Booking Calendar

WP Booking Calendar plugin for full-day bookings, time-slot appointments, rentals & events. Accept bookings and inquiries with flexible contact forms

v11.1wpdevelopUpdated 2026-05-15Added Aug 15, 200950k+ installs94% rating80% support resolved
56
Score
16
Errors
40
Warnings
+0
Change

Category Scores

Security28
Repo100
Performance100
Maintainability77

Top Issues by Category

Issues Details

56 issues found in latest scan

ERROR11
wp_function_not_compatible_with_requires_wp

Function "get_block_templates()" requires WordPress 5.8.0, but your plugin minimum supported version is WordPress 5.3.0.

WARNING8
WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedConstantFound

Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "OBC_CHECK_URL".

WARNING7
WordPress.Security.ValidatedSanitizedInput.InputNotSanitized

Detected usage of a non-sanitized input variable: $_POST['ids']

WARNING6
WordPress.DB.PreparedSQL.InterpolatedNotPrepared

Use placeholders and $wpdb->prepare(); found interpolated variable {$placeholders} at \t\t WHERE timeslot_id IN ({$placeholders})"

ERROR4
PluginCheck.CodeAnalysis.Heredoc.NotAllowed

Use of heredoc syntax (<<<) is not allowed; use standard strings or inline HTML instead

WARNING4
WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedClassFound

Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: &quot;BookingWidget&quot;.

WARNING3
Internal.LineEndings.Mixed

File has mixed line endings; this may cause incorrect results

WARNING3
PluginCheck.Security.DirectDB.UnescapedDBParameter

Unescaped parameter $sql used in $wpdb-&gt;get_results()\n$sql assigned unsafely at line 300.

WARNING3
WordPress.Security.ValidatedSanitizedInput.MissingUnslash

$_REQUEST[&#039;date_end&#039;] not unslashed before sanitization. Use wp_unslash() or similar

WARNING2
WordPress.Security.NonceVerification.Recommended

Processing form data without nonce verification.

ERROR1
PluginCheck.CodeAnalysis.WriteFile.PluginDirectoryWrite

Plugin folders are deleted when upgraded. Do not save data to the plugin folder using fwrite(). Detected usage of constant WP_PLUGIN_DIR. Use wp_upload_dir() to get the uploads directory path or save to the database instead.

WARNING1
WordPress.DB.DirectDatabaseQuery.NoCaching

Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().

WARNING1
WordPress.DB.PreparedSQLPlaceholders.ReplacementsWrongNumber

Incorrect number of replacements passed to $wpdb-&gt;prepare(). Found 1 replacement parameters, expected 2.

WARNING1
WordPress.DB.PreparedSQLPlaceholders.UnfinishedPrepare

Replacement variables found, but no valid placeholders found in the query.

WARNING1
upgrade_notice_limit

The upgrade notice for "11.0" exceeds the limit of 300 characters.

Latest Snapshot

Findings

56

Errors

16

Warnings

40

Score History

First score snapshot

First scan completed Jun 20, 2026

v11.1 · Plugin Check 2.0.0 · Model 2026.06-mvp-static-v2

Jun 20, 2026

v11.1

56

Latest

Findings
56
Errors
16
Warnings
40
Plugin Check
2.0.0
Model
2026.06-mvp-static-v2

Related Plugins