WP Booking Calendar plugin for full-day bookings, time-slot appointments, rentals & events. Accept bookings and inquiries with flexible contact forms
Category Scores
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Maintainability
33
8 issue groups
Security
23
7 issue groups
ERRORMaintainabilitywp function not compatible with requires wpFunction "get_block_templates()" requires WordPress 5.8.0, but your plugin minimum supported version is WordPress 5.3.0.11
- Category
- Maintainability
- Occurrences
- 11
- Severity
- error
Sample message
Function "get_block_templates()" requires WordPress 5.8.0, but your plugin minimum supported version is WordPress 5.3.0.
WARNINGMaintainabilityNon Prefixed Constant FoundGlobal constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "OBC_CHECK_URL".8
- Category
- Maintainability
- Occurrences
- 8
- Severity
- warning
Sample message
Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "OBC_CHECK_URL".
WARNINGSecurityInput Not SanitizedDetected usage of a non-sanitized input variable: $_POST['ids']7
- Category
- Security
- Occurrences
- 7
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_POST['ids']
WARNINGSecurityInterpolated Not PreparedUse placeholders and $wpdb->prepare(); found interpolated variable {$placeholders} at \t\t WHERE timeslot_id IN ({$placeholders})"6
- Category
- Security
- Occurrences
- 6
- Severity
- warning
Sample message
Use placeholders and $wpdb->prepare(); found interpolated variable {$placeholders} at \t\t WHERE timeslot_id IN ({$placeholders})"
ERRORMaintainabilityNot AllowedUse of heredoc syntax (<<<) is not allowed; use standard strings or inline HTML instead4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- error
Sample message
Use of heredoc syntax (<<<) is not allowed; use standard strings or inline HTML instead
WARNINGMaintainabilityNon Prefixed Class FoundClasses declared by a theme/plugin should start with the theme/plugin prefix. Found: "BookingWidget".4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- warning
Sample message
Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "BookingWidget".
WARNINGMaintainabilityMixedFile has mixed line endings; this may cause incorrect results3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
File has mixed line endings; this may cause incorrect results
WARNINGSecurityUnescaped DBParameterUnescaped parameter $sql used in $wpdb->get_results()\n$sql assigned unsafely at line 300.3
- Category
- Security
- Occurrences
- 3
- Severity
- warning
Sample message
Unescaped parameter $sql used in $wpdb->get_results()\n$sql assigned unsafely at line 300.
WARNINGSecurityMissing Unslash$_REQUEST['date_end'] not unslashed before sanitization. Use wp_unslash() or similar3
- Category
- Security
- Occurrences
- 3
- Severity
- warning
Sample message
$_REQUEST['date_end'] not unslashed before sanitization. Use wp_unslash() or similar
WARNINGSecurityRecommendedProcessing form data without nonce verification.2
- Category
- Security
- Occurrences
- 2
- Severity
- warning
Sample message
Processing form data without nonce verification.
Show 5 moreShow less
ERRORMaintainabilityPlugin Directory Write1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
Plugin folders are deleted when upgraded. Do not save data to the plugin folder using fwrite(). Detected usage of constant WP_PLUGIN_DIR. Use wp_upload_dir() to get the uploads directory path or save to the database instead.
WARNINGMaintainabilityNo Caching1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
WARNINGSecurityReplacements Wrong Number1
- Category
- Security
- Occurrences
- 1
- Severity
- warning
Sample message
Incorrect number of replacements passed to $wpdb->prepare(). Found 1 replacement parameters, expected 2.
WARNINGSecurityUnfinished Prepare1
- Category
- Security
- Occurrences
- 1
- Severity
- warning
Sample message
Replacement variables found, but no valid placeholders found in the query.
WARNINGMaintainabilityupgrade notice limit1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
The upgrade notice for "11.0" exceeds the limit of 300 characters.
Score History
First score snapshot
v11.1
56
Latest
- Findings
- 56
- Errors
- 16
- Warnings
- 40
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 56 | 56 | 16 | 40 | v11.1 | 2.0.0 |
Related Plugins
3k+ active installs
1k+ active installs
1k+ active installs
10k+ active installs
10k+ active installs
1k+ active installs