PluginScore

WUPO Group Attributes for WooCommerce

Organize product attributes into groups. These will be shown in separate sections on your product pages. Increase readability for your product propert …

v2.3.6WUPO PluginsUpdated Added 400 installs72% rating
attributeattributesgrouporganizeset
22
Score
592
Errors
1,391
Warnings
+0
Change

Category Scores

Security0
Repo77
Performance100
Maintainability0

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

1,983 findings

Maintainability

1,351

15 issue groups

Security

578

7 issue groups

I18n

39

3 issue groups

WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$VARS".1,085
Category
Maintainability
Occurrences
1,085
Severity
warning

Sample message

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$VARS".

WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedVariableFound
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '" <a href='{$skip_url}' class='button button-small button-secondary'>{$use_plugin_anonymously_text}</a>"'.518
Category
Security
Occurrences
518
Severity
error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '" <a href='{$skip_url}' class='button button-small button-secondary'>{$use_plugin_anonymously_text}</a>"'.

WordPress.Security.EscapeOutput.OutputNotEscapedReference
WARNINGMaintainabilityNon-prefixed functionFunctions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: &quot;_fs_text&quot;.106
Category
Maintainability
Occurrences
106
Severity
warning

Sample message

Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: &quot;_fs_text&quot;.

WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedFunctionFound
WARNINGMaintainabilityNon-prefixed classClasses declared by a theme/plugin should start with the theme/plugin prefix. Found: &quot;FS_Admin_Menu_Manager&quot;.54
Category
Maintainability
Occurrences
54
Severity
warning

Sample message

Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: &quot;FS_Admin_Menu_Manager&quot;.

WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedClassFound
WARNINGMaintainabilityNon-prefixed constantGlobal constants defined by a theme/plugin should start with the theme/plugin prefix. Found: &quot;FS_API__ADDRESS&quot;.26
Category
Maintainability
Occurrences
26
Severity
warning

Sample message

Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: &quot;FS_API__ADDRESS&quot;.

WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedConstantFound
WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.25
Category
Maintainability
Occurrences
25
Severity
warning

Sample message

Use of a direct database call is discouraged.

WordPress.DB.DirectDatabaseQuery.DirectQuery
WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().24
Category
Maintainability
Occurrences
24
Severity
warning

Sample message

Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().

WordPress.DB.DirectDatabaseQuery.NoCaching
ERRORI18nText Domain MismatchMismatched text domain. Expected 'wupo-group-attributes' but got ''.24
Category
I18n
Occurrences
24
Severity
error

Sample message

Mismatched text domain. Expected 'wupo-group-attributes' but got ''.

WordPress.WP.I18n.TextDomainMismatchReference
WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.20
Category
Security
Occurrences
20
Severity
warning

Sample message

Processing form data without nonce verification.

WordPress.Security.NonceVerification.Recommended
WARNINGSecurityMissing nonce verificationProcessing form data without nonce verification.14
Category
Security
Occurrences
14
Severity
warning

Sample message

Processing form data without nonce verification.

WordPress.Security.NonceVerification.Missing
Show 15 more
ERRORI18nMissing Arg Domain13
Category
I18n
Occurrences
13
Severity
error

Sample message

Missing $domain parameter in function call to __().

WordPress.WP.I18n.MissingArgDomainReference
ERRORSecuritySQL query is not prepared12
Category
Security
Occurrences
12
Severity
error

Sample message

Use placeholders and $wpdb->prepare(); found $query

WordPress.DB.PreparedSQL.NotPrepared
WARNINGMaintainabilityNon-prefixed hook name8
Category
Maintainability
Occurrences
8
Severity
warning

Sample message

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: &quot;fs_plugins_api&quot;.

WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedHooknameFound
ERRORSecurityException output is not escaped7
Category
Security
Occurrences
7
Severity
error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$message'.

WordPress.Security.EscapeOutput.ExceptionNotEscapedReference
WARNINGMaintainabilitySchema Change5
Category
Maintainability
Occurrences
5
Severity
warning

Sample message

Attempting a database schema change is discouraged.

