YITH WooCommerce Badge Management allows you to create and manage custom badges for products.
32
Score
413
Errors
1,446
Warnings
+0
Change
Category Scores
Security14
Repo94
Performance97
Maintainability0
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Maintainability
1,500
16 issue groups
I18n
324
3 issue groups
Security
32
3 issue groups
Performance
2
1 issue group
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$_defaults".1,305
- Category
- Maintainability
- Occurrences
- 1,305
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$_defaults".
ERRORI18nText Domain MismatchMismatched text domain. Expected 'yith-woocommerce-badges-management' but got 'woocommerce'.317
- Category
- I18n
- Occurrences
- 317
- Severity
- error
Sample message
Mismatched text domain. Expected 'yith-woocommerce-badges-management' but got 'woocommerce'.
WARNINGMaintainabilityNon-prefixed hook nameHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "'woocommerce_settings_' . sanitize_title( $field['id'] )".72
- Category
- Maintainability
- Occurrences
- 72
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "'woocommerce_settings_' . sanitize_title( $field['id'] )".
ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;53
- Category
- Maintainability
- Occurrences
- 53
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
WARNINGMaintainabilityNon-prefixed functionFunctions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "YIT_Plugin_Licence".30
- Category
- Maintainability
- Occurrences
- 30
- Severity
- warning
Sample message
Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "YIT_Plugin_Licence".
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found 'yith_field_deps_data'.27
- Category
- Security
- Occurrences
- 27
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found 'yith_field_deps_data'.
WARNINGMaintainabilityNon-prefixed classClasses declared by a theme/plugin should start with the theme/plugin prefix. Found: "YIT_Ajax".16
- Category
- Maintainability
- Occurrences
- 16
- Severity
- warning
Sample message
Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "YIT_Ajax".
WARNINGMaintainabilityDynamic hook nameHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "$deprecated_filters[ $filter ]".6
- Category
- Maintainability
- Occurrences
- 6
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "$deprecated_filters[ $filter ]".
WARNINGMaintainabilityNon-prefixed constantGlobal constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "DOING_YITH_BH_ONBOARDING".6
- Category
- Maintainability
- Occurrences
- 6
- Severity
- warning
Sample message
Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "DOING_YITH_BH_ONBOARDING".
ERRORI18nMissing Arg DomainMissing $domain parameter in function call to __().6
- Category
- I18n
- Occurrences
- 6
- Severity
- error
Sample message
Missing $domain parameter in function call to __().
Show 14 moreShow less
ERRORSecurityException output is not escaped3
- Category
- Security
- Occurrences
- 3
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$response'.
WARNINGMaintainabilitytrademarked term3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
The plugin name includes a restricted term. Your chosen plugin name - "YITH WooCommerce Badge Management" - contains the restricted term "woocommerce" which cannot be used within in your plugin name, unless your plugin name contains one of the allowed patterns: "for woocommerce", "with woocommerce", "using woocommerce", or "and woocommerce". The term must still not appear anywhere else in your name.
WARNINGSecurityInput is not sanitized2
- Category
- Security
- Occurrences
- 2
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_GET['term']
WARNINGPerformancePost Not In exclude2
- Category
- Performance
- Occurrences
- 2
- Severity
- warning
Sample message
Using exclusionary parameters, like exclude, in calls to get_posts() should be done with caution, see https://wpvip.com/documentation/performance-improvements-by-removing-usage-of-post__not_in/ for more information.
WARNINGMaintainabilityupdate modification detected2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
Plugin Updater detected. Detected code which may be altering WordPress update routines. Detected: _site_transient_update_plugins
ERRORMaintainabilityForbidden PHP function found1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
The use of function get_post_type_labels() is forbidden
WARNINGMaintainabilityDirect Query1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGMaintainabilityNo Caching1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
ERRORMaintainabilityDeprecated parameter: get_terms parameter 21
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
The parameter "$args" at position #2 of get_terms() has been deprecated since WordPress version 4.5.0. Instead do not pass the parameter.
