FOX – Currency Switcher Professional for WooCommerce

FOX - Currency Switcher Professional for WooCommerce (former name is WOOCS) is currency plugin for woocommerce and multi currency shop, switch & pay

v1.4.9RealMag777Updated Added 50k+ installs88% rating83% support resolved
30
Score
211
Errors
1,022
Warnings
+0
Change

Category Scores

Security0
Repo94
Performance96
Maintainability32

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

1,233 findings

Security

775

9 issue groups

Maintainability

439

13 issue groups

I18n

11

2 issue groups

Performance

4

1 issue group

WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$add_text".345
Category
Maintainability
Occurrences
345
Severity
warning

Sample message

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$add_text".

WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.180
Category
Security
Occurrences
180
Severity
warning

Sample message

Processing form data without nonce verification.

ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"<a href='{$support_link}' target='_blank'>"'.177
Category
Security
Occurrences
177
Severity
error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"<a href='{$support_link}' target='_blank'>"'.

WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_COOKIE[$key]126
Category
Security
Occurrences
126
Severity
warning

Sample message

Detected usage of a non-sanitized input variable: $_COOKIE[$key]

WARNINGSecurityRequest data is not unslashed$_COOKIE[$key] not unslashed before sanitization. Use wp_unslash() or similar126
Category
Security
Occurrences
126
Severity
warning

Sample message

$_COOKIE[$key] not unslashed before sanitization. Use wp_unslash() or similar

WARNINGSecurityInput is not validatedDetected usage of a possibly undefined superglobal array index: $_COOKIE[$key]. Check that the array index exists before using it.100
Category
Security
Occurrences
100
Severity
warning

Sample message

Detected usage of a possibly undefined superglobal array index: $_COOKIE[$key]. Check that the array index exists before using it.

WARNINGSecurityMissing nonce verificationProcessing form data without nonce verification.55
Category
Security
Occurrences
55
Severity
warning

Sample message

Processing form data without nonce verification.

WARNINGMaintainabilityMixed line endingsFile has mixed line endings; this may cause incorrect results20
Category
Maintainability
Occurrences
20
Severity
warning

Sample message

File has mixed line endings; this may cause incorrect results

WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().16
Category
Maintainability
Occurrences
16
Severity
warning

Sample message

Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().

WARNINGMaintainabilityNon-prefixed hook nameHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: &quot;formatted_woocommerce_price&quot;.15
Category
Maintainability
Occurrences
15
Severity
warning

Sample message

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: &quot;formatted_woocommerce_price&quot;.

Show 15 more
ERRORMaintainabilityMissing direct file access protection15
Category
Maintainability
Occurrences
15
Severity
error

Sample message

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

WARNINGMaintainabilityDirect Query13
Category
Maintainability
Occurrences
13
Severity
warning

Sample message

Use of a direct database call is discouraged.

ERRORI18nMissing Translators Comment9
Category
I18n
Occurrences
9
Severity
error

Sample message

A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.

WARNINGSecurityDatabase parameter is not escaped6
Category
Security
Occurrences
6
Severity
warning

Sample message

Unescaped parameter $order_status used in $wpdb-&gt;get_results()\n$order_status assigned unsafely at line 60.

WARNINGPerformancePost Not In exclude4
Category
Performance
Occurrences
4
Severity
warning

Sample message

Using exclusionary parameters, like exclude, in calls to get_posts() should be done with caution, see https://wpvip.com/documentation/performance-improvements-by-removing-usage-of-post__not_in/ for more information.

ERRORMaintainabilityShort PHP open tag found3
Category
Maintainability
Occurrences
3
Severity
error

Sample message

Short PHP opening tag used with echo; expected "<?php echo $key ..." but found "<?= $key ..."

WARNINGSecurityInterpolated SQL is not prepared3
Category
Security
Occurrences
3
Severity
warning

Sample message

Use placeholders and $wpdb-&gt;prepare(); found interpolated variable {$placeholders} at &quot;SELECT meta_value FROM {$wpdb-&gt;prefix}postmeta WHERE meta_key = %s AND post_id IN({$placeholders})&quot;

ERRORMaintainabilitydate date3
Category
Maintainability
Occurrences
3
Severity
error

Sample message

date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.

WARNINGMaintainabilityNot In Footer3
Category
Maintainability
Occurrences
3
Severity
warning

Sample message

In footer ($in_footer) is not set explicitly wp_enqueue_script; It is recommended to load scripts in the footer. Please set this value to `true` to load it in the footer, or explicitly `false` if it should be loaded in the header.

WARNINGMaintainabilityNon-prefixed function2
Category
Maintainability
Occurrences
2
Severity
warning

Sample message

Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: &quot;draw_html_item&quot;.

WARNINGMaintainabilityerror log error log2
Category
Maintainability
Occurrences
2
Severity
warning

Sample message

error_log() found. Debug code should not normally be used in production.

WARNINGSecurityInput is not validated or sanitized2
Category
Security
Occurrences
2
Severity
warning

Sample message

Detected usage of a non-sanitized, non-validated input variable _SERVER: &quot;://$_SERVER[HTTP_HOST]$_SERVER[REQUEST_URI]&quot;

ERRORI18nUnordered Placeholders Text2
Category
I18n
Occurrences
2
Severity
error

Sample message

Multiple placeholders in translatable strings should be ordered. Expected "%1$s, %2$s, %3$s, %4$s", but got "%s, %s, %s, %s" in 'In the free version of the plugin %s you can operate with 2 ANY currencies only%s! If you want to use more currencies %s you can make upgrade to the premium version%s of the plugin'.

WARNINGMaintainabilitySchema Change1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

Attempting a database schema change is discouraged.

WARNINGMaintainabilityDynamic hook name1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: &quot;$action_hook&quot;.

Score History

First score snapshot

v1.4.9

30

Latest

Findings
1,233
Errors
211
Warnings
1,022
Check
2.0.0

Related Plugins

Multi Device Switcher

20k+ active installs

98
Multisite Language Switcher

4k+ active installs

98
AboveWP Bulgarian Eurozone

3k+ active installs

81
RealHomes Currency Switcher

1k+ active installs

79
70