Make payments immediate with PayPal Express Checkout and forget about customers’ complaints about pending orders.
23
Score
772
Errors
2,883
Warnings
+0
Change
Category Scores
Security0
Repo91
Performance96
Maintainability0
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Maintainability
2,910
14 issue groups
I18n
648
3 issue groups
Security
88
7 issue groups
Performance
4
1 issue group
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$_defaults".2,560
- Category
- Maintainability
- Occurrences
- 2,560
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$_defaults".
ERRORI18nText Domain MismatchMismatched text domain. Expected 'yith-paypal-express-checkout-for-woocommerce' but got 'woocommerce'.634
- Category
- I18n
- Occurrences
- 634
- Severity
- error
Sample message
Mismatched text domain. Expected 'yith-paypal-express-checkout-for-woocommerce' but got 'woocommerce'.
WARNINGMaintainabilityNon-prefixed hook nameHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "'woocommerce_settings_' . sanitize_title( $field['id'] )".176
- Category
- Maintainability
- Occurrences
- 176
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "'woocommerce_settings_' . sanitize_title( $field['id'] )".
WARNINGMaintainabilityNon-prefixed functionFunctions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "YIT_Plugin_Licence".62
- Category
- Maintainability
- Occurrences
- 62
- Severity
- warning
Sample message
Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "YIT_Plugin_Licence".
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found 'wc_price'.58
- Category
- Security
- Occurrences
- 58
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found 'wc_price'.
ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;42
- Category
- Maintainability
- Occurrences
- 42
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
WARNINGMaintainabilityNon-prefixed classClasses declared by a theme/plugin should start with the theme/plugin prefix. Found: "YIT_Ajax".32
- Category
- Maintainability
- Occurrences
- 32
- Severity
- warning
Sample message
Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "YIT_Ajax".
ERRORSecurityException output is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$response'.16
- Category
- Security
- Occurrences
- 16
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$response'.
WARNINGMaintainabilityDynamic hook nameHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "$deprecated_filters[ $filter ]".12
- Category
- Maintainability
- Occurrences
- 12
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "$deprecated_filters[ $filter ]".
WARNINGMaintainabilityNon-prefixed constantGlobal constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "DOING_YITH_BH_ONBOARDING".12
- Category
- Maintainability
- Occurrences
- 12
- Severity
- warning
Sample message
Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "DOING_YITH_BH_ONBOARDING".
Show 15 moreShow less
ERRORI18nMissing Arg Domain12
- Category
- I18n
- Occurrences
- 12
- Severity
- error
Sample message
Missing $domain parameter in function call to __().
WARNINGSecurityInput is not sanitized6
- Category
- Security
- Occurrences
- 6
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_GET['term']
WARNINGPerformancePost Not In exclude4
- Category
- Performance
- Occurrences
- 4
- Severity
- warning
Sample message
Using exclusionary parameters, like exclude, in calls to get_posts() should be done with caution, see https://wpvip.com/documentation/performance-improvements-by-removing-usage-of-post__not_in/ for more information.
ERRORMaintainabilityForbidden PHP function found2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
The use of function get_post_type_labels() is forbidden
WARNINGMaintainabilityDirect Query2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGMaintainabilityNo Caching2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
WARNINGSecurityInterpolated SQL is not prepared2
- Category
- Security
- Occurrences
- 2
- Severity
- warning
Sample message
Use placeholders and $wpdb->prepare(); found interpolated variable $from at AND ywsbs_p.post_date_gmt < FROM_UNIXTIME($from)\n
WARNINGMaintainabilityerror log error log2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
error_log() found. Debug code should not normally be used in production.
WARNINGMaintainabilityerror log print r2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
print_r() found. Debug code should not normally be used in production.
WARNINGSecurityNonce verification recommended2
- Category
- Security
- Occurrences
- 2
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGSecuritywp redirect wp redirect2
- Category
- Security
- Occurrences
- 2
- Severity
- warning
Sample message
wp_redirect() found. Using wp_safe_redirect(), along with the "allowed_redirect_hosts" filter if needed, can help avoid any chances of malicious redirects within code. It is also important to remember to call exit() after a redirect so that no other unwanted code is executed.
