found: <%= bwfan_events_js_data["cf7_form_submit"]...
Show 15 moreShow less
ERRORMaintainabilitydate date76
- Category
- Maintainability
- Occurrences
- 76
- Severity
- error
Sample message
date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.
WARNINGSecurityUnfinished Prepare62
- Category
- Security
- Occurrences
- 62
- Severity
- warning
Sample message
Replacement variables found, but no valid placeholders found in the query.
WARNINGMaintainabilityslow db query meta key51
- Category
- Maintainability
- Occurrences
- 51
- Severity
- warning
Sample message
Detected usage of meta_key, possible slow query.
WARNINGMaintainabilityNon-prefixed function51
- Category
- Maintainability
- Occurrences
- 51
- Severity
- warning
Sample message
Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "as_enqueue_async_action".
WARNINGMaintainabilityNon-prefixed class44
- Category
- Maintainability
- Occurrences
- 44
- Severity
- warning
Sample message
Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "BWF_AS".
ERRORMaintainabilitywp function not compatible with requires wp42
- Category
- Maintainability
- Occurrences
- 42
- Severity
- error
Sample message
Function "get_post_parent()" requires WordPress 5.7.0, but your plugin minimum supported version is WordPress 5.0.0.
WARNINGMaintainabilityslow db query meta value36
- Category
- Maintainability
- Occurrences
- 36
- Severity
- warning
Sample message
Detected usage of meta_value, possible slow query.
WARNINGSecurityInput is not sanitized31
- Category
- Security
- Occurrences
- 31
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_COOKIE[$attr['key']]
ERRORI18nMissing Translators Comment27
- Category
- I18n
- Occurrences
- 27
- Severity
- error
Sample message
A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.
WARNINGSecurityReplacements Wrong Number16
- Category
- Security
- Occurrences
- 16
- Severity
- warning
Sample message
Incorrect number of replacements passed to $wpdb->prepare(). Found 1 replacement parameters, expected 2.
WARNINGMaintainabilityDynamic hook name16
- Category
- Maintainability
- Occurrences
- 16
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "$hook".
WARNINGMaintainabilityDirect Query14
- Category
- Maintainability
- Occurrences
- 14
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGMaintainabilityNo Caching14
- Category
- Maintainability
- Occurrences
- 14
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
WARNINGSecurityMissing nonce verification12
- Category
- Security
- Occurrences
- 12
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGMaintainabilityslow db query meta query7
- Category
- Maintainability
- Occurrences
- 7
- Severity
- warning
Sample message
Detected usage of meta_query, possible slow query.
External Connections
Potential connections found in static code analysis.
Outbound calls
262
External assets
4
Incoming endpoints
34
Notable Domains
funnelkit.com52 · outbound
php.net9 · outbound
aelia.co6 · outbound
en.wikipedia.org6 · outbound
izimodal.marcelodolce.com4 · outbound
myaccount.funnelkit.com4 · outbound
Platform / Reference Domains
github.com62 · platform/reference
wordpress.org29 · platform/reference
w3.org26 · platform/reference
gnu.org4 · platform/reference
core.trac.wordpress.org2 · platform/reference
External Asset Domains
fonts.googleapis.com5 · asset + outbound
Incoming Endpoints
/wp-json/autonami/v2/workerREST
register_rest_route
wp_ajax_nopriv_public
wp_ajax
/wp-json/autonami/v1/autonami-cronREST
register_rest_route
/wp-json/autonami/v1/delete-tasksREST
register_rest_route
/wp-json/autonami/v1/eventsREST
register_rest_route
/wp-json/autonami/v1/update-contact-automationREST
register_rest_route
Admin AJAX endpoints19
wp_ajax_bwf_general_settings_updateauthenticated
wp_ajax
wp_ajax_bwf_migrate_automationauthenticated
wp_ajax
wp_ajax_bwfan_automation_submitauthenticated
wp_ajax
wp_ajax_bwfan_get_automation_cf7_form_fieldsauthenticated
wp_ajax
wp_ajax_bwfan_get_automation_wc_dynamic_couponauthenticated
wp_ajax
wp_ajax_bwfan_get_cf7_form_fieldsauthenticated
wp_ajax
wp_ajax_bwfan_get_optin_form_fieldsauthenticated
wp_ajax
wp_ajax_bwfan_manage_profileauthenticated
wp_ajax
wp_ajax_bwfan_select_unsubscribe_pageauthenticated
wp_ajax
wp_ajax_bwfan_select2ajaxauthenticated
wp_ajax
wp_ajax_bwfan_show_email_previewauthenticated
wp_ajax
wp_ajax_bwfan_test_emailauthenticated
wp_ajax
7 more hidden
Score History
6 score snapshots
v3.8.5.2
23
Latest
- Findings
- 2,991
- Errors
- 798
- Warnings
- 2,193
- Check
- 2.0.0
v3.8.5.1
23
Score
- Findings
- 2,990
- Errors
- 798
- Warnings
- 2,192
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 23 | 2,991 | 798 | 2,193 | v3.8.5.2 | 2.0.0 |
| 23 | 2,990 | 798 | 2,192 | v3.8.5.1 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Plugin
Author
Category
Issue
SQL query is not prepared455 findingsNon-prefixed global variable435 findingsDatabase parameter is not escaped389 findingsInterpolated SQL is not prepared336 findingsNon-prefixed hook name158 findingsMissing direct file access protection146 findingsAlternative PHP tag found143 findingsNonce verification recommended125 findings
Domain
Related
Yoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce21 scoreAkismet Anti-spam: Spam Protection35 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder39 scoreLiteSpeed Cache35 scoreAll-in-One WP Migration and Backup34 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreRank Math SEO – AI SEO Tools to Dominate SEO Rankings30 scoreHostinger Reach – AI-Powered Email Marketing for WordPress40 scoreMailPoet – Newsletters, Email Marketing, and Automation23 scoreCart Abandonment Recovery for WooCommerce – Recover Lost Sales with Automated Emails26 scoreNewsletter – Send awesome emails from WordPress24 scoreBrevo – Email, SMS, Web Push, Chat, and more.20 score
Plugin
Author
Category
Issue
SQL query is not prepared455 findingsNon-prefixed global variable435 findingsDatabase parameter is not escaped389 findingsInterpolated SQL is not prepared336 findingsNon-prefixed hook name158 findingsMissing direct file access protection146 findingsAlternative PHP tag found143 findingsNonce verification recommended125 findings
Domain
Related
Yoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce21 scoreAkismet Anti-spam: Spam Protection35 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder39 scoreLiteSpeed Cache35 scoreAll-in-One WP Migration and Backup34 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreRank Math SEO – AI SEO Tools to Dominate SEO Rankings30 scoreHostinger Reach – AI-Powered Email Marketing for WordPress40 scoreMailPoet – Newsletters, Email Marketing, and Automation23 scoreCart Abandonment Recovery for WooCommerce – Recover Lost Sales with Automated Emails26 scoreNewsletter – Send awesome emails from WordPress24 scoreBrevo – Email, SMS, Web Push, Chat, and more.20 score
Related Plugins
LeadConnector
20k+ active installs
100
GetResponse Official
4k+ active installs
100
Email Marketing for WordPress and WooCommerce – Retainful
500 active installs
100
SendPulse Email Marketing Newsletter
1k+ active installs
99
Recapture for Easy Digital Downloads
600 active installs
99
Omnisend for Contact Form 7 Add-On
500 active installs
99