Create fast donation and payment forms. Accept payments on WordPress with Stripe — no WooCommerce required.
39
Score
0
Errors
193
Warnings
+17
Change
Category Scores
Security0
Repo100
Performance100
Maintainability68
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Maintainability
123
10 issue groups
Security
70
7 issue groups
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$amount".57
- Category
- Maintainability
- Occurrences
- 57
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$amount".
WARNINGSecurityRequest data is not unslashed$_GET['delID'] not unslashed before sanitization. Use wp_unslash() or similar24
- Category
- Security
- Occurrences
- 24
- Severity
- warning
Sample message
$_GET['delID'] not unslashed before sanitization. Use wp_unslash() or similar
WARNINGSecurityInterpolated SQL is not preparedUse placeholders and $wpdb->prepare(); found interpolated variable $this->wpsdTable at "DELETE FROM $this->wpsdTable WHERE wpsd_id = %d"23
- Category
- Security
- Occurrences
- 23
- Severity
- warning
Sample message
Use placeholders and $wpdb->prepare(); found interpolated variable $this->wpsdTable at "DELETE FROM $this->wpsdTable WHERE wpsd_id = %d"
WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.21
- Category
- Maintainability
- Occurrences
- 21
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().20
- Category
- Maintainability
- Occurrences
- 20
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
WARNINGMaintainabilitySchema ChangeAttempting a database schema change is discouraged.13
- Category
- Maintainability
- Occurrences
- 13
- Severity
- warning
Sample message
Attempting a database schema change is discouraged.
WARNINGSecurityInput is not validatedDetected usage of a possibly undefined superglobal array index: $_POST['address'][0]['address_city']. Check that the array index exists before using it.8
- Category
- Security
- Occurrences
- 8
- Severity
- warning
Sample message
Detected usage of a possibly undefined superglobal array index: $_POST['address'][0]['address_city']. Check that the array index exists before using it.
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_GET['delID']6
- Category
- Security
- Occurrences
- 6
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_GET['delID']
WARNINGMaintainabilityNon-prefixed functionFunctions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "wsd_fs".4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- warning
Sample message
Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "wsd_fs".
WARNINGSecurityMissing nonce verificationProcessing form data without nonce verification.4
- Category
- Security
- Occurrences
- 4
- Severity
- warning
Sample message
Processing form data without nonce verification.
Show 7 moreShow less
WARNINGSecurityDatabase parameter is not escaped3
- Category
- Security
- Occurrences
- 3
- Severity
- warning
Sample message
Unescaped parameter $this->wpsdTable used in $wpdb->get_results()
WARNINGMaintainabilitytrademarked term3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
The plugin name includes a restricted term. Your chosen plugin name - "AidWP – Donation & Payment Forms (Stripe Powered)" - contains the restricted term "wp" which cannot be used at all in your plugin name.
WARNINGSecurityNonce verification recommended2
- Category
- Security
- Occurrences
- 2
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGMaintainabilityMissing Version2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
Resource version not set in call to wp_enqueue_script(). This means new versions of the script may not always be loaded due to browser caching.
WARNINGMaintainabilityNon-prefixed hook name1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "wsd_fs_loaded".
WARNINGMaintainabilityNon-prefixed trait1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Traits declared by a theme/plugin should start with the theme/plugin prefix. Found: "HM_Currency".
WARNINGMaintainabilitymismatched plugin name1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Plugin name "AidWP – Donation & Payment Forms (Stripe Powered)" is different from the name declared in plugin header "AidWP".
External Connections
Potential connections found in static code analysis.
Outbound calls
287
External assets
4
Incoming endpoints
9
Notable Domains
stripe.com87 · outbound
freemius.com10 · outbound
iso.org8 · outbound
php.net6 · outbound
aidwp.com2 · outbound
benalman.com2 · outbound
Platform / Reference Domains
gnu.org111 · platform/reference
wordpress.org8 · platform/reference
w3.org5 · platform/reference
github.com3 · platform/reference
api.wordpress.org2 · platform/reference
make.wordpress.org2 · platform/reference
core.trac.wordpress.org1 · platform/reference
External Asset Domains
js.stripe.com3 · asset + outbound
youtube.com2 · asset + outbound
Incoming Endpoints
wp_ajax_nopriv_wpsd_donationpublic
wp_ajax
wp_ajax_nopriv_wpsd_donation_successpublic
wp_ajax
wp_ajax_nopriv_wpsd_get_imagepublic
wp_ajax
Admin AJAX endpoints6
admin_post_fs_clone_resolutionauthenticated
admin_post
wp_ajax_fs_dismiss_notice_action_{$ajax_action_suffix}authenticated
wp_ajax
wp_ajax_fs_toggle_debug_modeauthenticated
wp_ajax
wp_ajax_wpsd_donationauthenticated
wp_ajax
wp_ajax_wpsd_donation_successauthenticated
wp_ajax
wp_ajax_wpsd_get_imageauthenticated
wp_ajax
Score History
2 score snapshots
v3.3.2
39
Latest
- Findings
- 193
- Errors
- 0
- Warnings
- 193
- Check
- 2.0.0
v3.3.1
22
Score
- Findings
- 2,992
- Errors
- 1,317
- Warnings
- 1,675
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 39 | 193 | 0 | 193 | v3.3.2 | 2.0.0 |
| 22 | 2,992 | 1,317 | 1,675 | v3.3.1 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Author
Issue
Domain
Related
Yoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce22 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder39 scoreClassic Editor63 scoreLiteSpeed Cache35 scoreAkismet Anti-spam: Spam Protection35 scoreAll-in-One WP Migration and Backup34 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreForminator Forms – Contact Form, Payment Form & Custom Form Builder24 scoreSureForms – Contact Form Builder, AI Forms, Payment Form, Survey & Quiz29 scoreFormidable Forms – WordPress Form Builder for Contact Forms, Calculators, Quizzes & More21 scoreGiveWP – Donation Plugin and Fundraising Platform20 score
Author
Issue
Domain
Related
Yoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce22 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder39 scoreClassic Editor63 scoreLiteSpeed Cache35 scoreAkismet Anti-spam: Spam Protection35 scoreAll-in-One WP Migration and Backup34 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreForminator Forms – Contact Form, Payment Form & Custom Form Builder24 scoreSureForms – Contact Form Builder, AI Forms, Payment Form, Survey & Quiz29 scoreFormidable Forms – WordPress Form Builder for Contact Forms, Calculators, Quizzes & More21 scoreGiveWP – Donation Plugin and Fundraising Platform20 score
Related Plugins
Civist – Petitions and Fundraising
1k+ active installs
100
ActBlue Contributions
400 active installs
98
Order Tip for WooCommerce
2k+ active installs
93
Payment Forms for Paystack
2k+ active installs
90
Zeffy Donate Button
1k+ active installs
90
Donorbox – Free Recurring Donation Plugin and Fundraising Platform
8k+ active installs
87