YITH WooCommerce Ajax Search

YITH WooCommerce Ajax Search allows your users to search products in real time.

v2.25.0YITHEMESUpdated 2026-06-16Added Aug 2, 201330k+ installs60% rating
22
Score
408
Errors
1,659
Warnings
+0
Change

Category Scores

Security0
Repo91
Performance88
Maintainability0

Top Issues by Category

maintainability1,679
i18n330
security48
performance7

Issues Details

2,067 issues found in latest scan

WARNING1,384
WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedVariableFound

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$_defaults".

ERROR320
WordPress.WP.I18n.TextDomainMismatch

Mismatched text domain. Expected 'yith-woocommerce-ajax-search' but got 'woo-gutenberg-products-block'.

WARNING83
WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedHooknameFound

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "'woocommerce_settings_' . sanitize_title( $field['id'] )".

WARNING55
WordPress.DB.DirectDatabaseQuery.DirectQuery

Use of a direct database call is discouraged.

WARNING51
WordPress.DB.DirectDatabaseQuery.NoCaching

Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().

ERROR33
WordPress.Security.EscapeOutput.OutputNotEscaped

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$args['after_title']'.

ERROR32
missing_direct_file_access_protection

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

WARNING31
WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedFunctionFound

Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "YIT_Plugin_Licence".

WARNING18
WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedClassFound

Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "Abstract_YITH_WCAS_Gb_Block".

WARNING10
PluginCheck.Security.DirectDB.UnescapedDBParameter

Unescaped parameter $ids used in $wpdb->query()\n$ids used without escaping.

ERROR8
WordPress.WP.I18n.MissingArgDomain

Missing $domain parameter in function call to __().

WARNING7
WordPress.NamingConventions.PrefixAllGlobals.DynamicHooknameFound

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "$deprecated_filters[ $filter ]".

WARNING6
WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedConstantFound

Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "DOING_YITH_BH_ONBOARDING".

WARNING4
WordPressVIPMinimum.Performance.WPQueryParams.PostNotIn_exclude

Using exclusionary parameters, like exclude, in calls to get_posts() should be done with caution, see https://wpvip.com/documentation/performance-improvements-by-removing-usage-of-post__not_in/ for more information.

ERROR3
WordPress.Security.EscapeOutput.ExceptionNotEscaped

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$response'.

ERROR3
WordPress.WP.DeprecatedParameters.Get_termsParam2Found

The parameter "$args" at position #2 of get_terms() has been deprecated since WordPress version 4.5.0. Instead do not pass the parameter.

ERROR3
WordPressVIPMinimum.Performance.WPQueryParams.SuppressFilters_suppress_filters

Setting `suppress_filters` to `true` is prohibited.

WARNING3
trademarked_term

The plugin name includes a restricted term. Your chosen plugin name - "YITH WooCommerce Ajax Search" - contains the restricted term "woocommerce" which cannot be used within in your plugin name, unless your plugin name contains one of the allowed patterns: "for woocommerce", "with woocommerce", "using woocommerce", or "and woocommerce". The term must still not appear anywhere else in your name.

ERROR2
Generic.PHP.ForbiddenFunctions.Found

The use of function get_post_type_labels() is forbidden

WARNING2
WordPress.Security.ValidatedSanitizedInput.InputNotSanitized

Detected usage of a non-sanitized input variable: $_GET['term']

WARNING2
update_modification_detected

Plugin Updater detected. Detected code which may be altering WordPress update routines. Detected: _site_transient_update_plugins

WARNING1
PluginCheck.CodeAnalysis.DiscouragedFunctions.load_plugin_textdomainFound

load_plugin_textdomain() has been discouraged since WordPress version 4.6. When your plugin is hosted on WordPress.org, you no longer need to manually include this function call for translations under your plugin slug. WordPress will automatically load the translations for you as needed.

WARNING1
WordPress.DB.SlowDBQuery.slow_db_query_tax_query

Detected usage of tax_query, possible slow query.

ERROR1
WordPress.WP.I18n.NonSingularStringLiteralText

The $text parameter must be a single text string literal. Found: 'Error: Unable to process the External Services API Request.' . $response['response']['message']

ERROR1
library_core_files

Library files that are already in the WordPress core are not permitted.

Latest Snapshot

Findings

2,067

Errors

408

Warnings

1,659

Score History

First score snapshot

First scan completed Jun 20, 2026

v2.25.0 · Plugin Check 2.0.0 · Model 2026.06-mvp-static-v2

Jun 20, 2026

v2.25.0

22

Latest

Findings
2,067
Errors
408
Warnings
1,659
Plugin Check
2.0.0
Model
2026.06-mvp-static-v2

Related Plugins