The YITH Essential Kit for WooCommerce #1 plugin enhance your WordPress site with this group of impressive features for WooCommerce.
23
Score
397
Errors
1,481
Warnings
+0
Change
Category Scores
Security0
Repo86
Performance97
Maintainability0
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Maintainability
1,492
14 issue groups
I18n
335
4 issue groups
Security
46
4 issue groups
Performance
2
1 issue group
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$_defaults".1,326
- Category
- Maintainability
- Occurrences
- 1,326
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$_defaults".
ERRORI18nText Domain MismatchMismatched text domain. Expected 'yith-essential-kit-for-woocommerce-1' but got 'woocommerce'.317
- Category
- I18n
- Occurrences
- 317
- Severity
- error
Sample message
Mismatched text domain. Expected 'yith-essential-kit-for-woocommerce-1' but got 'woocommerce'.
WARNINGMaintainabilityNon-prefixed hook nameHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "'woocommerce_settings_' . sanitize_title( $field['id'] )".70
- Category
- Maintainability
- Occurrences
- 70
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "'woocommerce_settings_' . sanitize_title( $field['id'] )".
WARNINGMaintainabilityNon-prefixed functionFunctions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "YIT_Plugin_Licence".30
- Category
- Maintainability
- Occurrences
- 30
- Severity
- warning
Sample message
Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "YIT_Plugin_Licence".
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$action_links'.30
- Category
- Security
- Occurrences
- 30
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$action_links'.
ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;23
- Category
- Maintainability
- Occurrences
- 23
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
WARNINGMaintainabilityNon-prefixed classClasses declared by a theme/plugin should start with the theme/plugin prefix. Found: "YIT_Ajax".16
- Category
- Maintainability
- Occurrences
- 16
- Severity
- warning
Sample message
Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "YIT_Ajax".
WARNINGMaintainabilityNon-prefixed constantGlobal constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "DOING_YITH_BH_ONBOARDING".12
- Category
- Maintainability
- Occurrences
- 12
- Severity
- warning
Sample message
Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "DOING_YITH_BH_ONBOARDING".
WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.10
- Category
- Security
- Occurrences
- 10
- Severity
- warning
Sample message
Processing form data without nonce verification.
ERRORI18nMissing Translators CommentA function call to esc_html__() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.10
- Category
- I18n
- Occurrences
- 10
- Severity
- error
Sample message
A function call to esc_html__() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.
Show 15 moreShow less
WARNINGMaintainabilityDynamic hook name7
- Category
- Maintainability
- Occurrences
- 7
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "$deprecated_filters[ $filter ]".
ERRORI18nMissing Arg Domain6
- Category
- I18n
- Occurrences
- 6
- Severity
- error
Sample message
Missing $domain parameter in function call to __().
ERRORSecurityException output is not escaped3
- Category
- Security
- Occurrences
- 3
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$response'.
WARNINGSecurityInput is not sanitized3
- Category
- Security
- Occurrences
- 3
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_GET['plugin_status']
ERRORI18nNon Singular String Literal Text2
- Category
- I18n
- Occurrences
- 2
- Severity
- error
Sample message
The $text parameter must be a single text string literal. Found: 'Error: Unable to process the External Services API Request.' . $response['response']['message']
WARNINGPerformancePost Not In exclude2
- Category
- Performance
- Occurrences
- 2
- Severity
- warning
Sample message
Using exclusionary parameters, like exclude, in calls to get_posts() should be done with caution, see https://wpvip.com/documentation/performance-improvements-by-removing-usage-of-post__not_in/ for more information.
WARNINGMaintainabilityupdate modification detected2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
Plugin Updater detected. Detected code which may be altering WordPress update routines. Detected: _site_transient_update_plugins
ERRORMaintainabilityForbidden PHP function found1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
The use of function get_post_type_labels() is forbidden
WARNINGMaintainabilityDirect Query1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGMaintainabilityNo Caching1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
ERRORMaintainabilityDeprecated parameter: get_terms parameter 21
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
The parameter "$args" at position #2 of get_terms() has been deprecated since WordPress version 4.5.0. Instead do not pass the parameter.
ERRORMaintainabilitylibrary core files1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
Library files that are already in the WordPress core are not permitted.
