FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce

Recover lost revenue with Cart Abandonment Recovery for WooCommerce. Increase retention with Post Purchase Follow-Up Emails.

v3.8.1.1FunnelKitUpdated Added 20k+ installs100% rating
23
Score
1,125
Errors
2,153
Warnings
+0
Change

Category Scores

Security0
Repo91
Performance98
Maintainability0

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

3,278 findings

Maintainability

1,645

16 issue groups

Security

1,521

9 issue groups

ERRORMaintainabilitymissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;490
Category
Maintainability
Occurrences
490
Severity
error

Sample message

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

ERRORSecurityNot PreparedUse placeholders and $wpdb->prepare(); found $alter_query461
Category
Security
Occurrences
461
Severity
error

Sample message

Use placeholders and $wpdb->prepare(); found $alter_query

WARNINGMaintainabilityNon Prefixed Variable FoundGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$VARS".436
Category
Maintainability
Occurrences
436
Severity
warning

Sample message

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$VARS".

WARNINGSecurityUnescaped DBParameterUnescaped parameter $abandoned_table used in $wpdb->get_results()\n$abandoned_table assigned unsafely at line 4114.393
Category
Security
Occurrences
393
Severity
warning

Sample message

Unescaped parameter $abandoned_table used in $wpdb->get_results()\n$abandoned_table assigned unsafely at line 4114.

WARNINGSecurityInterpolated Not PreparedUse placeholders and $wpdb->prepare(); found interpolated variable $abandoned_id at "SELECT * FROM $table WHERE `cid` = %d AND `data` LIKE '$abandoned_id'"324
Category
Security
Occurrences
324
Severity
warning

Sample message

Use placeholders and $wpdb->prepare(); found interpolated variable $abandoned_id at "SELECT * FROM $table WHERE `cid` = %d AND `data` LIKE '$abandoned_id'"

WARNINGMaintainabilityNon Prefixed Hookname FoundHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "_bwf_transient_file_saving".149
Category
Maintainability
Occurrences
149
Severity
warning

Sample message

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "_bwf_transient_file_saving".

WARNINGMaintainabilityMaybe ASPOpen Tag FoundPossible use of ASP style opening tags detected; found: <% _(k).each(function(k,v) { %>\n143
Category
Maintainability
Occurrences
143
Severity
warning

Sample message

Possible use of ASP style opening tags detected; found: <% _(k).each(function(k,v) { %>\n

WARNINGSecurityRecommendedProcessing form data without nonce verification.125
Category
Security
Occurrences
125
Severity
warning

Sample message

Processing form data without nonce verification.

WARNINGSecurityMissing Unslash$_COOKIE[$key] not unslashed before sanitization. Use wp_unslash() or similar110
Category
Security
Occurrences
110
Severity
warning

Sample message

$_COOKIE[$key] not unslashed before sanitization. Use wp_unslash() or similar

WARNINGMaintainabilityMaybe ASPShort Open Tag FoundPossible use of ASP style short opening tags detected; found: <%= bwfan_events_js_data["cf7_form_submit"]...85
Category
Maintainability
Occurrences
85
Severity
warning

Sample message

Possible use of ASP style short opening tags detected; found: <%= bwfan_events_js_data["cf7_form_submit"]...

Show 15 more
ERRORMaintainabilitydate date76
Category
Maintainability
Occurrences
76
Severity
error

Sample message

date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.

WARNINGSecurityUnfinished Prepare59
Category
Security
Occurrences
59
Severity
warning

Sample message

Replacement variables found, but no valid placeholders found in the query.

WARNINGMaintainabilityslow db query meta key51
Category
Maintainability
Occurrences
51
Severity
warning

Sample message

Detected usage of meta_key, possible slow query.

WARNINGMaintainabilityNon Prefixed Function Found50
Category
Maintainability
Occurrences
50
Severity
warning

Sample message

Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "as_enqueue_async_action".

WARNINGMaintainabilityNon Prefixed Class Found44
Category
Maintainability
Occurrences
44
Severity
warning

Sample message

Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "BWF_AS".

ERRORMaintainabilitywp function not compatible with requires wp39
Category
Maintainability
Occurrences
39
Severity
error

Sample message

Function "get_post_parent()" requires WordPress 5.7.0, but your plugin minimum supported version is WordPress 5.0.0.

WARNINGMaintainabilityslow db query meta value36
Category
Maintainability
Occurrences
36
Severity
warning

Sample message

Detected usage of meta_value, possible slow query.

WARNINGSecurityInput Not Sanitized30
Category
Security
Occurrences
30
Severity
warning

Sample message

Detected usage of a non-sanitized input variable: $_COOKIE[$attr['key']]

WARNINGMaintainabilityDynamic Hookname Found16
Category
Maintainability
Occurrences
16
Severity
warning

Sample message

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "$hook".

WARNINGSecurityMissing12
Category
Security
Occurrences
12
Severity
warning

Sample message

Processing form data without nonce verification.

WARNINGMaintainabilityDirect Query8
Category
Maintainability
Occurrences
8
Severity
warning

Sample message

Use of a direct database call is discouraged.

WARNINGMaintainabilityNo Caching8
Category
Maintainability
Occurrences
8
Severity
warning

Sample message

Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().

WARNINGMaintainabilityslow db query meta query7
Category
Maintainability
Occurrences
7
Severity
warning

Sample message

Detected usage of meta_query, possible slow query.

WARNINGMaintainabilityerror log print r7
Category
Maintainability
Occurrences
7
Severity
warning

Sample message

print_r() found. Debug code should not normally be used in production.

WARNINGSecurityInput Not Validated7
Category
Security
Occurrences
7
Severity
warning

Sample message

Detected usage of a possibly undefined superglobal array index: $_GET['edit']. Check that the array index exists before using it.

Score History

First score snapshot

v3.8.1.1

23

Latest

Findings
3,278
Errors
1,125
Warnings
2,153
Check
2.0.0

Related Plugins