Event Monster – Event Manager, Ticket Booking & Registration

A powerful event manager plugin for calendar display, ticket booking, event booking, and event registration.

v2.1.1A WP LifeUpdated Added 700 installs96% rating
26
Score
781
Errors
781
Warnings
+0
Change

Category Scores

Security0
Repo94
Performance100
Maintainability10

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

1,562 findings

Security

815

9 issue groups

Maintainability

682

14 issue groups

I18n

54

2 issue groups

WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$all_events".555
Category
Maintainability
Occurrences
555
Severity
warning

Sample message

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$all_events".

ERRORSecurityUnsafe printing functionAll output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.513
Category
Security
Occurrences
513
Severity
error

Sample message

All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.

ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$cat_name'.192
Category
Security
Occurrences
192
Severity
error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$cat_name'.

WARNINGSecurityRequest data is not unslashed$_GET['em_back'] not unslashed before sanitization. Use wp_unslash() or similar52
Category
Security
Occurrences
52
Severity
warning

Sample message

$_GET['em_back'] not unslashed before sanitization. Use wp_unslash() or similar

ERRORI18nText Domain MismatchMismatched text domain. Expected 'event-monster' but got 'event-monster-premium'.47
Category
I18n
Occurrences
47
Severity
error

Sample message

Mismatched text domain. Expected 'event-monster' but got 'event-monster-premium'.

WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.26
Category
Maintainability
Occurrences
26
Severity
warning

Sample message

Use of a direct database call is discouraged.

WARNINGMaintainabilityerror log error logerror_log() found. Debug code should not normally be used in production.25
Category
Maintainability
Occurrences
25
Severity
warning

Sample message

error_log() found. Debug code should not normally be used in production.

WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().23
Category
Maintainability
Occurrences
23
Severity
warning

Sample message

Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().

WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_GET['em_back']21
Category
Security
Occurrences
21
Severity
warning

Sample message

Detected usage of a non-sanitized input variable: $_GET['em_back']

WARNINGMaintainabilityNon-prefixed functionFunctions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "activate_Event_Monster_Free_free".14
Category
Maintainability
Occurrences
14
Severity
warning

Sample message

Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "activate_Event_Monster_Free_free".

Show 15 more
WARNINGSecurityInterpolated SQL is not prepared13
Category
Security
Occurrences
13
Severity
warning

Sample message

Use placeholders and $wpdb->prepare(); found interpolated variable $attendees_table at "DELETE FROM $attendees_table WHERE id IN ( $ids_format )"

WARNINGSecurityDatabase parameter is not escaped12
Category
Security
Occurrences
12
Severity
warning

Sample message

Unescaped parameter $attendees_table used in $wpdb->get_results()\n$attendees_table assigned unsafely at line 283.

WARNINGMaintainabilityNon-prefixed constant9
Category
Maintainability
Occurrences
9
Severity
warning

Sample message

Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "EM_FREE_PLUGIN_BASENAME".

ERRORMaintainabilitydate date7
Category
Maintainability
Occurrences
7
Severity
error

Sample message

date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.

ERRORI18nMissing Translators Comment7
Category
I18n
Occurrences
7
Severity
error

Sample message

A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.

WARNINGMaintainabilityMissing Version6
Category
Maintainability
Occurrences
6
Severity
warning

Sample message

Resource version not set in call to wp_enqueue_style(). This means new versions of the style may not always be loaded due to browser caching.

WARNINGSecurityNonce verification recommended5
Category
Security
Occurrences
5
Severity
warning

Sample message

Processing form data without nonce verification.

WARNINGSecurityInput is not validated5
Category
Security
Occurrences
5
Severity
warning

Sample message

Detected usage of a possibly undefined superglobal array index: $_POST['event_id']. Check that the array index exists before using it.

WARNINGMaintainabilityslow db query tax query4
Category
Maintainability
Occurrences
4
Severity
warning

Sample message

Detected usage of tax_query, possible slow query.

ERRORMaintainabilityMissing direct file access protection4
Category
Maintainability
Occurrences
4
Severity
error

Sample message

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

WARNINGMaintainabilityslow db query meta query3
Category
Maintainability
Occurrences
3
Severity
warning

Sample message

Detected usage of meta_query, possible slow query.

WARNINGMaintainabilityerror log print r3
Category
Maintainability
Occurrences
3
Severity
warning

Sample message

print_r() found. Debug code should not normally be used in production.

ERRORMaintainabilityOffloaded Content2
Category
Maintainability
Occurrences
2
Severity
error

Sample message

Found call to wp_enqueue_script() with external resource. Offloading scripts to your servers or any remote service is disallowed.

ERRORSecurityUnsupported Identifier Placeholder2
Category
Security
Occurrences
2
Severity
error

Sample message

The %i modifier is only supported in WP 6.2 or higher. Found: "%i".

WARNINGMaintainabilityMixed line endings1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

File has mixed line endings; this may cause incorrect results

External Connections

Potential connections found in static code analysis.

43 domains

Outbound calls

163

External assets

16

Incoming endpoints

17

Notable Domains

awplife.com18 · outbound
apache.org5 · outbound
getbootstrap.com3 · outbound
sharethis.com3 · outbound
benalman.com2 · outbound

Platform / Reference Domains

w3.org74 · platform/reference
github.com11 · platform/reference
opensource.org2 · platform/reference
gnu.org1 · platform/reference

External Asset Domains

fonts.googleapis.com10 · asset + outbound
cdn.jsdelivr.net4 · asset + outbound
player.vimeo.com2 · asset + outbound
youtube.com2 · asset + outbound
raw.github.com1 · asset

Incoming Endpoints

wp_ajax_nopriv_em_public

wp_ajax

wp_ajax_nopriv_em_book_ticketspublic

wp_ajax

wp_ajax_nopriv_em_get_calendar_eventspublic

wp_ajax

wp_ajax_nopriv_em_get_event_modalpublic

wp_ajax

wp_ajax_nopriv_em_process_bookingpublic

wp_ajax

Admin AJAX endpoints9
wp_ajax_em_authenticated

wp_ajax

wp_ajax_em_book_ticketsauthenticated

wp_ajax

wp_ajax_em_dismiss_update_noticeauthenticated

wp_ajax

wp_ajax_em_dismiss_welcome_noticeauthenticated

wp_ajax

wp_ajax_em_get_calendar_eventsauthenticated

wp_ajax

wp_ajax_em_get_event_modalauthenticated

wp_ajax

wp_ajax_em_preview_layoutauthenticated

wp_ajax

wp_ajax_em_process_bookingauthenticated

wp_ajax

wp_ajax_em_save_settingsauthenticated

wp_ajax

Score History

First score snapshot

v2.1.1

26

Latest

Findings
1,562
Errors
781
Warnings
781
Check
2.0.0

Relationship Map

Author, categories, issues, domains, and nearby plugins.

37 nodes

Related Plugins