Event Espresso – Event Registration & Ticketing Sales

The best events plugin with event registration, free and paid ticket sales, event registration forms, PayPal payments, automatic emails, and more!

v5.0.58.decafEvent EspressoUpdated 3 months agoAdded 12 years ago600 installs88% rating

calendar event registration events ticket sales tickets

Score

12,698

Errors

2,135

Warnings

Change

Category Scores

Security0

Repo70

Performance93

Maintainability0

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

14,833 findings

I18n

10,537

5 issue groups

Maintainability

2,349

13 issue groups

Security

1,683

7 issue groups

ERRORI18nText Domain MismatchMismatched text domain. Expected 'event-espresso-decaf' but got "event_espresso".8,710

Category: I18n
Occurrences: 8,710
Severity: error

Sample message

Mismatched text domain. Expected 'event-espresso-decaf' but got "event_espresso".

WordPress.WP.I18n.TextDomainMismatch Reference

ERRORI18nMissing Translators CommentA function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.1,430

Category: I18n
Occurrences: 1,430
Severity: error

Sample message

A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.

WordPress.WP.I18n.MissingTranslatorsComment Reference

ERRORSecurityException output is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"$msg||$msg $dev_msg"'.861

Category: Security
Occurrences: 861
Severity: error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"$msg||$msg $dev_msg"'.

WordPress.Security.EscapeOutput.ExceptionNotEscaped Reference

WARNINGMaintainabilityNon-prefixed classClasses declared by a theme/plugin should start with the theme/plugin prefix. Found: "About_Admin_Page".671

Category: Maintainability
Occurrences: 671
Severity: warning

Sample message

Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "About_Admin_Page".

WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedClassFound

ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '" ( $breakdown )"'.424

Category: Security
Occurrences: 424
Severity: error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '" ( $breakdown )"'.

WordPress.Security.EscapeOutput.OutputNotEscaped Reference

ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;416

Category: Maintainability
Occurrences: 416
Severity: error

Sample message

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

missing_direct_file_access_protection Reference

WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$EVT_ID".349

Category: Maintainability
Occurrences: 349
Severity: warning

Sample message

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$EVT_ID".

WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedVariableFound

ERRORI18nUnordered Placeholders TextMultiple placeholders in translatable strings should be ordered. Expected "%1$d, %2$d, %3$d", but got "%d, %d, %d" in 'Could not find a ticket for old attendee with id %d for new event %d, so created a new ticket with id %d'.249

Category: I18n
Occurrences: 249
Severity: error

Sample message

Multiple placeholders in translatable strings should be ordered. Expected "%1$d, %2$d, %3$d", but got "%d, %d, %d" in 'Could not find a ticket for old attendee with id %d for new event %d, so created a new ticket with id %d'.

WordPress.WP.I18n.UnorderedPlaceholdersText Reference

WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.229

Category: Maintainability
Occurrences: 229
Severity: warning

Sample message

Use of a direct database call is discouraged.

WordPress.DB.DirectDatabaseQuery.DirectQuery

WARNINGMaintainabilityNon-prefixed constantGlobal constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "ANS_ASSETS_URL".186

Category: Maintainability
Occurrences: 186
Severity: warning

Sample message

Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "ANS_ASSETS_URL".

WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedConstantFound

Show 15 more

WARNINGMaintainabilityNo Caching182

Category: Maintainability
Occurrences: 182
Severity: warning

Sample message

Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().

WordPress.DB.DirectDatabaseQuery.NoCaching

ERRORSecuritySQL query is not prepared165

Category: Security
Occurrences: 165
Severity: error

Sample message

Use placeholders and $wpdb->prepare(); found $SQL

WordPress.DB.PreparedSQL.NotPrepared

ERRORMaintainabilitydate date93

Category: Maintainability
Occurrences: 93
Severity: error

Sample message

date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.

WordPress.DateTime.RestrictedFunctions.date_date

ERRORI18nMissing Arg Domain85

Category: I18n
Occurrences: 85
Severity: error

Sample message

Missing $domain parameter in function call to __().

WordPress.WP.I18n.MissingArgDomain Reference

WARNINGSecurityInterpolated SQL is not prepared83

Category: Security
Occurrences: 83
Severity: warning

Sample message

Use placeholders and $wpdb->prepare(); found interpolated variable $approved_payment_status at AND Payment.STS_ID = '$approved_payment_status'\n

WordPress.DB.PreparedSQL.InterpolatedNotPrepared

ERRORSecurityDatabase parameter is not escaped66

Category: Security
Occurrences: 66
Severity: error

Sample message

Unescaped parameter $SQL used in $wpdb->get_col()\n$SQL assigned unsafely at line 1312.

