Thank You Page for WooCommerce – Custom Thank You Page & Redirect

Customize your WooCommerce thank you page or redirect customers after checkout to any page or URL—simple, flexible, and tracking-friendly.

v4.3.2Nitin PrakashUpdated 2026-06-09Added Feb 26, 201710k+ installs100% rating
68
Score
6
Errors
27
Warnings
+0
Change

Category Scores

Security49
Repo94
Performance100
Maintainability85

Top Issues by Category

Issues Details

33 issues found in latest scan

WARNING4
WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedVariableFound

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$prefix".

WARNING4
WordPress.PHP.DevelopmentFunctions.error_log_error_log

error_log() found. Debug code should not normally be used in production.

WARNING4
WordPress.Security.SafeRedirect.wp_redirect_wp_redirect

wp_redirect() found. Using wp_safe_redirect(), along with the "allowed_redirect_hosts" filter if needed, can help avoid any chances of malicious redirects within code. It is also important to remember to call exit() after a redirect so that no other unwanted code is executed.

WARNING3
WordPress.Security.ValidatedSanitizedInput.MissingUnslash

$_GET['key'] not unslashed before sanitization. Use wp_unslash() or similar

WARNING3
WordPress.WP.EnqueuedResourceParameters.MissingVersion

Resource version not set in call to wp_enqueue_script(). This means new versions of the script may not always be loaded due to browser caching.

WARNING2
WordPress.DB.DirectDatabaseQuery.DirectQuery

Use of a direct database call is discouraged.

WARNING2
WordPress.DB.DirectDatabaseQuery.NoCaching

Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().

ERROR2
WordPress.WP.I18n.MissingArgDomain

Missing $domain parameter in function call to __().

WARNING1
PluginCheck.CodeAnalysis.ShortURL.Found

Short URL detected (bit.ly). Use full URLs instead of URL shorteners.

ERROR1
PluginCheck.Security.DirectDB.UnescapedDBParameter

Unescaped parameter $sql used in $wpdb->query()\n$sql assigned unsafely at line 19.

WARNING1
WordPress.DB.PreparedSQL.InterpolatedNotPrepared

Use placeholders and $wpdb->prepare(); found interpolated variable {$table_name} at "DELETE FROM {$table_name} WHERE option_name LIKE %s"

ERROR1
WordPress.DB.PreparedSQL.NotPrepared

Use placeholders and $wpdb->prepare(); found $sql

ERROR1
WordPress.WP.I18n.MissingTranslatorsComment

A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.

WARNING1
mismatched_plugin_name

Plugin name "Thank You Page for WooCommerce – Custom Thank You Page & Redirect" is different from the name declared in plugin header "Thank You Page for WooCommerce".

WARNING1
missing_composer_json_file

The "/vendor" directory using composer exists, but "composer.json" file is missing.

ERROR1
readme_mismatched_header_requires

Mismatched Requires at least: 6.5 != 6.2. "Requires at least" needs to be exactly the same with that in your main plugin file's header.

WARNING1
trademarked_term

The plugin slug includes a restricted term. Your plugin slug - "wc-thanks-redirect" - contains the restricted term "wc" which cannot be used at all in your plugin slug.

Latest Snapshot

Findings

33

Errors

6

Warnings

27

Score History

First score snapshot

First scan completed Jun 20, 2026

v4.3.2 · Plugin Check 2.0.0 · Model 2026.06-mvp-static-v2

Jun 20, 2026

v4.3.2

68

Latest

Findings
33
Errors
6
Warnings
27
Plugin Check
2.0.0
Model
2026.06-mvp-static-v2

Related Plugins