ERRORI18nNon Singular String Literal Text1
- Category
- I18n
- Occurrences
- 1
- Severity
- error
Sample message
The $text parameter must be a single text string literal. Found: 'Error: Unable to process the External Services API Request.' . $response['response']['message']
ERRORMaintainabilitybadly named files1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
File and folder names must not contain spaces or special characters.
ERRORMaintainabilitylibrary core files1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
Library files that are already in the WordPress core are not permitted.
ERRORRepo Complianceplugin header no license1
- Category
- Repo Compliance
- Occurrences
- 1
- Severity
- error
Sample message
Missing "License" in Plugin Header. Please update your Plugin Header with a valid GPLv2 (or later) compatible license.
ERRORMaintainabilityplugin updater detected1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
Plugin Updater detected. These are not permitted in WordPress.org hosted plugins. Detected: site_transient_update_plugins
External Connections
Potential connections found in static code analysis.
Outbound calls
111
External assets
2
Incoming endpoints
8
Notable Domains
yithemes.com16 · outbound
docs.yithemes.com5 · outbound
jacklmoore.com5 · outbound
codemirror.net2 · outbound
fontawesome.io2 · outbound
jqueryui.com2 · outbound
Platform / Reference Domains
w3.org38 · platform/reference
gnu.org6 · platform/reference
github.com5 · platform/reference
wordpress.org4 · platform/reference
codex.wordpress.org2 · platform/reference
profiles.wordpress.org2 · platform/reference
opensource.org1 · platform/reference
s.w.org1 · platform/reference
External Asset Domains
gmpg.org1 · asset
Incoming Endpoints
wp_ajax_nopriv_yith_plugin_fw_public
wp_ajax
Admin AJAX endpoints7
wp_ajax_yith_bh_onboardingauthenticated
wp_ajax
wp_ajax_yith_create_log_fileauthenticated
wp_ajax
wp_ajax_yith_plugin_fw_authenticated
wp_ajax
wp_ajax_yith_plugin_fw_gutenberg_do_shortcodeauthenticated
wp_ajax
wp_ajax_yith_plugin_fw_save_toggle_elementauthenticated
wp_ajax
wp_ajax_yith_plugin_fw_save_toggle_element_metaboxauthenticated
wp_ajax
wp_ajax_yith_wcbm_toggle_enable_badgeauthenticated
wp_ajax
Score History
3 score snapshots
v3.27.0
32
Latest
- Findings
- 1,859
- Errors
- 413
- Warnings
- 1,446
- Check
- 2.0.0
v3.26.0
32
Score
- Findings
- 1,859
- Errors
- 413
- Warnings
- 1,446
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 32 | 1,859 | 413 | 1,446 | v3.27.0 | 2.0.0 |
| 32 | 1,859 | 413 | 1,446 | v3.26.0 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Author
Issue
Domain
Related
Yoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreLiteSpeed Cache35 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder39 scoreWooCommerce21 scoreAkismet Anti-spam: Spam Protection35 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreJetpack – WP Security, Backup, Speed, & Growth22 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreGoogle for WooCommerce38 scoreWooCommerce PayPal Payments37 scoreWooCommerce Stripe Payment Gateway29 scoreWooCommerce Tax (formerly WooCommerce Shipping & Tax)30 score
Author
Issue
Domain
Related
Yoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreLiteSpeed Cache35 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder39 scoreWooCommerce21 scoreAkismet Anti-spam: Spam Protection35 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreJetpack – WP Security, Backup, Speed, & Growth22 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreGoogle for WooCommerce38 scoreWooCommerce PayPal Payments37 scoreWooCommerce Stripe Payment Gateway29 scoreWooCommerce Tax (formerly WooCommerce Shipping & Tax)30 score
Related Plugins
Kliken: Ads + Pixel for Meta
30k+ active installs
100
Paystack WooCommerce Payment Gateway
30k+ active installs
100
Store Vacation Lite for WooCommerce
20k+ active installs
100
EAN Barcode Generator for WooCommerce: UPC, ISBN & GTIN Inventory
10k+ active installs
100
Visa Acceptance Solutions
10k+ active installs
100
No Gutenberg? – Choose Where to Use the Block Editor or the Classic Editor
9k+ active installs
100