PluginCheck.Security.DirectDB.UnescapedDBParameter

ERRORI18nNon Singular String Literal Text63

Category: I18n
Occurrences: 63
Severity: error

Sample message

The $text parameter must be a single text string literal. Found: $EVT_ID

WordPress.WP.I18n.NonSingularStringLiteralText Reference

WARNINGSecurityDatabase parameter is not escaped62

Category: Security
Occurrences: 62
Severity: warning

Sample message

Unescaped parameter $country_table used in $wpdb->get_row()\n$country_table assigned unsafely at line 978.

PluginCheck.Security.DirectDB.UnescapedDBParameter

WARNINGMaintainabilityNon-prefixed hook name51

Category: Maintainability
Occurrences: 51
Severity: warning

Sample message

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: " FHEE__EEH_Form_Fields__generate_form_input__required_label".

WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedHooknameFound

WARNINGMaintainabilityerror log print r47

Category: Maintainability
Occurrences: 47
Severity: warning

Sample message

print_r() found. Debug code should not normally be used in production.

WordPress.PHP.DevelopmentFunctions.error_log_print_r

WARNINGMaintainabilityNon-prefixed function42

Category: Maintainability
Occurrences: 42
Severity: warning

Sample message

Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "array_all".

WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedFunctionFound

WARNINGMaintainabilityNon-prefixed interface36

Category: Maintainability
Occurrences: 36
Severity: warning

Sample message

Interfaces declared by a theme/plugin should start with the theme/plugin prefix. Found: "EEHI_File".

WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedInterfaceFound

ERRORMaintainabilitywp function not compatible with requires wp25

Category: Maintainability
Occurrences: 25
Severity: error

Sample message

Function "determine_locale()" requires WordPress 5.0.0, but your plugin minimum supported version is WordPress 4.5.0.

wp_function_not_compatible_with_requires_wp Reference

WARNINGMaintainabilityNo PHP code found22

Category: Maintainability
Occurrences: 22
Severity: warning

Sample message

No PHP code was found in this file and short open tags are not allowed by this install of PHP. This file may be using short open tags but PHP does not allow them.

Internal.NoCodeFound

WARNINGSecurityNonce verification recommended22

Category: Security
Occurrences: 22
Severity: warning

Sample message

Processing form data without nonce verification.

WordPress.Security.NonceVerification.Recommended

External Connections

Potential connections found in static code analysis.

58 domains

Outbound calls

265

External assets

Incoming endpoints

Notable Domains

eventespresso.com74 · outbound

support.eventespresso.com14 · outbound

api.eventespresso.com8 · outbound

dev.test7 · outbound

fb.me7 · outbound

bugs.chromium.org6 · outbound

Platform / Reference Domains

wordpress.org27 · platform/reference

github.com22 · platform/reference

codex.wordpress.org3 · platform/reference

core.trac.wordpress.org2 · platform/reference

opensource.org1 · platform/reference

External Asset Domains

secure.gravatar.com27 · asset + outbound

paypal.com5 · asset + outbound

paypalobjects.com3 · asset + outbound

Incoming Endpoints

wp_ajax_nopriv_eeaPPCCreateOrderpublic

wp_ajax

wp_ajax_nopriv_eeaPPCommerceLogErrorpublic

wp_ajax

Admin AJAX endpoints21

wp_ajax_activate_messengerauthenticated

wp_ajax

wp_ajax_activate_mtauthenticated

wp_ajax

wp_ajax_add_error_to_migrations_ranauthenticated

wp_ajax

wp_ajax_ee_msgs_save_settingsauthenticated

wp_ajax

wp_ajax_ee_msgs_update_mt_formauthenticated

wp_ajax

wp_ajax_ee_save_timezone_settingauthenticated

wp_ajax

wp_ajax_ee_search_contactsauthenticated

wp_ajax

wp_ajax_eeaPPCCreateOrderauthenticated

wp_ajax

wp_ajax_eeaPpClearMetaDataauthenticated

wp_ajax

wp_ajax_eeaPPCommerceLogErrorauthenticated

wp_ajax

wp_ajax_eeaPpGetOnboardingUrlauthenticated

wp_ajax

wp_ajax_eeaPpGetOnboardStatusauthenticated

wp_ajax

9 more hidden

Score History

First score snapshot

today

v5.0.58.decaf

Latest

Findings: 14,833
Errors: 12,698
Warnings: 2,135
Check: 2.0.0

Scan	Score	Findings	Errors	Warnings	Plugin	Check
todayLatest	20	14,833	12,698	2,135	v5.0.58.decaf	2.0.0

Relationship Map

Author, categories, issues, domains, and nearby plugins.

37 nodes

Loading map

PluginAuthorCategoryIssueDomainRelated

Relationship links

Issue

Domain

Related Plugins

Event Countdown for The Events Calendar

3k+ active installs

100

Events Block

500 active installs

100

Events Search For The Events Calendar

3k+ active installs

100

Events Shortcodes For The Events Calendar

10k+ active installs

100

Events Widgets For Elementor And The Events Calendar

10k+ active installs

100

Calendar

4k+ active installs