WARNINGSecurityRequest data is not unslashed2
- Category
- Security
- Occurrences
- 2
- Severity
- warning
Sample message
$_POST['_wpnonce'] not unslashed before sanitization. Use wp_unslash() or similar
ERRORMaintainabilityDeprecated parameter: get_terms parameter 22
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
The parameter "$args" at position #2 of get_terms() has been deprecated since WordPress version 4.5.0. Instead do not pass the parameter.
ERRORI18nNon Singular String Literal Text2
- Category
- I18n
- Occurrences
- 2
- Severity
- error
Sample message
The $text parameter must be a single text string literal. Found: 'Error: Unable to process the External Services API Request.' . $response['response']['message']
ERRORMaintainabilitylibrary core files2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
Library files that are already in the WordPress core are not permitted.
External Connections
Potential connections found in static code analysis.
Outbound calls
279
External assets
5
Incoming endpoints
16
Notable Domains
yithemes.com23 · outbound
paypal.com12 · outbound
jacklmoore.com10 · outbound
api-3t.paypal.com8 · outbound
api-3t.sandbox.paypal.com8 · outbound
docs.yithemes.com5 · outbound
Platform / Reference Domains
gnu.org49 · platform/reference
w3.org48 · platform/reference
github.com10 · platform/reference
codex.wordpress.org4 · platform/reference
profiles.wordpress.org4 · platform/reference
wordpress.org4 · platform/reference
opensource.org2 · platform/reference
s.w.org2 · platform/reference
External Asset Domains
paypalobjects.com30 · asset + outbound
gmpg.org2 · asset
Incoming Endpoints
wp_ajax_nopriv_yith_plugin_fw_public
wp_ajax
Admin AJAX endpoints7
wp_ajax_yith_bh_onboardingauthenticated
wp_ajax
wp_ajax_yith_create_log_fileauthenticated
wp_ajax
wp_ajax_yith_paypal_ec_dismiss_notice_messageauthenticated
wp_ajax
wp_ajax_yith_plugin_fw_authenticated
wp_ajax
wp_ajax_yith_plugin_fw_gutenberg_do_shortcodeauthenticated
wp_ajax
wp_ajax_yith_plugin_fw_save_toggle_elementauthenticated
wp_ajax
wp_ajax_yith_plugin_fw_save_toggle_element_metaboxauthenticated
wp_ajax
Score History
3 score snapshots
v1.60.0
23
Latest
- Findings
- 3,655
- Errors
- 772
- Warnings
- 2,883
- Check
- 2.0.0
v1.59.0
23
Score
- Findings
- 1,830
- Errors
- 387
- Warnings
- 1,443
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 23 | 3,655 | 772 | 2,883 | v1.60.0 | 2.0.0 |
| 23 | 1,830 | 387 | 1,443 | v1.59.0 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Author
Category
Issue
Domain
Related
Payment Gateway for PayPal on WooCommerce96 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder39 scoreLiteSpeed Cache35 scoreWooCommerce21 scoreAkismet Anti-spam: Spam Protection35 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreJetpack – WP Security, Backup, Speed, & Growth22 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreAdvanced Custom Fields (ACF®)23 scoreWooCommerce PayPal Payments37 scoreYITH WooCommerce Wishlist24 score
Author
Category
Issue
Domain
Related
Payment Gateway for PayPal on WooCommerce96 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder39 scoreLiteSpeed Cache35 scoreWooCommerce21 scoreAkismet Anti-spam: Spam Protection35 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreJetpack – WP Security, Backup, Speed, & Growth22 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreAdvanced Custom Fields (ACF®)23 scoreWooCommerce PayPal Payments37 scoreYITH WooCommerce Wishlist24 score
Related Plugins
UddoktaPay
1k+ active installs
99
Payment Gateway for PayPal on WooCommerce
10k+ active installs
96
PayPal Enterprise Payments (formerly Braintree) for WooCommerce
10k+ active installs
86
PayPal Payment Buttons
400 active installs
85
RealHomes PayPal Payments
400 active installs
60
Easy PayPal Shopping Cart
1k+ active installs
43