Automatically send follow-up emails to remind customers to rate your products. Boost your Woo Commerce store's credibility and increase sales.
24
Score
314
Errors
1,256
Warnings
+0
Change
Category Scores
Security0
Repo94
Performance98
Maintainability0
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Maintainability
1,026
12 issue groups
Security
385
10 issue groups
I18n
121
3 issue groups
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$_copy_button".586
- Category
- Maintainability
- Occurrences
- 586
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$_copy_button".
WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.166
- Category
- Maintainability
- Occurrences
- 166
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().159
- Category
- Maintainability
- Occurrences
- 159
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
WARNINGSecurityInterpolated SQL is not preparedUse placeholders and $wpdb->prepare(); found interpolated variable $placeholders at WHERE comment_author_email IN ($placeholders)\n99
- Category
- Security
- Occurrences
- 99
- Severity
- warning
Sample message
Use placeholders and $wpdb->prepare(); found interpolated variable $placeholders at WHERE comment_author_email IN ($placeholders)\n
ERRORI18nMissing Translators CommentA function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.95
- Category
- I18n
- Occurrences
- 95
- Severity
- error
Sample message
A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$avatar_html'.75
- Category
- Security
- Occurrences
- 75
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$avatar_html'.
WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.58
- Category
- Security
- Occurrences
- 58
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGSecurityDatabase parameter is not escapedUnescaped parameter $assignment_table used in $wpdb->get_var()\n$assignment_table assigned unsafely at line 196.50
- Category
- Security
- Occurrences
- 50
- Severity
- warning
Sample message
Unescaped parameter $assignment_table used in $wpdb->get_var()\n$assignment_table assigned unsafely at line 196.
WARNINGSecurityMissing nonce verificationProcessing form data without nonce verification.25
- Category
- Security
- Occurrences
- 25
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGMaintainabilityerror log error logerror_log() found. Debug code should not normally be used in production.24
- Category
- Maintainability
- Occurrences
- 24
- Severity
- warning
Sample message
error_log() found. Debug code should not normally be used in production.
Show 15 moreShow less
ERRORMaintainabilitydate date21
- Category
- Maintainability
- Occurrences
- 21
- Severity
- error
Sample message
date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.
WARNINGMaintainabilitySchema Change20
- Category
- Maintainability
- Occurrences
- 20
- Severity
- warning
Sample message
Attempting a database schema change is discouraged.
WARNINGSecurityRequest data is not unslashed20
- Category
- Security
- Occurrences
- 20
- Severity
- warning
Sample message
$_GET['email'] not unslashed before sanitization. Use wp_unslash() or similar
ERRORMaintainabilitywp function not compatible with requires wp20
- Category
- Maintainability
- Occurrences
- 20
- Severity
- error
Sample message
Function "str_starts_with()" requires WordPress 5.9.0, but your plugin minimum supported version is WordPress 4.7.0.
WARNINGSecurityInput is not sanitized18
- Category
- Security
- Occurrences
- 18
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_COOKIE['comment_author_' . $cookie_hash]
ERRORI18nText Domain Mismatch18
- Category
- I18n
- Occurrences
- 18
- Severity
- error
Sample message
Mismatched text domain. Expected 'yay-customer-reviews-woocommerce' but got 'woocommerce'.
ERRORSecurityDatabase parameter is not escaped15
- Category
- Security
- Occurrences
- 15
- Severity
- error
Sample message
Unescaped parameter $answers_table used in $wpdb->get_var()\n$answers_table assigned unsafely at line 236.
ERRORSecuritySQL query is not prepared15
- Category
- Security
- Occurrences
- 15
- Severity
- error
Sample message
Use placeholders and $wpdb->prepare(); found $count_query
ERRORSecurityException output is not escaped10
- Category
- Security
- Occurrences
- 10
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"Cannot resolve parameter {$param->getName()} in {$class}"'.
ERRORI18nUnordered Placeholders Text8
- Category
- I18n
- Occurrences
- 8
- Severity
- error
Sample message
Multiple placeholders in translatable strings should be ordered. Expected "%1$d, %2$d", but got "%d, %d" in 'Images: up to %d files, max %dMB each'.
