WPC Force Sells allows users to create a deal that combines various related products and put them for sale altogether.
Category Scores
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Security
98
6 issue groups
Maintainability
36
11 issue groups
Performance
1
1 issue group
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$hidden_input'.30
- Category
- Security
- Occurrences
- 30
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$hidden_input'.
WARNINGSecurityRequest data is not unslashed$_GET['settings-updated'] not unslashed before sanitization. Use wp_unslash() or similar19
- Category
- Security
- Occurrences
- 19
- Severity
- warning
Sample message
$_GET['settings-updated'] not unslashed before sanitization. Use wp_unslash() or similar
WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.16
- Category
- Security
- Occurrences
- 16
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGSecurityMissing nonce verificationProcessing form data without nonce verification.13
- Category
- Security
- Occurrences
- 13
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGSecurityInput is not validatedDetected usage of a possibly undefined superglobal array index: $_GET['post_type']. Check that the array index exists before using it.11
- Category
- Security
- Occurrences
- 11
- Severity
- warning
Sample message
Detected usage of a possibly undefined superglobal array index: $_GET['post_type']. Check that the array index exists before using it.
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_GET['settings-updated']9
- Category
- Security
- Occurrences
- 9
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_GET['settings-updated']
ERRORMaintainabilitywp function not compatible with requires wpFunction "sanitize_textarea_field()" requires WordPress 4.7.0, but your plugin minimum supported version is WordPress 4.0.0.8
- Category
- Maintainability
- Occurrences
- 8
- Severity
- error
Sample message
Function "sanitize_textarea_field()" requires WordPress 4.7.0, but your plugin minimum supported version is WordPress 4.0.0.
WARNINGMaintainabilityNon-prefixed classClasses declared by a theme/plugin should start with the theme/plugin prefix. Found: "WPC_Core_Registry".7
- Category
- Maintainability
- Occurrences
- 7
- Severity
- warning
Sample message
Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "WPC_Core_Registry".
WARNINGMaintainabilityNon-prefixed functionFunctions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "WPCleverWoofs".5
- Category
- Maintainability
- Occurrences
- 5
- Severity
- warning
Sample message
Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "WPCleverWoofs".
WARNINGMaintainabilityNon-prefixed constantGlobal constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "WPC_CORE_DIR".3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "WPC_CORE_DIR".
Show 8 moreShow less
WARNINGMaintainabilityNon-prefixed hook name3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "woobt_item_class".
WARNINGMaintainabilityNon-prefixed global variable3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$product".
WARNINGMaintainabilitytrademarked term3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
The plugin name includes a restricted term. Your chosen plugin name - "WPC Force Sells for WooCommerce" - contains the restricted term "wp" which cannot be used at all in your plugin name.
WARNINGMaintainabilityDirect Query1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGMaintainabilityNo Caching1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
WARNINGMaintainabilityslow db query tax query1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Detected usage of tax_query, possible slow query.
WARNINGMaintainabilityMissing Version1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Resource version not set in call to wp_enqueue_style(). This means new versions of the style may not always be loaded due to browser caching.
WARNINGPerformancePost Not In post not in1
- Category
- Performance
- Occurrences
- 1
- Severity
- warning
Sample message
Using exclusionary parameters, like post__not_in, in calls to get_posts() should be done with caution, see https://wpvip.com/documentation/performance-improvements-by-removing-usage-of-post__not_in/ for more information.
External Connections
Potential connections found in static code analysis.
Outbound calls
37
External assets
2
Incoming endpoints
8
Notable Domains
Platform / Reference Domains
External Asset Domains
Incoming Endpoints
No public endpoints detected.
Admin AJAX endpoints8
wp_ajax
wp_ajax
wp_ajax
wp_ajax
wp_ajax
wp_ajax
wp_ajax
wp_ajax
Score History
First score snapshot
v6.4.0
40
Latest
- Findings
- 135
- Errors
- 38
- Warnings
- 97
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 40 | 135 | 38 | 97 | v6.4.0 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.