YITH WooCommerce Ajax Product Filter

YITH WooCommerce Ajax Product Filter offers you the perfect way to filter all products of your WooCommerce shop.

v5.21.0YITHEMESUpdated Added 80k+ installs70% rating0% support resolved
23
Score
463
Errors
1,527
Warnings
+0
Change

Category Scores

Security0
Repo94
Performance88
Maintainability0

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

1,990 findings

Maintainability

1,608

15 issue groups

I18n

326

2 issue groups

Security

46

6 issue groups

Performance

7

2 issue groups

WARNINGMaintainabilityNon Prefixed Variable FoundGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$_defaults".1,331
Category
Maintainability
Occurrences
1,331
Severity
warning

Sample message

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$_defaults".

ERRORI18nText Domain MismatchMismatched text domain. Expected 'yith-woocommerce-ajax-navigation' but got 'woocommerce'.320
Category
I18n
Occurrences
320
Severity
error

Sample message

Mismatched text domain. Expected 'yith-woocommerce-ajax-navigation' but got 'woocommerce'.

ERRORMaintainabilitymissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;86
Category
Maintainability
Occurrences
86
Severity
error

Sample message

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

WARNINGMaintainabilityNon Prefixed Hookname FoundHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "'woocommerce_settings_' . sanitize_title( $field['id'] )".84
Category
Maintainability
Occurrences
84
Severity
warning

Sample message

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "'woocommerce_settings_' . sanitize_title( $field['id'] )".

WARNINGMaintainabilityNon Prefixed Function FoundFunctions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "YIT_Plugin_Licence".48
Category
Maintainability
Occurrences
48
Severity
warning

Sample message

Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "YIT_Plugin_Licence".

ERRORSecurityOutput Not EscapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found 'wc_esc_json'.28
Category
Security
Occurrences
28
Severity
error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found 'wc_esc_json'.

WARNINGMaintainabilityNon Prefixed Class FoundClasses declared by a theme/plugin should start with the theme/plugin prefix. Found: "WPML_Language_Metabox".17
Category
Maintainability
Occurrences
17
Severity
warning

Sample message

Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "WPML_Language_Metabox".

WARNINGMaintainabilityDynamic Hookname FoundHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "$deprecated_filters[ $filter ]".9
Category
Maintainability
Occurrences
9
Severity
warning

Sample message

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "$deprecated_filters[ $filter ]".

WARNINGSecurityMissingProcessing form data without nonce verification.8
Category
Security
Occurrences
8
Severity
warning

Sample message

Processing form data without nonce verification.

WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.6
Category
Maintainability
Occurrences
6
Severity
warning

Sample message

Use of a direct database call is discouraged.

Show 15 more
WARNINGMaintainabilityNo Caching6
Category
Maintainability
Occurrences
6
Severity
warning

Sample message

Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().

WARNINGMaintainabilityNon Prefixed Constant Found6
Category
Maintainability
Occurrences
6
Severity
warning

Sample message

Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "DOING_YITH_BH_ONBOARDING".

ERRORI18nMissing Arg Domain6
Category
I18n
Occurrences
6
Severity
error

Sample message

Missing $domain parameter in function call to __().

ERRORSecurityException Not Escaped4
Category
Security
Occurrences
4
Severity
error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$response'.

WARNINGPerformancePost Not In exclude4
Category
Performance
Occurrences
4
Severity
warning

Sample message

Using exclusionary parameters, like exclude, in calls to get_posts() should be done with caution, see https://wpvip.com/documentation/performance-improvements-by-removing-usage-of-post__not_in/ for more information.

ERRORMaintainabilityNot Allowed3
Category
Maintainability
Occurrences
3
Severity
error

Sample message

Use of heredoc syntax (<<<) is not allowed; use standard strings or inline HTML instead

ERRORSecurityNot Prepared3
Category
Security
Occurrences
3
Severity
error

Sample message

Use placeholders and $wpdb->prepare(); found $query

ERRORPerformanceSuppress Filters suppress filters3
Category
Performance
Occurrences
3
Severity
error

Sample message

Setting `suppress_filters` to `true` is prohibited.

ERRORMaintainabilitylibrary core files3
Category
Maintainability
Occurrences
3
Severity
error

Sample message

Library files that are already in the WordPress core are not permitted.

WARNINGMaintainabilitytrademarked term3
Category
Maintainability
Occurrences
3
Severity
warning

Sample message

The plugin name includes a restricted term. Your chosen plugin name - "YITH WooCommerce Ajax Product Filter" - contains the restricted term "woocommerce" which cannot be used within in your plugin name, unless your plugin name contains one of the allowed patterns: "for woocommerce", "with woocommerce", "using woocommerce", or "and woocommerce". The term must still not appear anywhere else in your name.

ERRORMaintainabilityFound2
Category
Maintainability
Occurrences
2
Severity
error

Sample message

The use of function get_post_type_labels() is forbidden

WARNINGSecurityInput Not Sanitized2
Category
Security
Occurrences
2
Severity
warning

Sample message

Detected usage of a non-sanitized input variable: $_GET[&#039;term&#039;]

ERRORMaintainabilityGet terms Param2Found2
Category
Maintainability
Occurrences
2
Severity
error

Sample message

The parameter "$args" at position #2 of get_terms() has been deprecated since WordPress version 4.5.0. Instead do not pass the parameter.

WARNINGMaintainabilityupdate modification detected2
Category
Maintainability
Occurrences
2
Severity
warning

Sample message

Plugin Updater detected. Detected code which may be altering WordPress update routines. Detected: _site_transient_update_plugins

WARNINGSecurityUnescaped DBParameter1
Category
Security
Occurrences
1
Severity
warning

Sample message

Unescaped parameter $query used in $wpdb-&gt;query()\n$query assigned unsafely at line 55.

Score History

First score snapshot

v5.21.0

23

Latest

Findings
1,990
Errors
463
Warnings
1,527
Check
2.0.0

Related Plugins