YITH WooCommerce Badge Management

YITH WooCommerce Badge Management allows you to create and manage custom badges for products.

v3.25.0YITHEMESUpdated Added 10k+ installs58% rating
32
Score
413
Errors
1,446
Warnings
+0
Change

Category Scores

Security14
Repo94
Performance97
Maintainability0

Top Issues by Category

maintainability1,500
i18n324
security32
performance2
repo_compliance1

Issues Details

1,859 issues found in latest scan

WARNING1,305
WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedVariableFound

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$_defaults".

ERROR317
WordPress.WP.I18n.TextDomainMismatch

Mismatched text domain. Expected 'yith-woocommerce-badges-management' but got 'woocommerce'.

WARNING72
WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedHooknameFound

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "'woocommerce_settings_' . sanitize_title( $field['id'] )".

ERROR53
missing_direct_file_access_protection

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

WARNING30
WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedFunctionFound

Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "YIT_Plugin_Licence".

ERROR27
WordPress.Security.EscapeOutput.OutputNotEscaped

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found 'yith_field_deps_data'.

WARNING16
WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedClassFound

Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "YIT_Ajax".

WARNING6
WordPress.NamingConventions.PrefixAllGlobals.DynamicHooknameFound

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "$deprecated_filters[ $filter ]".

WARNING6
WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedConstantFound

Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "DOING_YITH_BH_ONBOARDING".

ERROR6
WordPress.WP.I18n.MissingArgDomain

Missing $domain parameter in function call to __().

ERROR3
WordPress.Security.EscapeOutput.ExceptionNotEscaped

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$response'.

WARNING3
trademarked_term

The plugin name includes a restricted term. Your chosen plugin name - "YITH WooCommerce Badge Management" - contains the restricted term "woocommerce" which cannot be used within in your plugin name, unless your plugin name contains one of the allowed patterns: "for woocommerce", "with woocommerce", "using woocommerce", or "and woocommerce". The term must still not appear anywhere else in your name.

WARNING2
WordPress.Security.ValidatedSanitizedInput.InputNotSanitized

Detected usage of a non-sanitized input variable: $_GET['term']

WARNING2
WordPressVIPMinimum.Performance.WPQueryParams.PostNotIn_exclude

Using exclusionary parameters, like exclude, in calls to get_posts() should be done with caution, see https://wpvip.com/documentation/performance-improvements-by-removing-usage-of-post__not_in/ for more information.

WARNING2
update_modification_detected

Plugin Updater detected. Detected code which may be altering WordPress update routines. Detected: _site_transient_update_plugins

ERROR1
Generic.PHP.ForbiddenFunctions.Found

The use of function get_post_type_labels() is forbidden

WARNING1
WordPress.DB.DirectDatabaseQuery.DirectQuery

Use of a direct database call is discouraged.

WARNING1
WordPress.DB.DirectDatabaseQuery.NoCaching

Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().

ERROR1
WordPress.WP.DeprecatedParameters.Get_termsParam2Found

The parameter "$args" at position #2 of get_terms() has been deprecated since WordPress version 4.5.0. Instead do not pass the parameter.

ERROR1
WordPress.WP.I18n.NonSingularStringLiteralText

The $text parameter must be a single text string literal. Found: 'Error: Unable to process the External Services API Request.' . $response['response']['message']

ERROR1
badly_named_files

File and folder names must not contain spaces or special characters.

ERROR1
library_core_files

Library files that are already in the WordPress core are not permitted.

ERROR1
plugin_header_no_license

Missing "License" in Plugin Header. Please update your Plugin Header with a valid GPLv2 (or later) compatible license.

ERROR1
plugin_updater_detected

Plugin Updater detected. These are not permitted in WordPress.org hosted plugins. Detected: site_transient_update_plugins

Latest Snapshot

Findings

1,859

Errors

413

Warnings

1,446

Score History

First score snapshot

First scan completed

v3.25.0 · Plugin Check 2.0.0 · Model 2026.06-mvp-static-v2

v3.25.0

32

Latest

Findings
1,859
Errors
413
Warnings
1,446
Plugin Check
2.0.0
Model
2026.06-mvp-static-v2

Related Plugins