WPC Force Sells for WooCommerce

WPC Force Sells allows users to create a deal that combines various related products and put them for sale altogether.

v6.4.0WPCleverUpdated Added 600 installs100% rating
40
Score
38
Errors
97
Warnings
+0
Change

Category Scores

Security0
Repo100
Performance98
Maintainability76

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

135 findings

Security

98

6 issue groups

Maintainability

36

11 issue groups

Performance

1

1 issue group

ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$hidden_input'.30
Category
Security
Occurrences
30
Severity
error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$hidden_input'.

WARNINGSecurityRequest data is not unslashed$_GET['settings-updated'] not unslashed before sanitization. Use wp_unslash() or similar19
Category
Security
Occurrences
19
Severity
warning

Sample message

$_GET['settings-updated'] not unslashed before sanitization. Use wp_unslash() or similar

WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.16
Category
Security
Occurrences
16
Severity
warning

Sample message

Processing form data without nonce verification.

WARNINGSecurityMissing nonce verificationProcessing form data without nonce verification.13
Category
Security
Occurrences
13
Severity
warning

Sample message

Processing form data without nonce verification.

WARNINGSecurityInput is not validatedDetected usage of a possibly undefined superglobal array index: $_GET['post_type']. Check that the array index exists before using it.11
Category
Security
Occurrences
11
Severity
warning

Sample message

Detected usage of a possibly undefined superglobal array index: $_GET['post_type']. Check that the array index exists before using it.

WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_GET['settings-updated']9
Category
Security
Occurrences
9
Severity
warning

Sample message

Detected usage of a non-sanitized input variable: $_GET['settings-updated']

ERRORMaintainabilitywp function not compatible with requires wpFunction "sanitize_textarea_field()" requires WordPress 4.7.0, but your plugin minimum supported version is WordPress 4.0.0.8
Category
Maintainability
Occurrences
8
Severity
error

Sample message

Function "sanitize_textarea_field()" requires WordPress 4.7.0, but your plugin minimum supported version is WordPress 4.0.0.

WARNINGMaintainabilityNon-prefixed classClasses declared by a theme/plugin should start with the theme/plugin prefix. Found: "WPC_Core_Registry".7
Category
Maintainability
Occurrences
7
Severity
warning

Sample message

Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "WPC_Core_Registry".

WARNINGMaintainabilityNon-prefixed functionFunctions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "WPCleverWoofs".5
Category
Maintainability
Occurrences
5
Severity
warning

Sample message

Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "WPCleverWoofs".

WARNINGMaintainabilityNon-prefixed constantGlobal constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "WPC_CORE_DIR".3
Category
Maintainability
Occurrences
3
Severity
warning

Sample message

Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "WPC_CORE_DIR".

Show 8 more
WARNINGMaintainabilityNon-prefixed hook name3
Category
Maintainability
Occurrences
3
Severity
warning

Sample message

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "woobt_item_class".

WARNINGMaintainabilityNon-prefixed global variable3
Category
Maintainability
Occurrences
3
Severity
warning

Sample message

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$product".

WARNINGMaintainabilitytrademarked term3
Category
Maintainability
Occurrences
3
Severity
warning

Sample message

The plugin name includes a restricted term. Your chosen plugin name - "WPC Force Sells for WooCommerce" - contains the restricted term "wp" which cannot be used at all in your plugin name.

WARNINGMaintainabilityDirect Query1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

Use of a direct database call is discouraged.

WARNINGMaintainabilityNo Caching1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().

WARNINGMaintainabilityslow db query tax query1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

Detected usage of tax_query, possible slow query.

WARNINGMaintainabilityMissing Version1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

Resource version not set in call to wp_enqueue_style(). This means new versions of the style may not always be loaded due to browser caching.

WARNINGPerformancePost Not In post not in1
Category
Performance
Occurrences
1
Severity
warning

Sample message

Using exclusionary parameters, like post__not_in, in calls to get_posts() should be done with caution, see https://wpvip.com/documentation/performance-improvements-by-removing-usage-of-post__not_in/ for more information.

External Connections

Potential connections found in static code analysis.

10 domains

Outbound calls

37

External assets

2

Incoming endpoints

8

Notable Domains

wpclever.net16 · outbound
kushagragour.in2 · outbound
api.wpclever.net1 · outbound

Platform / Reference Domains

wordpress.org7 · platform/reference
api.wordpress.org3 · platform/reference
codex.wordpress.org3 · platform/reference
w3.org3 · platform/reference
github.com2 · platform/reference
gnu.org1 · platform/reference

External Asset Domains

Incoming Endpoints

No public endpoints detected.

Admin AJAX endpoints8
wp_ajax_woofs_add_textauthenticated

wp_ajax

wp_ajax_woofs_get_search_resultsauthenticated

wp_ajax

wp_ajax_woofs_update_search_settingsauthenticated

wp_ajax

wp_ajax_wpc_exportauthenticated

wp_ajax

wp_ajax_wpc_get_essential_kitauthenticated

wp_ajax

wp_ajax_wpc_get_pluginsauthenticated

wp_ajax

wp_ajax_wpc_get_suggestionauthenticated

wp_ajax

wp_ajax_wpc_importauthenticated

wp_ajax

Score History

First score snapshot

v6.4.0

40

Latest

Findings
135
Errors
38
Warnings
97
Check
2.0.0

Relationship Map

Author, categories, issues, domains, and nearby plugins.

31 nodes

Related Plugins