B2BKing — Ultimate WooCommerce B2B and Wholesale Plugin — Wholesale Prices, Bulk Order Form & More

B2BKing is the complete solution for running a Wholesale, B2B or B2B + B2C hybrid store with WooCommerce.

v5.2.30WebWizardsUpdated 2026-06-14Added Sep 12, 202010k+ installs98% rating100% support resolved
23
Score
1,347
Errors
409
Warnings
+0
Change

Category Scores

Security0
Repo89
Performance98
Maintainability0

Top Issues by Category

i18n1,167
security369
maintainability202

Issues Details

1,756 issues found in latest scan

ERROR1,119
WordPress.WP.I18n.TextDomainMismatch

Mismatched text domain. Expected 'b2bking-wholesale-for-woocommerce' but got "b2bking".

ERROR117
WordPress.Security.EscapeOutput.OutputNotEscaped

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$active_tab'.

WARNING69
WordPress.Security.NonceVerification.Recommended

Processing form data without nonce verification.

WARNING69
WordPress.Security.ValidatedSanitizedInput.MissingUnslash

$_COOKIE['b2bking_userid'] not unslashed before sanitization. Use wp_unslash() or similar

WARNING45
WordPress.Security.ValidatedSanitizedInput.InputNotValidated

Detected usage of a possibly undefined superglobal array index: $_GET['action']. Check that the array index exists before using it.

WARNING41
WordPress.Security.NonceVerification.Missing

Processing form data without nonce verification.

ERROR33
WordPress.DateTime.RestrictedFunctions.date_date

date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.

WARNING31
WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedVariableFound

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$allposts".

WARNING29
WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedHooknameFound

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "admin_notices".

WARNING27
WordPress.DB.SlowDBQuery.slow_db_query_meta_query

Detected usage of meta_query, possible slow query.

ERROR24
WordPress.WP.I18n.MissingArgDomain

Missing $domain parameter in function call to __().

WARNING21
WordPress.Security.ValidatedSanitizedInput.InputNotSanitized

Detected usage of a non-sanitized input variable: $_GET['page']

ERROR21
WordPress.WP.I18n.MissingTranslatorsComment

A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.

WARNING16
WordPress.DB.DirectDatabaseQuery.DirectQuery

Use of a direct database call is discouraged.

WARNING15
WordPress.DB.DirectDatabaseQuery.NoCaching

Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().

WARNING12
WordPress.DB.SlowDBQuery.slow_db_query_meta_key

Detected usage of meta_key, possible slow query.

WARNING10
WordPress.DB.SlowDBQuery.slow_db_query_meta_value

Detected usage of meta_value, possible slow query.

WARNING10
WordPress.WP.EnqueuedResourceParameters.MissingVersion

Resource version not set in call to wp_enqueue_script(). This means new versions of the script may not always be loaded due to browser caching.

ERROR7
WordPress.WP.AlternativeFunctions.curl_curl_setopt

Using cURL functions is highly discouraged. Use wp_remote_get() instead.

ERROR5
PluginCheck.CodeAnalysis.SettingSanitization.register_settingMissing

Sanitization missing for register_setting().

ERROR4
PluginCheck.CodeAnalysis.Offloading.OffloadedContent

Offloading images, js, css, and other scripts to your servers or any remote service is disallowed.

WARNING4
WordPress.WP.EnqueuedResourceParameters.NotInFooter

In footer ($in_footer) is not set explicitly wp_enqueue_script; It is recommended to load scripts in the footer. Please set this value to `true` to load it in the footer, or explicitly `false` if it should be loaded in the header.

ERROR4
wp_function_not_compatible_with_requires_wp

Function "wp_timezone()" requires WordPress 5.3.0, but your plugin minimum supported version is WordPress 4.8.0.

WARNING3
PluginCheck.CodeAnalysis.DiscouragedFunctions.load_plugin_textdomainFound

load_plugin_textdomain() has been discouraged since WordPress version 4.6. When your plugin is hosted on WordPress.org, you no longer need to manually include this function call for translations under your plugin slug. WordPress will automatically load the translations for you as needed.

ERROR2
WordPress.DB.PreparedSQL.NotPrepared

Use placeholders and $wpdb->prepare(); found $mysql_query

Latest Snapshot

Findings

1,756

Errors

1,347

Warnings

409

Score History

First score snapshot

First scan completed Jun 20, 2026

v5.2.30 · Plugin Check 2.0.0 · Model 2026.06-mvp-static-v2

Jun 20, 2026

v5.2.30

23

Latest

Findings
1,756
Errors
1,347
Warnings
409
Plugin Check
2.0.0
Model
2026.06-mvp-static-v2

Related Plugins