Zendesk Chat

Zendesk Chat (previously Zopim) lets you monitor and chat with visitors surfing your store in real-time. Impress them personally and ease them into th …

v1.4.18zendesk_officialUpdated 2020-08-20Added Jan 20, 201010k+ installs80% rating
37
Score
44
Errors
67
Warnings
+0
Change

Category Scores

Security0
Repo74
Performance100
Maintainability77

Top Issues by Category

security69
maintainability32
repo_compliance6
i18n2

Issues Details

111 issues found in latest scan

ERROR29
WordPress.Security.EscapeOutput.OutputNotEscaped

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"\$zopim(function(){\$zopim.livechat.set({name: '$firstname', email: '$useremail'}); });"'.

WARNING10
WordPress.Security.ValidatedSanitizedInput.InputNotSanitized

Detected usage of a non-sanitized input variable: $_GET['page']

WARNING10
WordPress.Security.ValidatedSanitizedInput.MissingUnslash

$_GET['page'] not unslashed before sanitization. Use wp_unslash() or similar

WARNING8
WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedConstantFound

Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "SERVICES_JSON_IN_ARR".

WARNING8
WordPress.Security.ValidatedSanitizedInput.InputNotValidated

Detected usage of a possibly undefined superglobal array index: $_POST['widget-options']. Check that the array index exists before using it.

WARNING6
WordPress.Security.NonceVerification.Missing

Processing form data without nonce verification.

WARNING6
WordPress.WP.DeprecatedClasses.services_jsonFound

The Services_JSON class has been deprecated since WordPress version 5.3.0. Use The PHP native JSON extension instead.

ERROR6
missing_direct_file_access_protection

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

WARNING4
WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedVariableFound

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$hasErrors".

ERROR3
PluginCheck.CodeAnalysis.SettingSanitization.register_settingMissing

Sanitization missing for register_setting().

WARNING3
WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedClassFound

Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "Services_JSON".

WARNING2
WordPress.Security.NonceVerification.Recommended

Processing form data without nonce verification.

WARNING2
WordPress.WP.EnqueuedResourceParameters.MissingVersion

Resource version not set in call to wp_register_script(). This means new versions of the script may not always be loaded due to browser caching.

ERROR1
WordPress.Security.EscapeOutput.UnsafePrintingFunction

All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.

WARNING1
WordPress.WP.DeprecatedClasses.services_json_errorFound

The Services_JSON_Error class has been deprecated since WordPress version 5.3.0. Use The PHP native JSON extension instead.

ERROR1
WordPress.WP.DeprecatedParameters.Load_plugin_textdomainParam2Found

The parameter "FALSE" at position #2 of load_plugin_textdomain() has been deprecated since WordPress version 2.7.0. Use "" instead.

WARNING1
WordPress.WP.EnqueuedResourceParameters.NotInFooter

In footer ($in_footer) is not set explicitly wp_register_script; It is recommended to load scripts in the footer. Please set this value to `true` to load it in the footer, or explicitly `false` if it should be loaded in the header.

ERROR1
WordPress.WP.I18n.MissingArgDomain

Missing $domain parameter in function call to __().

WARNING1
mismatched_plugin_name

Plugin name "Zendesk Chat" is different from the name declared in plugin header "Zendesk Chat Widget".

ERROR1
no_license

Missing "License". Please update your readme with a valid GPLv2 (or later) compatible license.

ERROR1
outdated_tested_upto_header

Tested up to: 5.5 < 7.0. The "Tested up to" value in your plugin is not set to the current version of WordPress. This means your plugin will not show up in searches, as we require plugins to be compatible and documented as tested up to the most recent version of WordPress.

ERROR1
plugin_header_no_license

Missing "License" in Plugin Header. Please update your Plugin Header with a valid GPLv2 (or later) compatible license.

WARNING1
plugin_header_nonexistent_domain_path

The "Domain Path" header in the plugin file must point to an existing folder. Found: "language"

WARNING1
readme_parser_warnings_too_many_tags

One or more tags were ignored. Please limit your plugin to 5 tags.

WARNING1
readme_parser_warnings_trimmed_short_description

The "Short Description" section is too long and was truncated. A maximum of 150 characters is supported.

Latest Snapshot

Findings

111

Errors

44

Warnings

67

Score History

First score snapshot

First scan completed Jun 20, 2026

v1.4.18 · Plugin Check 2.0.0 · Model 2026.06-mvp-static-v2

Jun 20, 2026

v1.4.18

37

Latest

Findings
111
Errors
44
Warnings
67
Plugin Check
2.0.0
Model
2026.06-mvp-static-v2

Related Plugins