WordPress.DB.DirectDatabaseQuery.SchemaChange
WARNINGSecurityInput is not sanitized5
Category
Security
Occurrences
5
Severity
warning

Sample message

Detected usage of a non-sanitized input variable: $_GET[&#039;delete&#039;]

WordPress.Security.ValidatedSanitizedInput.InputNotSanitized
WARNINGMaintainabilityMissing Version4
Category
Maintainability
Occurrences
4
Severity
warning

Sample message

Resource version not set in call to wp_enqueue_script(). This means new versions of the script may not always be loaded due to browser caching.

WordPress.WP.EnqueuedResourceParameters.MissingVersion
ERRORMaintainabilityMissing direct file access protection4
Category
Maintainability
Occurrences
4
Severity
error

Sample message

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

missing_direct_file_access_protectionReference
ERRORSecurityDatabase parameter is not escaped2
Category
Security
Occurrences
2
Severity
error

Sample message

Unescaped parameter $query used in $wpdb->get_results()\n$query assigned unsafely at line 608.

PluginCheck.Security.DirectDB.UnescapedDBParameter
WARNINGMaintainabilityerror log error log2
Category
Maintainability
Occurrences
2
Severity
warning

Sample message

error_log() found. Debug code should not normally be used in production.

WordPress.PHP.DevelopmentFunctions.error_log_error_log
ERRORMaintainabilityrand rand2
Category
Maintainability
Occurrences
2
Severity
error

Sample message

rand() is discouraged. Use the far less predictable wp_rand() instead.

WordPress.WP.AlternativeFunctions.rand_rand
ERRORI18nNon Singular String Literal Text2
Category
I18n
Occurrences
2
Severity
error

Sample message

The $text parameter must be a single text string literal. Found: 'Add attribute to the group '.$term_name

WordPress.WP.I18n.NonSingularStringLiteralTextReference
ERRORMaintainabilityplugin updater detected2
Category
Maintainability
Occurrences
2
Severity
error

Sample message

Plugin Updater detected. These are not permitted in WordPress.org hosted plugins. Detected: class FS_Plugin_Updater

plugin_updater_detected
WARNINGMaintainabilityupdate modification detected2
Category
Maintainability
Occurrences
2
Severity
warning

Sample message

Plugin Updater detected. Detected code which may be altering WordPress update routines. Detected: _site_transient_update_plugins

update_modification_detectedReference
ERRORMaintainabilitywp function not compatible with requires wp2
Category
Maintainability
Occurrences
2
Severity
error

Sample message

Function "wp_get_update_php_url()" requires WordPress 5.1.0, but your plugin minimum supported version is WordPress 5.0.0.

wp_function_not_compatible_with_requires_wpReference

External Connections

Potential connections found in static code analysis.

29 domains

Outbound calls

175

External assets

2

Incoming endpoints

5

Notable Domains

freemius.com8 · outbound
php.net6 · outbound
wupoplugins.com5 · outbound
benalman.com4 · outbound
checkout.freemius-local.com2 · outbound
checkout.freemius.com2 · outbound

Platform / Reference Domains

gnu.org111 · platform/reference
wordpress.org7 · platform/reference
w3.org5 · platform/reference
api.wordpress.org2 · platform/reference
github.com2 · platform/reference
make.wordpress.org2 · platform/reference
core.trac.wordpress.org1 · platform/reference

External Asset Domains

No external asset domains detected.

Incoming Endpoints

No public endpoints detected.

Admin AJAX endpoints5
admin_post_fs_clone_resolutionauthenticated

admin_post

wp_ajax_fs_dismiss_notice_action_{$ajax_action_suffix}authenticated

wp_ajax

wp_ajax_fs_toggle_debug_modeauthenticated

wp_ajax

wp_ajax_wugrat_add_attribute_groupauthenticated

wp_ajax

wp_ajax_wugrat_group_attributes_orderingauthenticated

wp_ajax

Score History

First score snapshot

v2.3.6

22

Latest

Findings
1,983
Errors
592
Warnings
1,391
Check
2.0.0

Relationship Map

Author, categories, issues, domains, and nearby plugins.

37 nodes

Related Plugins

Attributes for Blocks

4k+ active installs

99
Automatic image ALT attributes

1k+ active installs

98
WP Telegram (Auto Post and Notifications)

30k+ active installs

95
WP Telegram Widget and Join Link

4k+ active installs

95
WPC Grouped Product for WooCommerce

3k+ active installs

84
Default Attributes for WooCommerce

400 active installs

68