The most featured and powerful multi vendor plugin for WordPress, setup fantastic woocommerce marketplace store in minutes.
Category Scores
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Security
1,737
10 issue groups
Maintainability
1,340
11 issue groups
I18n
710
4 issue groups
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$_product".769
- Category
- Maintainability
- Occurrences
- 769
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$_product".
ERRORI18nText Domain MismatchMismatched text domain. Expected 'wc-multivendor-marketplace' but got "wc-frontend-manager".533
- Category
- I18n
- Occurrences
- 533
- Severity
- error
Sample message
Mismatched text domain. Expected 'wc-multivendor-marketplace' but got "wc-frontend-manager".
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$WCFM'.444
- Category
- Security
- Occurrences
- 444
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$WCFM'.
ERRORSecurityUnsafe printing functionAll output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.433
- Category
- Security
- Occurrences
- 433
- Severity
- error
Sample message
All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.
WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.203
- Category
- Maintainability
- Occurrences
- 203
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().202
- Category
- Maintainability
- Occurrences
- 202
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.202
- Category
- Security
- Occurrences
- 202
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGSecurityMissing nonce verificationProcessing form data without nonce verification.188
- Category
- Security
- Occurrences
- 188
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGSecurityRequest data is not unslashed$_COOKIE['shop_view'] not unslashed before sanitization. Use wp_unslash() or similar156
- Category
- Security
- Occurrences
- 156
- Severity
- warning
Sample message
$_COOKIE['shop_view'] not unslashed before sanitization. Use wp_unslash() or similar
ERRORI18nMissing Translators CommentA function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.87
- Category
- I18n
- Occurrences
- 87
- Severity
- error
Sample message
A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.
Show 15 moreShow less
ERRORSecuritySQL query is not prepared84
- Category
- Security
- Occurrences
- 84
- Severity
- error
Sample message
Use placeholders and $wpdb->prepare(); found $create_table_query
ERRORSecurityException output is not escaped80
- Category
- Security
- Occurrences
- 80
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"Cannot save property `{$key}` containing an API resource of type "'.
WARNINGSecurityInput is not sanitized55
- Category
- Security
- Occurrences
- 55
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_COOKIE['shop_view']
ERRORSecurityDatabase parameter is not escaped50
- Category
- Security
- Occurrences
- 50
- Severity
- error
Sample message
Unescaped parameter $create_table_query used in $wpdb->query()\n$create_table_query used without escaping.
WARNINGMaintainabilityNon-prefixed hook name45
- Category
- Maintainability
- Occurrences
- 45
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "add_to_cart_text".
WARNINGSecurityInput is not validated45
- Category
- Security
- Occurrences
- 45
- Severity
- warning
Sample message
Detected usage of a possibly undefined superglobal array index: $_GET['key']. Check that the array index exists before using it.
ERRORI18nNon Singular String Literal Text45
- Category
- I18n
- Occurrences
- 45
- Severity
- error
Sample message
The $text parameter must be a single text string literal. Found: $dashboard_page_title
ERRORI18nUnordered Placeholders Text45
- Category
- I18n
- Occurrences
- 45
- Severity
- error
Sample message
Multiple placeholders in translatable strings should be ordered. Expected "%1$s, %2$d", but got "%s, %d" in 'Available for shopping more than <b>%s%d</b>.'.
ERRORMaintainabilitydate date33
- Category
- Maintainability
- Occurrences
- 33
- Severity
- error
Sample message
date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.
ERRORMaintainabilityMissing direct file access protection26
- Category
- Maintainability
- Occurrences
- 26
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
ERRORMaintainabilitystrip tags strip tags17
- Category
- Maintainability
- Occurrences
- 17
- Severity
- error
Sample message
strip_tags() is discouraged. Use the more comprehensive wp_strip_all_tags() instead.
WARNINGMaintainabilityslow db query meta key15
- Category
- Maintainability
- Occurrences
- 15
- Severity
- warning
Sample message
Detected usage of meta_key, possible slow query.
ERRORMaintainabilityrand rand11
- Category
- Maintainability
- Occurrences
- 11
- Severity
- error
Sample message
rand() is discouraged. Use the far less predictable wp_rand() instead.
WARNINGMaintainabilityslow db query tax query10
- Category
- Maintainability
- Occurrences
- 10
- Severity
- warning
Sample message
Detected usage of tax_query, possible slow query.
WARNINGMaintainabilityslow db query meta query9
- Category
- Maintainability
- Occurrences
- 9
- Severity
- warning
Sample message
Detected usage of meta_query, possible slow query.
Score History
First score snapshot
v3.7.3
22
Latest
- Findings
- 3,906
- Errors
- 1,937
- Warnings
- 1,969
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 22 | 3,906 | 1,937 | 1,969 | v3.7.3 | 2.0.0 |