The YITH WooCommerce Frequently Bought Together plugin lets you add product suggestions with a simple summary in each product page.
31
Score
389
Errors
1,452
Warnings
+0
Change
Category Scores
Security13
Repo94
Performance95
Maintainability0
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Maintainability
1,478
16 issue groups
I18n
325
3 issue groups
Security
33
3 issue groups
Performance
3
2 issue groups
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$_defaults".1,310
- Category
- Maintainability
- Occurrences
- 1,310
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$_defaults".
ERRORI18nText Domain MismatchMismatched text domain. Expected 'yith-woocommerce-frequently-bought-together' but got 'woocommerce'.317
- Category
- I18n
- Occurrences
- 317
- Severity
- error
Sample message
Mismatched text domain. Expected 'yith-woocommerce-frequently-bought-together' but got 'woocommerce'.
WARNINGMaintainabilityNon-prefixed hook nameHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "'woocommerce_settings_' . sanitize_title( $field['id'] )".70
- Category
- Maintainability
- Occurrences
- 70
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "'woocommerce_settings_' . sanitize_title( $field['id'] )".
WARNINGMaintainabilityNon-prefixed functionFunctions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "YIT_Plugin_Licence".30
- Category
- Maintainability
- Occurrences
- 30
- Severity
- warning
Sample message
Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "YIT_Plugin_Licence".
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$content'.28
- Category
- Security
- Occurrences
- 28
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$content'.
ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;28
- Category
- Maintainability
- Occurrences
- 28
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
WARNINGMaintainabilityNon-prefixed classClasses declared by a theme/plugin should start with the theme/plugin prefix. Found: "YIT_Ajax".16
- Category
- Maintainability
- Occurrences
- 16
- Severity
- warning
Sample message
Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "YIT_Ajax".
ERRORI18nMissing Arg DomainMissing $domain parameter in function call to __().7
- Category
- I18n
- Occurrences
- 7
- Severity
- error
Sample message
Missing $domain parameter in function call to __().
WARNINGMaintainabilityDynamic hook nameHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "$deprecated_filters[ $filter ]".6
- Category
- Maintainability
- Occurrences
- 6
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "$deprecated_filters[ $filter ]".
WARNINGMaintainabilityNon-prefixed constantGlobal constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "DOING_YITH_BH_ONBOARDING".6
- Category
- Maintainability
- Occurrences
- 6
- Severity
- warning
Sample message
Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "DOING_YITH_BH_ONBOARDING".
Show 15 moreShow less
ERRORSecurityException output is not escaped3
- Category
- Security
- Occurrences
- 3
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$response'.
WARNINGMaintainabilityslow db query meta query2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
Detected usage of meta_query, possible slow query.
WARNINGSecurityInput is not sanitized2
- Category
- Security
- Occurrences
- 2
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_GET['term']
WARNINGPerformancePost Not In exclude2
- Category
- Performance
- Occurrences
- 2
- Severity
- warning
Sample message
Using exclusionary parameters, like exclude, in calls to get_posts() should be done with caution, see https://wpvip.com/documentation/performance-improvements-by-removing-usage-of-post__not_in/ for more information.
WARNINGMaintainabilitytrademarked term2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
The plugin name includes a restricted term. Your chosen plugin name - "YITH WooCommerce Frequently Bought Together" - contains the restricted term "woocommerce" which cannot be used within in your plugin name, unless your plugin name contains one of the allowed patterns: "for woocommerce", "with woocommerce", "using woocommerce", or "and woocommerce". The term must still not appear anywhere else in your name.
WARNINGMaintainabilityupdate modification detected2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
Plugin Updater detected. Detected code which may be altering WordPress update routines. Detected: _site_transient_update_plugins
ERRORMaintainabilityForbidden PHP function found1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
The use of function get_post_type_labels() is forbidden
WARNINGMaintainabilityDirect Query1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGMaintainabilityNo Caching1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
ERRORMaintainabilityDeprecated parameter: get_terms parameter 21
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
The parameter "$args" at position #2 of get_terms() has been deprecated since WordPress version 4.5.0. Instead do not pass the parameter.
