Name: Booking Calendar Contact Form
Rating: 3.6
Author: codepeople

Top Issues by File

Files with the highest concentration of issues in the latest scan

Issues Details

1212 issues found in latest scan

	Code	Message	Location	Category
ERROR	`WordPress.Security.EscapeOutput.OutputNotEscaped`	All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found 'str_replace'.	`dex_scheduler.inc.php:259:27`	Security
ERROR	`WordPress.Security.EscapeOutput.OutputNotEscaped`	All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found 'cp_bccf_get_site_url'.	`dex_scheduler.inc.php:269:26`	Security
ERROR	`WordPress.Security.EscapeOutput.OutputNotEscaped`	All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found 'CP_BCCF_CALENDAR_ID'.	`dex_scheduler.inc.php:306:131`	Security
ERROR	`WordPress.Security.EscapeOutput.OutputNotEscaped`	All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found 'str_replace'.	`dex_scheduler.inc.php:306:354`	Security
ERROR	`WordPress.Security.EscapeOutput.OutputNotEscaped`	All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found 'date'.	`dex_bccf.php:842:96`	Security
ERROR	`WordPress.DateTime.RestrictedFunctions.date_date`	date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.	`dex_bccf.php:842:96`	—
ERROR	`WordPress.DB.PreparedSQL.NotPrepared`	Use placeholders and $wpdb->prepare(); found DEX_BCCF_DISCOUNT_CODES_TABLE_NAME	`dex_scheduler.inc.php:321:69`	Security
ERROR	`WordPress.Security.EscapeOutput.OutputNotEscaped`	All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$l_coupon'.	`dex_scheduler.inc.php:326:28`	Security
ERROR	`WordPress.Security.EscapeOutput.OutputNotEscaped`	All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$l_sec_code'.	`dex_scheduler.inc.php:335:84`	Security
ERROR	`WordPress.Security.EscapeOutput.OutputNotEscaped`	All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found 'plugins_url'.	`dex_scheduler.inc.php:335:127`	Security

1212 total row(s)


02.12.2025, 17:00:43	14s	2	329	883
20.11.2025, 17:00:30	24s	2	339	883
16.11.2025, 01:58:39	20s	2	328	882

Booking Calendar Contact Form

Security1039

General67

Performance61

Plugin Repository26

dex_bccf.php861 issues in this fileTotal: 861Errors: 159Warnings: 702

dex_bccf_admin_int_calendar_list.inc.php71 issues in this fileTotal: 71Errors: 23Warnings: 48

dex_bccf_admin_int_bookings_list.inc.php57 issues in this fileTotal: 57Errors: 18Warnings: 39

captcha/captcha.php51 issues in this fileTotal: 51Errors: 11Warnings: 40

dex_bccf_admin_int.inc.php48 issues in this fileTotal: 48Errors: 41Warnings: 7

dex_scheduler.inc.php32 issues in this fileTotal: 32Errors: 30Warnings: 2

dex_scheduler_block.inc.php21 issues in this fileTotal: 21Errors: 17Warnings: 4

addons/dex_allcals.inc.php17 issues in this fileTotal: 17Errors: 17

cp_admin_int_edition.inc.php16 issues in this fileTotal: 16Warnings: 16

cp-feedback.php15 issues in this fileTotal: 15Errors: 5Warnings: 10