Colissimo shipping methods for WooCommerce

This plugin allows you to use Colissimo shipping methods in WooCommerce

v2.10.0ColissimoUpdated Added 10k+ installs74% rating71% support resolved
25
Score
1,755
Errors
557
Warnings
+0
Change

Category Scores

Security0
Repo100
Performance100
Maintainability0

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

2,312 findings

I18n

1,005

4 issue groups

Security

646

6 issue groups

Maintainability

598

15 issue groups

ERRORI18nText Domain MismatchMismatched text domain. Expected 'colissimo-shipping-methods-for-woocommerce' but got 'lpc_wc_block'.774
Category
I18n
Occurrences
774
Severity
error

Sample message

Mismatched text domain. Expected 'colissimo-shipping-methods-for-woocommerce' but got 'lpc_wc_block'.

ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$aContent'.411
Category
Security
Occurrences
411
Severity
error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$aContent'.

WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$K_PATH_CACHE".246
Category
Maintainability
Occurrences
246
Severity
warning

Sample message

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$K_PATH_CACHE".

ERRORSecurityException output is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$box'.128
Category
Security
Occurrences
128
Severity
error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$box'.

WARNINGMaintainabilityNon-prefixed classClasses declared by a theme/plugin should start with the theme/plugin prefix. Found: "LPC_TCPDF".111
Category
Maintainability
Occurrences
111
Severity
warning

Sample message

Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "LPC_TCPDF".

ERRORI18nMissing Translators CommentA function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.97
Category
I18n
Occurrences
97
Severity
error

Sample message

A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.

ERRORI18nNon Singular String Literal TextThe $text parameter must be a single text string literal. Found: $args['desc']97
Category
I18n
Occurrences
97
Severity
error

Sample message

The $text parameter must be a single text string literal. Found: $args['desc']

WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.43
Category
Security
Occurrences
43
Severity
warning

Sample message

Processing form data without nonce verification.

WARNINGMaintainabilityNon-prefixed hook nameHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "active_plugins".41
Category
Maintainability
Occurrences
41
Severity
warning

Sample message

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "active_plugins".

ERRORI18nMissing Arg DomainMissing $domain parameter in function call to __().37
Category
I18n
Occurrences
37
Severity
error

Sample message

Missing $domain parameter in function call to __().

Show 15 more
WARNINGSecurityInput is not sanitized27
Category
Security
Occurrences
27
Severity
warning

Sample message

Detected usage of a non-sanitized input variable: $_REQUEST['bulk_action']

ERRORMaintainabilityfile system operations fclose27
Category
Maintainability
Occurrences
27
Severity
error

Sample message

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fclose().

ERRORMaintainabilitycurl curl setopt25
Category
Maintainability
Occurrences
25
Severity
error

Sample message

Using cURL functions is highly discouraged. Use wp_remote_get() instead.

WARNINGSecurityRequest data is not unslashed23
Category
Security
Occurrences
23
Severity
warning

Sample message

$_SERVER['DOCUMENT_ROOT'] not unslashed before sanitization. Use wp_unslash() or similar

WARNINGMaintainabilityNon-prefixed constant20
Category
Maintainability
Occurrences
20
Severity
warning

Sample message

Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "DS".

ERRORMaintainabilityfile system operations fread20
Category
Maintainability
Occurrences
20
Severity
error

Sample message

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fread().

ERRORMaintainabilityfile system operations fwrite20
Category
Maintainability
Occurrences
20
Severity
error

Sample message

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fwrite().

ERRORMaintainabilitydate date19
Category
Maintainability
Occurrences
19
Severity
error

Sample message

date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.

ERRORMaintainabilityunlink unlink17
Category
Maintainability
Occurrences
17
Severity
error

Sample message

unlink() is discouraged. Use wp_delete_file() to delete a file.

ERRORMaintainabilityfile system operations fopen15
Category
Maintainability
Occurrences
15
Severity
error

Sample message

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fopen().

WARNINGSecuritywp redirect wp redirect14
Category
Security
Occurrences
14
Severity
warning

Sample message

wp_redirect() found. Using wp_safe_redirect(), along with the "allowed_redirect_hosts" filter if needed, can help avoid any chances of malicious redirects within code. It is also important to remember to call exit() after a redirect so that no other unwanted code is executed.

ERRORMaintainabilityMissing direct file access protection13
Category
Maintainability
Occurrences
13
Severity
error

Sample message

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

ERRORMaintainabilityNot Allowed9
Category
Maintainability
Occurrences
9
Severity
error

Sample message

Use of heredoc syntax (<<<) is not allowed; use standard strings or inline HTML instead

WARNINGMaintainabilityDirect Query8
Category
Maintainability
Occurrences
8
Severity
warning

Sample message

Use of a direct database call is discouraged.

WARNINGMaintainabilityNo Caching7
Category
Maintainability
Occurrences
7
Severity
warning

Sample message

Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().

Score History

First score snapshot

v2.10.0

25

Latest

Findings
2,312
Errors
1,755
Warnings
557
Check
2.0.0

Related Plugins