ERRORI18nNon Singular String Literal Text1
- Category
- I18n
- Occurrences
- 1
- Severity
- error
Sample message
The $text parameter must be a single text string literal. Found: 'Error: Unable to process the External Services API Request.' . $response['response']['message']
WARNINGPerformancePost Not In post not in1
- Category
- Performance
- Occurrences
- 1
- Severity
- warning
Sample message
Using exclusionary parameters, like post__not_in, in calls to get_posts() should be done with caution, see https://wpvip.com/documentation/performance-improvements-by-removing-usage-of-post__not_in/ for more information.
ERRORMaintainabilitylibrary core files1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
Library files that are already in the WordPress core are not permitted.
WARNINGMaintainabilitymismatched plugin name1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Plugin name "YITH Frequently Bought Together for WooCommerce" is different from the name declared in plugin header "YITH WooCommerce Frequently Bought Together".
ERRORRepo Complianceplugin header no license1
- Category
- Repo Compliance
- Occurrences
- 1
- Severity
- error
Sample message
Missing "License" in Plugin Header. Please update your Plugin Header with a valid GPLv2 (or later) compatible license.
External Connections
Potential connections found in static code analysis.
Outbound calls
106
External assets
2
Incoming endpoints
9
Notable Domains
yithemes.com14 · outbound
docs.yithemes.com5 · outbound
jacklmoore.com5 · outbound
codemirror.net2 · outbound
fontawesome.io2 · outbound
jqueryui.com2 · outbound
Platform / Reference Domains
w3.org37 · platform/reference
gnu.org6 · platform/reference
github.com5 · platform/reference
wordpress.org3 · platform/reference
codex.wordpress.org2 · platform/reference
profiles.wordpress.org2 · platform/reference
opensource.org1 · platform/reference
s.w.org1 · platform/reference
External Asset Domains
gmpg.org1 · asset
Incoming Endpoints
wp_ajax_nopriv_yith_ajax_search_productpublic
wp_ajax
wp_ajax_nopriv_yith_plugin_fw_public
wp_ajax
Admin AJAX endpoints7
wp_ajax_yith_ajax_search_productauthenticated
wp_ajax
wp_ajax_yith_bh_onboardingauthenticated
wp_ajax
wp_ajax_yith_create_log_fileauthenticated
wp_ajax
wp_ajax_yith_plugin_fw_authenticated
wp_ajax
wp_ajax_yith_plugin_fw_gutenberg_do_shortcodeauthenticated
wp_ajax
wp_ajax_yith_plugin_fw_save_toggle_elementauthenticated
wp_ajax
wp_ajax_yith_plugin_fw_save_toggle_element_metaboxauthenticated
wp_ajax
Score History
2 score snapshots
v1.59.0
31
Latest
- Findings
- 1,841
- Errors
- 389
- Warnings
- 1,452
- Check
- 2.0.0
v1.58.0
31
Score
- Findings
- 1,841
- Errors
- 389
- Warnings
- 1,452
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 31 | 1,841 | 389 | 1,452 | v1.59.0 | 2.0.0 |
| 31 | 1,841 | 389 | 1,452 | v1.58.0 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Author
Category
Issue
Domain
Related
WPC Product Bundles for WooCommerce41 scoreProduct Labels, Quick View, Buy Now, Pre-Orders, Frequently Bought Together & More for WooCommerce – Merchant60 scoreUpsell Funnel Builder for WooCommerce – Create Upsells, Cross-Sells, Order Bumps, Frequently Bought, and Popups.70 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder39 scoreLiteSpeed Cache35 scoreWooCommerce21 scoreAkismet Anti-spam: Spam Protection35 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreJetpack – WP Security, Backup, Speed, & Growth22 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreAdvanced Custom Fields (ACF®)23 score
Author
Category
Issue
Domain
Related
WPC Product Bundles for WooCommerce41 scoreProduct Labels, Quick View, Buy Now, Pre-Orders, Frequently Bought Together & More for WooCommerce – Merchant60 scoreUpsell Funnel Builder for WooCommerce – Create Upsells, Cross-Sells, Order Bumps, Frequently Bought, and Popups.70 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder39 scoreLiteSpeed Cache35 scoreWooCommerce21 scoreAkismet Anti-spam: Spam Protection35 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreJetpack – WP Security, Backup, Speed, & Growth22 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreAdvanced Custom Fields (ACF®)23 score
Related Plugins
Teachable
500 active installs
93
Product Bundles – Bulk Discounts
600 active installs
73
70
60
Product Bundles – Variation Bundles
600 active installs
52
WPC Product Bundles for WooCommerce
30k+ active installs
41