Events Made Easy

Manage and display (recurring) events, memberships, locations and maps, volunteers, widgets, RSVP, ICAL and RSS feeds, payment gateways. SEO ready.

v3.1.1FrankyUpdated Added 1k+ installs92% rating100% support resolved
25
Score
506
Errors
6,296
Warnings
+0
Change

Category Scores

Security0
Repo100
Performance96
Maintainability0

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

6,802 findings

Maintainability

3,524

14 issue groups

Security

3,077

11 issue groups

WARNINGMaintainabilityNon Prefixed Function FoundFunctions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "_eme_install".1,446
Category
Maintainability
Occurrences
1,446
Severity
warning

Sample message

Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "_eme_install".

WARNINGSecurityInput Not SanitizedDetected usage of a non-sanitized input variable: $_COOKIE['eme_client_time']700
Category
Security
Occurrences
700
Severity
warning

Sample message

Detected usage of a non-sanitized input variable: $_COOKIE['eme_client_time']

WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.686
Category
Maintainability
Occurrences
686
Severity
warning

Sample message

Use of a direct database call is discouraged.

WARNINGSecurityMissing Unslash$_COOKIE['eme_client_time'] not unslashed before sanitization. Use wp_unslash() or similar668
Category
Security
Occurrences
668
Severity
warning

Sample message

$_COOKIE['eme_client_time'] not unslashed before sanitization. Use wp_unslash() or similar

WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().594
Category
Maintainability
Occurrences
594
Severity
warning

Sample message

Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().

WARNINGSecurityMissingProcessing form data without nonce verification.363
Category
Security
Occurrences
363
Severity
warning

Sample message

Processing form data without nonce verification.

WARNINGSecurityRecommendedProcessing form data without nonce verification.340
Category
Security
Occurrences
340
Severity
warning

Sample message

Processing form data without nonce verification.

WARNINGSecurityInput Not ValidatedDetected usage of a possibly undefined superglobal array index: $_FILES[$key]['error']. Check that the array index exists before using it.298
Category
Security
Occurrences
298
Severity
warning

Sample message

Detected usage of a possibly undefined superglobal array index: $_FILES[$key]['error']. Check that the array index exists before using it.

WARNINGSecurityUnescaped DBParameterUnescaped parameter $column used in $wpdb->get_var()\n$column used without escaping.194
Category
Security
Occurrences
194
Severity
warning

Sample message

Unescaped parameter $column used in $wpdb->get_var()\n$column used without escaping.

WARNINGMaintainabilityNon Prefixed Constant FoundGlobal constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "DEFAULT_BOOKINGS_LIST_FOOTER_FORMAT".166
Category
Maintainability
Occurrences
166
Severity
warning

Sample message

Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "DEFAULT_BOOKINGS_LIST_FOOTER_FORMAT".

Show 15 more
ERRORSecurityOutput Not Escaped160
Category
Security
Occurrences
160
Severity
error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"Authorization ID: {$response->result->purchase_units[0]->payments->authorizations[0]->id}\n"'.

WARNINGMaintainabilityNon Prefixed Variable Found159
Category
Maintainability
Occurrences
159
Severity
warning

Sample message

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$TestOrderData".

WARNINGSecurityInterpolated Not Prepared153
Category
Security
Occurrences
153
Severity
warning

Sample message

Use placeholders and $wpdb->prepare(); found interpolated variable $answers_table at "DELETE FROM $answers_table WHERE related_id IN ($placeholders) AND type = 'tasksignup'"

WARNINGMaintainabilityNon Prefixed Hookname Found143
Category
Maintainability
Occurrences
143
Severity
warning

Sample message

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "'eme_discount_' . $discount['name']".

ERRORSecurityException Not Escaped99
Category
Security
Occurrences
99
Severity
error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"Cannot save property `{$key}` containing an API resource of type "'.

WARNINGSecurityUnfinished Prepare84
Category
Security
Occurrences
84
Severity
warning

Sample message

Replacement variables found, but no valid placeholders found in the query.

WARNINGMaintainabilitySchema Change76
Category
Maintainability
Occurrences
76
Severity
warning

Sample message

Attempting a database schema change is discouraged.

ERRORMaintainabilitymissing direct file access protection68
Category
Maintainability
Occurrences
68
Severity
error

Sample message

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

WARNINGMaintainabilityerror log trigger error54
Category
Maintainability
Occurrences
54
Severity
warning

Sample message

trigger_error() found. Debug code should not normally be used in production.

ERRORMaintainabilityEcho Found29
Category
Maintainability
Occurrences
29
Severity
error

Sample message

Short PHP opening tag used with echo; expected "<?php echo $capture_order ..." but found "<?= $capture_order ..."

WARNINGMaintainabilityNot In Footer29
Category
Maintainability
Occurrences
29
Severity
warning

Sample message

In footer ($in_footer) is not set explicitly wp_register_script; It is recommended to load scripts in the footer. Please set this value to `true` to load it in the footer, or explicitly `false` if it should be loaded in the header.

WARNINGMaintainabilityNon Prefixed Class Found27
Category
Maintainability
Occurrences
27
Severity
warning

Sample message

Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: &quot;EMEMailBatch&quot;.

WARNINGMaintainabilityerror log print r26
Category
Maintainability
Occurrences
26
Severity
warning

Sample message

print_r() found. Debug code should not normally be used in production.

ERRORMaintainabilitycurl curl setopt21
Category
Maintainability
Occurrences
21
Severity
error

Sample message

Using cURL functions is highly discouraged. Use wp_remote_get() instead.

WARNINGSecurityReplacements Wrong Number18
Category
Security
Occurrences
18
Severity
warning

Sample message

Incorrect number of replacements passed to $wpdb-&gt;prepare(). Found 1 replacement parameters, expected 2.

Score History

First score snapshot

v3.1.1

25

Latest

Findings
6,802
Errors
506
Warnings
6,296
Check
2.0.0

Related Plugins