AI-powered ecommerce search for better discovery. Advanced filters, live search suggestions and more for the best WooCommerce product search.
| Code | Message | Location | Category | |
|---|---|---|---|---|
| ERROR | hidden_files | Hidden files are not permitted. | — | Plugin Repo |
| ERROR | hidden_files | Hidden files are not permitted. | — | Plugin Repo |
| ERROR | PluginCheck.Security.DirectDB.UnescapedDBParameter | Unescaped parameter $label used in $wpdb->get_var("\n SELECT st.value AS translated\n FROM {$prefix}icl_strings s\n LEFT JOIN {$prefix}icl_string_translations st ON s.ID = st.string_id\n WHERE s.value = '$label' AND st.language='$lang'\n ")\n$label used without escaping.\n$lang used without escaping. | 120:30 | Security |
| ERROR | PluginCheck.Security.DirectDB.UnescapedDBParameter | Unescaped parameter $name used in $wpdb->get_results("\n SELECT t.name\n FROM {$wpdb->get_blog_prefix()}terms t\n INNER JOIN {$wpdb->get_blog_prefix()}term_taxonomy tt ON tt.term_id = t.term_id\n INNER JOIN {$wpdb->get_blog_prefix()}term_relationships tr ON tr.term_taxonomy_id = tt.term_taxonomy_id\n WHERE tt.taxonomy='$name' AND tr.object_id=$product_id")\n$name used without escaping.\n$product_id used without escaping. | 100:32 | Security |
| ERROR | WordPress.WP.I18n.TextDomainMismatch | Mismatched text domain. Expected 'motive-commerce-search' but got 'schemabuilder'. | 83:37 | General |
| ERROR | WordPress.WP.I18n.TextDomainMismatch | Mismatched text domain. Expected 'motive-commerce-search' but got 'schemabuilder'. | 86:50 | General |
| ERROR | PluginCheck.Security.DirectDB.UnescapedDBParameter | Unescaped parameter $attachment_ids_imploded used in $wpdb->get_results("\n SELECT p.post_name as legend, p.id as attachment_id\n FROM {$wpdb->get_blog_prefix()}posts p\n WHERE (p.ID IN ($attachment_ids_imploded) AND p.post_type='attachment')\n ORDER BY FIELD(p.id, $attachment_ids_imploded)\n LIMIT $this->image_limit\n ")\n$attachment_ids_imploded assigned unsafely at line 57:\n $attachment_ids_imploded = implode( ',', $attachment_ids )\n$attachment_ids used without escaping. | 59:22 | Security |
| ERROR | WordPress.DB.PreparedSQL.NotPrepared | Use placeholders and $wpdb->prepare(); found $sql | 60:23 | Security |
| ERROR | PluginCheck.Security.DirectDB.UnescapedDBParameter | Unescaped parameter $sql used in $wpdb->get_results($sql)\n$sql assigned unsafely at line 49:\n $sql = $this->build_query( $from_id_product, static::POSTMETA_KEYS )\n$from_id_product used without escaping. | 50:21 | Security |
| ERROR | WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedHooknameFound | Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "wpml_active_languages". | 135:44 | Plugin Repo |
| 16.11.2025, 07:47:49 | 14s | 70 | 45 | 84 |