Mercado Pago payments for WooCommerce

Offer to your clients the best experience in e-Commerce by using Mercado Pago as your payment method.

v8.8.0Mercado PagoUpdated Added 100k+ installs78% rating100% support resolved
33
Score
618
Errors
63
Warnings
-1
Change

Category Scores

Security17
Repo89
Performance100
Maintainability2

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

681 findings

Maintainability

626

15 issue groups

Security

36

3 issue groups

I18n

16

5 issue groups

Repo Compliance

2

2 issue groups

ERRORMaintainabilityShort PHP open tag foundShort PHP opening tag used with echo; expected "<?php echo $credentialsState ..." but found "<?= $credentialsState ..."472
Category
Maintainability
Occurrences
472
Severity
error

Sample message

Short PHP opening tag used with echo; expected "<?php echo $credentialsState ..." but found "<?= $credentialsState ..."

ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;107
Category
Maintainability
Occurrences
107
Severity
error

Sample message

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: &quot;$benefit&quot;.27
Category
Maintainability
Occurrences
27
Severity
warning

Sample message

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: &quot;$benefit&quot;.

ERRORSecurityException output is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"Notification URL not found for payment ID: $paymentId"'.18
Category
Security
Occurrences
18
Severity
error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"Notification URL not found for payment ID: $paymentId"'.

WARNINGSecurityMissing nonce verificationProcessing form data without nonce verification.10
Category
Security
Occurrences
10
Severity
warning

Sample message

Processing form data without nonce verification.

WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.8
Category
Security
Occurrences
8
Severity
warning

Sample message

Processing form data without nonce verification.

WARNINGMaintainabilityDynamic hook nameHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: &quot;self::ENABLE_CREDITS_ACTION&quot;.7
Category
Maintainability
Occurrences
7
Severity
warning

Sample message

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: &quot;self::ENABLE_CREDITS_ACTION&quot;.

ERRORI18nNon Singular String Literal TextThe $text parameter must be a single text string literal. Found: $checkoutStepOne6
Category
I18n
Occurrences
6
Severity
error

Sample message

The $text parameter must be a single text string literal. Found: $checkoutStepOne

ERRORI18nMissing Arg DomainMissing $domain parameter in function call to __().5
Category
I18n
Occurrences
5
Severity
error

Sample message

Missing $domain parameter in function call to __().

ERRORI18nMissing Translators CommentA function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.3
Category
I18n
Occurrences
3
Severity
error

Sample message

A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.

Show 15 more
WARNINGMaintainabilityNon-prefixed function2
Category
Maintainability
Occurrences
2
Severity
warning

Sample message

Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: &quot;mp_disable_plugin&quot;.

ERRORMaintainabilityfile system operations readfile2
Category
Maintainability
Occurrences
2
Severity
error

Sample message

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: readfile().

WARNINGMaintainabilityslow db query meta query1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

Detected usage of meta_query, possible slow query.

WARNINGMaintainabilityNon-prefixed constant1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: &quot;MP_PLUGIN_FILE&quot;.

WARNINGMaintainabilityNon-prefixed hook name1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: &quot;plugin_locale&quot;.

WARNINGMaintainabilityNon-prefixed global variable1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: &quot;$name&quot;.

ERRORMaintainabilityunlink unlink1
Category
Maintainability
Occurrences
1
Severity
error

Sample message

unlink() is discouraged. Use wp_delete_file() to delete a file.

WARNINGI18nNo Html Wrapped Strings1
Category
I18n
Occurrences
1
Severity
warning

Sample message

Translatable string should not be wrapped in HTML. Found: &#039;&lt;strong&gt;Choose the number of installments to complete the payment&lt;/strong&gt;&#039;

ERRORI18nText Domain Mismatch1
Category
I18n
Occurrences
1
Severity
error

Sample message

Mismatched text domain. Expected 'woocommerce-mercadopago' but got 'woocommerce'.

ERRORMaintainabilityfive star reviews detected1
Category
Maintainability
Occurrences
1
Severity
error

Sample message

Linking directly to 5 stars reviews is not allowed.

WARNINGMaintainabilitymismatched plugin name1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

Plugin name "Mercado Pago payments for WooCommerce" is different from the name declared in plugin header "Mercado Pago".

WARNINGMaintainabilitymissing composer json file1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

The &quot;/vendor&quot; directory using composer exists, but &quot;composer.json&quot; file is missing.

ERRORRepo Complianceoutdated tested upto header1
Category
Repo Compliance
Occurrences
1
Severity
error

Sample message

Tested up to: 6.9 < 7.0. The "Tested up to" value in your plugin is not set to the current version of WordPress. This means your plugin will not show up in searches, as we require plugins to be compatible and documented as tested up to the most recent version of WordPress.

ERRORRepo Complianceplugin header no license1
Category
Repo Compliance
Occurrences
1
Severity
error

Sample message

Missing "License" in Plugin Header. Please update your Plugin Header with a valid GPLv2 (or later) compatible license.

WARNINGMaintainabilitytrademarked term1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

The plugin slug includes a restricted term. Your plugin slug - "woocommerce-mercadopago" - contains the restricted term "woocommerce" which cannot be used within in your plugin slug, unless your plugin slug contains one of the allowed patterns: "for woocommerce", "with woocommerce", "using woocommerce", or "and woocommerce". The term must still not appear anywhere else in your plugin slug.

Score History

2 score snapshots

-1
1007550250Jun 19, 2026, 11:52 PM UTC Score 34/100 Plugin v8.7.24 Plugin Check 2.0.0 604 errors, 63 warningsJun 22, 2026, 05:35 PM UTC Score 33/100 Plugin v8.8.0 Plugin Check 2.0.0 618 errors, 63 warningsJun 19, 2026Jun 22, 2026

v8.8.0

33

Latest

Findings
681
Errors
618
Warnings
63
Check
2.0.0

v8.7.24

34

Score

Findings
667
Errors
604
Warnings
63
Check
2.0.0

Related Plugins