ERRORRepo Complianceplugin header no license1
- Category
- Repo Compliance
- Occurrences
- 1
- Severity
- error
Sample message
Missing "License" in Plugin Header. Please update your Plugin Header with a valid GPLv2 (or later) compatible license.
ERRORMaintainabilityplugin updater detected1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
Plugin Updater detected. These are not permitted in WordPress.org hosted plugins. Detected: site_transient_update_plugins
ERRORRepo Compliancereadme mismatched header requires1
- Category
- Repo Compliance
- Occurrences
- 1
- Severity
- error
Sample message
Mismatched Requires at least: 6.7 != 6.8. "Requires at least" needs to be exactly the same with that in your main plugin file's header.
External Connections
Potential connections found in static code analysis.
Outbound calls
110
External assets
2
Incoming endpoints
10
Notable Domains
yithemes.com14 · outbound
jacklmoore.com5 · outbound
docs.yithemes.com4 · outbound
codemirror.net2 · outbound
fontawesome.io2 · outbound
jqueryui.com2 · outbound
Platform / Reference Domains
w3.org37 · platform/reference
gnu.org8 · platform/reference
github.com5 · platform/reference
wordpress.org4 · platform/reference
codex.wordpress.org2 · platform/reference
downloads.wordpress.org2 · platform/reference
profiles.wordpress.org2 · platform/reference
opensource.org1 · platform/reference
s.w.org1 · platform/reference
External Asset Domains
gmpg.org1 · asset
Incoming Endpoints
wp_ajax_nopriv_yith_plugin_fw_public
wp_ajax
Admin AJAX endpoints9
wp_ajax_activate_yith_essential_kit_moduleauthenticated
wp_ajax
wp_ajax_deactivate_yith_essential_kit_moduleauthenticated
wp_ajax
wp_ajax_install_yith_essential_kit_moduleauthenticated
wp_ajax
wp_ajax_yith_bh_onboardingauthenticated
wp_ajax
wp_ajax_yith_create_log_fileauthenticated
wp_ajax
wp_ajax_yith_plugin_fw_authenticated
wp_ajax
wp_ajax_yith_plugin_fw_gutenberg_do_shortcodeauthenticated
wp_ajax
wp_ajax_yith_plugin_fw_save_toggle_elementauthenticated
wp_ajax
wp_ajax_yith_plugin_fw_save_toggle_element_metaboxauthenticated
wp_ajax
Score History
2 score snapshots
v2.53.0
23
Latest
- Findings
- 1,878
- Errors
- 397
- Warnings
- 1,481
- Check
- 2.0.0
v2.52.0
23
Score
- Findings
- 1,878
- Errors
- 397
- Warnings
- 1,481
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 23 | 1,878 | 397 | 1,481 | v2.53.0 | 2.0.0 |
| 23 | 1,878 | 397 | 1,481 | v2.52.0 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Author
Category
Issue
Domain
Related
YITH WooCommerce Wishlist24 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder39 scoreLiteSpeed Cache35 scoreWooCommerce21 scoreAkismet Anti-spam: Spam Protection35 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreJetpack – WP Security, Backup, Speed, & Growth22 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreAdvanced Custom Fields (ACF®)23 scoreGoogle for WooCommerce37 scoreWooCommerce PayPal Payments37 score
Author
Category
Issue
Domain
Related
YITH WooCommerce Wishlist24 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder39 scoreLiteSpeed Cache35 scoreWooCommerce21 scoreAkismet Anti-spam: Spam Protection35 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreJetpack – WP Security, Backup, Speed, & Growth22 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreAdvanced Custom Fields (ACF®)23 scoreGoogle for WooCommerce37 scoreWooCommerce PayPal Payments37 score
Related Plugins
Kliken: Ads + Pixel for Meta
30k+ active installs
100
Paystack WooCommerce Payment Gateway
30k+ active installs
100
Store Vacation Lite for WooCommerce
20k+ active installs
100
EAN Barcode Generator for WooCommerce: UPC, ISBN & GTIN Inventory
10k+ active installs
100
Visa Acceptance Solutions
10k+ active installs
100
No Gutenberg? – Choose Where to Use the Block Editor or the Classic Editor
9k+ active installs
100