WARNINGMaintainabilityslow db query meta key7
- Category
- Maintainability
- Occurrences
- 7
- Severity
- warning
Sample message
Detected usage of meta_key, possible slow query.
ERRORMaintainabilityunlink unlink7
- Category
- Maintainability
- Occurrences
- 7
- Severity
- error
Sample message
unlink() is discouraged. Use wp_delete_file() to delete a file.
WARNINGMaintainabilityslow db query meta query6
- Category
- Maintainability
- Occurrences
- 6
- Severity
- warning
Sample message
Detected usage of meta_query, possible slow query.
ERRORMaintainabilityfile system operations fclose5
- Category
- Maintainability
- Occurrences
- 5
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fclose().
ERRORMaintainabilityfile system operations fopen5
- Category
- Maintainability
- Occurrences
- 5
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fopen().
External Connections
Potential connections found in static code analysis.
Outbound calls
114
External assets
2
Incoming endpoints
3
Notable Domains
yaycommerce.com14 · outbound
cdn.jsdelivr.net4 · outbound
generativelanguage.googleapis.com2 · outbound
php-fig.org2 · outbound
woocommerce.com2 · outbound
api.yayreviews.com1 · outbound
Platform / Reference Domains
w3.org33 · platform/reference
downloads.wordpress.org19 · platform/reference
ps.w.org19 · platform/reference
schema.org3 · platform/reference
wordpress.org3 · platform/reference
github.com2 · platform/reference
gnu.org1 · platform/reference
External Asset Domains
flagcdn.com4 · asset + outbound
Incoming Endpoints
No public endpoints detected.
Admin AJAX endpoints3
wp_ajax_yay_recommended_activate_pluginauthenticated
wp_ajax
wp_ajax_yay_recommended_get_plugin_dataauthenticated
wp_ajax
wp_ajax_yay_recommended_upgrade_pluginauthenticated
wp_ajax
Score History
First score snapshot
v1.3.1
24
Latest
- Findings
- 1,570
- Errors
- 314
- Warnings
- 1,256
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 24 | 1,570 | 314 | 1,256 | v1.3.1 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Author
Category
Issue
Domain
Related
Contact Form 769 scoreElementor Website Builder – more than just a page builder39 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce22 scoreAkismet Anti-spam: Spam Protection35 scoreLiteSpeed Cache35 scoreAll-in-One WP Migration and Backup34 scoreMailPoet – Newsletters, Email Marketing, and Automation23 scoreCustomer Reviews for WooCommerce24 scoreSide Cart Woocommerce | Woocommerce Cart27 scoreSite Reviews23 scoreEmail Subscribers & Newsletters – Email Marketing, Post Notifications & Newsletter Plugin for WordPress23 scoreYayMail – WooCommerce Email Customizer51 scoreWP Social Ninja – Embed Social Feeds, User Reviews & Chat Widgets79 score
Author
Category
Issue
Domain
Related
Contact Form 769 scoreElementor Website Builder – more than just a page builder39 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce22 scoreAkismet Anti-spam: Spam Protection35 scoreLiteSpeed Cache35 scoreAll-in-One WP Migration and Backup34 scoreMailPoet – Newsletters, Email Marketing, and Automation23 scoreCustomer Reviews for WooCommerce24 scoreSide Cart Woocommerce | Woocommerce Cart27 scoreSite Reviews23 scoreEmail Subscribers & Newsletters – Email Marketing, Post Notifications & Newsletter Plugin for WordPress23 scoreYayMail – WooCommerce Email Customizer51 scoreWP Social Ninja – Embed Social Feeds, User Reviews & Chat Widgets79 score
Related Plugins
98
Gutena Newsletter – Subscriber Block & Connect Mailchimp
1k+ active installs
97
Gutena Star Ratings
1k+ active installs
97
Customer Reviews Collector for WooCommerce
5k+ active installs
96
MyRewards
2k+ active installs
89
Merchant Center Reviews for WooCommerce
600 active installs
89