Advanced Shipment Tracking for WooCommerce

The #1 WooCommerce shipment tracking plugin. Add tracking, auto-update order status, send branded emails. 950+ carriers. Trusted by 60,000+ stores.

v3.9.2ZoremUpdated Added 60k+ installs90% rating56% support resolved
24
Score
654
Errors
651
Warnings
+0
Change

Category Scores

Security0
Repo94
Performance100
Maintainability0

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

1,305 findings

I18n

604

5 issue groups

Maintainability

415

15 issue groups

Security

273

5 issue groups

ERRORI18nMissing Arg DomainMissing $domain parameter in function call to __().230
Category
I18n
Occurrences
230
Severity
error

Sample message

Missing $domain parameter in function call to __().

ERRORI18nNon Singular String Literal TextThe $text parameter must be a single text string literal. Found: $added['provider_name']225
Category
I18n
Occurrences
225
Severity
error

Sample message

The $text parameter must be a single text string literal. Found: $added['provider_name']

WARNINGMaintainabilityNon Prefixed Variable FoundGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$addon".119
Category
Maintainability
Occurrences
119
Severity
warning

Sample message

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$addon".

WARNINGSecurityMissing Unslash$_GET['_shop_order_shipping_provider'] not unslashed before sanitization. Use wp_unslash() or similar87
Category
Security
Occurrences
87
Severity
warning

Sample message

$_GET['_shop_order_shipping_provider'] not unslashed before sanitization. Use wp_unslash() or similar

ERRORI18nText Domain MismatchMismatched text domain. Expected 'woo-advanced-shipment-tracking' but got ''.82
Category
I18n
Occurrences
82
Severity
error

Sample message

Mismatched text domain. Expected 'woo-advanced-shipment-tracking' but got ''.

WARNINGSecurityInput Not SanitizedDetected usage of a non-sanitized input variable: $_GET['_shop_order_shipping_provider']80
Category
Security
Occurrences
80
Severity
warning

Sample message

Detected usage of a non-sanitized input variable: $_GET['_shop_order_shipping_provider']

WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.75
Category
Maintainability
Occurrences
75
Severity
warning

Sample message

Use of a direct database call is discouraged.

WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().72
Category
Maintainability
Occurrences
72
Severity
warning

Sample message

Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().

ERRORI18nNon Singular String Literal DomainThe $domain parameter must be a single text string literal. Found: $text_domin63
Category
I18n
Occurrences
63
Severity
error

Sample message

The $domain parameter must be a single text string literal. Found: $text_domin

WARNINGSecurityRecommendedProcessing form data without nonce verification.53
Category
Security
Occurrences
53
Severity
warning

Sample message

Processing form data without nonce verification.

Show 15 more
WARNINGMaintainabilityNon Prefixed Hookname Found52
Category
Maintainability
Occurrences
52
Severity
warning

Sample message

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "ast_addon_license_form".

WARNINGSecurityUnquoted Complex Placeholder45
Category
Security
Occurrences
45
Severity
warning

Sample message

Complex placeholders used for values in the query string in $wpdb->prepare() will NOT be quoted automagically. Found: %1s.

ERRORMaintainabilitymissing direct file access protection20
Category
Maintainability
Occurrences
20
Severity
error

Sample message

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

WARNINGMaintainabilityNon Prefixed Class Found15
Category
Maintainability
Occurrences
15
Severity
warning

Sample message

Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "AST_Integration".

WARNINGMaintainabilitySchema Change14
Category
Maintainability
Occurrences
14
Severity
warning

Sample message

Attempting a database schema change is discouraged.

WARNINGMaintainabilityNon Prefixed Function Found10
Category
Maintainability
Occurrences
10
Severity
warning

Sample message

Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "ast_add_tracking_number".

WARNINGMaintainabilityNot In Footer9
Category
Maintainability
Occurrences
9
Severity
warning

Sample message

In footer ($in_footer) is not set explicitly wp_enqueue_script; It is recommended to load scripts in the footer. Please set this value to `true` to load it in the footer, or explicitly `false` if it should be loaded in the header.

ERRORSecurityOutput Not Escaped8
Category
Security
Occurrences
8
Severity
error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '__'.

ERRORMaintainabilityfile system operations is writable8
Category
Maintainability
Occurrences
8
Severity
error

Sample message

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: is_writable().

WARNINGMaintainabilityslow db query meta key6
Category
Maintainability
Occurrences
6
Severity
warning

Sample message

Detected usage of meta_key, possible slow query.

WARNINGMaintainabilityslow db query meta value5
Category
Maintainability
Occurrences
5
Severity
warning

Sample message

Detected usage of meta_value, possible slow query.

ERRORMaintainabilitystrip tags strip tags5
Category
Maintainability
Occurrences
5
Severity
error

Sample message

strip_tags() is discouraged. Use the more comprehensive wp_strip_all_tags() instead.

ERRORI18nMissing Translators Comment4
Category
I18n
Occurrences
4
Severity
error

Sample message

A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.

WARNINGMaintainabilityNon Prefixed Constant Found3
Category
Maintainability
Occurrences
3
Severity
warning

Sample message

Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "AST_FREE_PLUGIN_ACCESS".

WARNINGMaintainabilityslow db query meta query2
Category
Maintainability
Occurrences
2
Severity
warning

Sample message

Detected usage of meta_query, possible slow query.

Score History

First score snapshot

v3.9.2

24

Latest

Findings
1,305
Errors
654
Warnings
651
Check
2.0.0

Related Plugins