Yektanet Ecommerce plugin to integrate with yektanet advertising system
Prioritized issue groups from the latest Plugin Check scan
Security
110
9 issue groups
Maintainability
36
9 issue groups
I18n
1
1 issue group
Repo Compliance
1
1 issue group
Sample message
$_COOKIE['_yngt'] not unslashed before sanitization. Use wp_unslash() or similar
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"<h4 class='yektanet__setting__error__text'>$error_text</h4>"'.
Sample message
Detected usage of a possibly undefined superglobal array index: $_COOKIE['_yngt']. Check that the array index exists before using it.
Sample message
Use placeholders and $wpdb->prepare(); found interpolated variable $limit at "SELECT COUNT(product_id) as count_val, product_id, last_updated_time FROM {$wpdb->prefix}yektanet_products_views WHERE last_updated_time between $one_day and $now_date GROUP by product_id order by count_val DESC limit $limit"
Sample message
Short PHP opening tag used with echo; expected "<?php echo $titles ..." but found "<?= $titles ..."
Sample message
Use of a direct database call is discouraged.
Sample message
Detected usage of a non-sanitized input variable: $_POST['_nonce']
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
Sample message
In footer ($in_footer) is not set explicitly wp_enqueue_script; It is recommended to load scripts in the footer. Please set this value to `true` to load it in the footer, or explicitly `false` if it should be loaded in the header.
Sample message
Unescaped parameter $one_day used in $wpdb->get_results()\n$one_day assigned unsafely at line 81.
Sample message
Processing form data without nonce verification.
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$plugin_dir_path".
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "active_plugins".
Sample message
Unescaped parameter $table used in $wpdb->query()\n$table assigned unsafely at line 46.
Sample message
Detected usage of meta_key, possible slow query.
Sample message
Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "count_of_products_to_show_in_charts".
Sample message
wp_redirect() found. Using wp_safe_redirect(), along with the "allowed_redirect_hosts" filter if needed, can help avoid any chances of malicious redirects within code. It is also important to remember to call exit() after a redirect so that no other unwanted code is executed.
Sample message
Resource version not set in call to wp_enqueue_style(). This means new versions of the style may not always be loaded due to browser caching.
Sample message
Missing $domain parameter in function call to __().
Sample message
Tested up to: 6.3 < 7.0. The "Tested up to" value in your plugin is not set to the current version of WordPress. This means your plugin will not show up in searches, as we require plugins to be compatible and documented as tested up to the most recent version of WordPress.
Potential connections found in static code analysis.
Outbound calls
11
External assets
4
Incoming endpoints
2
wp_ajax
wp_ajax
First score snapshot
v1.1.6
40
Latest
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 40 | 148 | 45 | 103 | v1.1.6 | 2.0.0 |
Author, categories, issues, domains, and nearby plugins.