Pay with PAYUNi

Accept payments via PAYUNi(統一金流) payment for your WooCommerce store.

v1.8.1WPBrewerUpdated Added 500 installs0% rating
77
Score
9
Errors
13
Warnings
+0
Change

Category Scores

Security62
Repo94
Performance100
Maintainability94

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

22 findings

Security

10

3 issue groups

I18n

7

2 issue groups

Maintainability

4

4 issue groups

Repo Compliance

1

1 issue group

WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_POST['EncryptInfo']7
Category
Security
Occurrences
7
Severity
warning

Sample message

Detected usage of a non-sanitized input variable: $_POST['EncryptInfo']

ERRORI18nMissing Translators CommentA function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.6
Category
I18n
Occurrences
6
Severity
error

Sample message

A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.

ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$invoice_no'.2
Category
Security
Occurrences
2
Severity
error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$invoice_no'.

WARNINGI18nDiscouraged text-domain loadingload_plugin_textdomain() has been discouraged since WordPress version 4.6. When your plugin is hosted on WordPress.org, you no longer need to manually include this function call for translations under your plugin slug. WordPress will automatically load the translations for you as needed.1
Category
I18n
Occurrences
1
Severity
warning

Sample message

load_plugin_textdomain() has been discouraged since WordPress version 4.6. When your plugin is hosted on WordPress.org, you no longer need to manually include this function call for translations under your plugin slug. WordPress will automatically load the translations for you as needed.

WARNINGMaintainabilityNon-prefixed functionFunctions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "run_payuni_payment".1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "run_payuni_payment".

WARNINGMaintainabilityNon-prefixed hook nameHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "active_plugins".1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "active_plugins".

WARNINGSecuritywp redirect wp redirectwp_redirect() found. Using wp_safe_redirect(), along with the "allowed_redirect_hosts" filter if needed, can help avoid any chances of malicious redirects within code. It is also important to remember to call exit() after a redirect so that no other unwanted code is executed.1
Category
Security
Occurrences
1
Severity
warning

Sample message

wp_redirect() found. Using wp_safe_redirect(), along with the "allowed_redirect_hosts" filter if needed, can help avoid any chances of malicious redirects within code. It is also important to remember to call exit() after a redirect so that no other unwanted code is executed.

WARNINGMaintainabilitymissing composer json fileThe "/vendor" directory using composer exists, but "composer.json" file is missing.1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

The "/vendor" directory using composer exists, but "composer.json" file is missing.

ERRORRepo Complianceoutdated tested upto headerTested up to: 6.8 < 7.0. The "Tested up to" value in your plugin is not set to the current version of WordPress. This means your plugin will not show up in searches, as we require plugins to be compatible and documented as tested up to the most recent version of WordPress.1
Category
Repo Compliance
Occurrences
1
Severity
error

Sample message

Tested up to: 6.8 < 7.0. The "Tested up to" value in your plugin is not set to the current version of WordPress. This means your plugin will not show up in searches, as we require plugins to be compatible and documented as tested up to the most recent version of WordPress.

WARNINGMaintainabilitytrademarked termThe plugin slug includes a restricted term. Your plugin slug - "wpbr-payuni-payment" - contains the restricted term "wp" which cannot be used at all in your plugin slug.1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

The plugin slug includes a restricted term. Your plugin slug - "wpbr-payuni-payment" - contains the restricted term "wp" which cannot be used at all in your plugin slug.

External Connections

Potential connections found in static code analysis.

8 domains

Outbound calls

18

External assets

0

Incoming endpoints

2

Notable Domains

wpbrewer.com4 · outbound
api.payuni.com.tw3 · outbound
php-fig.org2 · outbound
getcomposer.org1 · outbound
payuni.com.tw1 · outbound

Platform / Reference Domains

github.com2 · platform/reference
gnu.org1 · platform/reference

External Asset Domains

No external asset domains detected.

Incoming Endpoints

No public endpoints detected.

Admin AJAX endpoints2
wp_ajax_payuni_queryauthenticated

wp_ajax

wp_ajax_payuni_schedule_cancelauthenticated

wp_ajax

Score History

First score snapshot

v1.8.1

77

Latest

Findings
22
Errors
9
Warnings
13
Check
2.0.0

Relationship Map

Author, categories, issues, domains, and nearby plugins.

35 nodes

Related Plugins