My Tickets – Accessible Event Ticketing

My Tickets is a simple, flexible platform for selling event tickets with WordPress.

v2.2.1Joe DolsonUpdated 13 days agoAdded 11 years ago700 installs98% rating50% support resolved

Event Tickets accessibility registration reservations ticket sales

Score

314

Errors

566

Warnings

Change

Category Scores

Security0

Repo91

Performance100

Maintainability54

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

880 findings

Security

788

8 issue groups

Maintainability

14 issue groups

Repo Compliance

2 issue groups

WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.186

Category: Security
Occurrences: 186
Severity: warning

Sample message

Processing form data without nonce verification.

WordPress.Security.NonceVerification.Recommended

ERRORSecurityUnsafe printing functionAll output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.162

Category: Security
Occurrences: 162
Severity: error

Sample message

All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.

WordPress.Security.EscapeOutput.UnsafePrintingFunction Reference

WARNINGSecurityRequest data is not unslashed$_COOKIE['mt_opting_out'] not unslashed before sanitization. Use wp_unslash() or similar121

Category: Security
Occurrences: 121
Severity: warning

Sample message

$_COOKIE['mt_opting_out'] not unslashed before sanitization. Use wp_unslash() or similar

WordPress.Security.ValidatedSanitizedInput.MissingUnslash

WARNINGSecurityMissing nonce verificationProcessing form data without nonce verification.118

Category: Security
Occurrences: 118
Severity: warning

Sample message

Processing form data without nonce verification.

WordPress.Security.NonceVerification.Missing

ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"$num_used/$total"'.108

Category: Security
Occurrences: 108
Severity: error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"$num_used/$total"'.

WordPress.Security.EscapeOutput.OutputNotEscaped Reference

WARNINGSecurityInput is not validatedDetected usage of a possibly undefined superglobal array index: $_GET['callback']. Check that the array index exists before using it.57

Category: Security
Occurrences: 57
Severity: warning

Sample message

Detected usage of a possibly undefined superglobal array index: $_GET['callback']. Check that the array index exists before using it.

WordPress.Security.ValidatedSanitizedInput.InputNotValidated

WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_COOKIE['mt_purchase_receipt']34

Category: Security
Occurrences: 34
Severity: warning

Sample message

Detected usage of a non-sanitized input variable: $_COOKIE['mt_purchase_receipt']

WordPress.Security.ValidatedSanitizedInput.InputNotSanitized

ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;21

Category: Maintainability
Occurrences: 21
Severity: error

Sample message

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

missing_direct_file_access_protection Reference

ERRORMaintainabilitystrip tags strip tagsstrip_tags() is discouraged. Use the more comprehensive wp_strip_all_tags() instead.19

Category: Maintainability
Occurrences: 19
Severity: error

Sample message

strip_tags() is discouraged. Use the more comprehensive wp_strip_all_tags() instead.

WordPress.WP.AlternativeFunctions.strip_tags_strip_tags

WARNINGMaintainabilityerror log print rprint_r() found. Debug code should not normally be used in production.12

Category: Maintainability
Occurrences: 12
Severity: warning

Sample message

print_r() found. Debug code should not normally be used in production.

WordPress.PHP.DevelopmentFunctions.error_log_print_r

Show 14 more

WARNINGMaintainabilityNot In Footer11

Category: Maintainability
Occurrences: 11
Severity: warning

Sample message

In footer ($in_footer) is not set explicitly wp_enqueue_script; It is recommended to load scripts in the footer. Please set this value to `true` to load it in the footer, or explicitly `false` if it should be loaded in the header.

WordPress.WP.EnqueuedResourceParameters.NotInFooter

WARNINGMaintainabilityDirect Query7

Category: Maintainability
Occurrences: 7
Severity: warning

Sample message

Use of a direct database call is discouraged.

WordPress.DB.DirectDatabaseQuery.DirectQuery

WARNINGMaintainabilityNo Caching7

Category: Maintainability
Occurrences: 7
Severity: warning

Sample message

Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().

WordPress.DB.DirectDatabaseQuery.NoCaching

WARNINGMaintainabilityslow db query meta key2

Category: Maintainability
Occurrences: 2
Severity: warning

Sample message

Detected usage of meta_key, possible slow query.

WordPress.DB.SlowDBQuery.slow_db_query_meta_key

WARNINGMaintainabilityslow db query meta query2

Category: Maintainability
Occurrences: 2
Severity: warning

Sample message

Detected usage of meta_query, possible slow query.

WordPress.DB.SlowDBQuery.slow_db_query_meta_query

WARNINGMaintainabilityslow db query meta value2

Category: Maintainability
Occurrences: 2
Severity: warning

Sample message

Detected usage of meta_value, possible slow query.

WordPress.DB.SlowDBQuery.slow_db_query_meta_value

WARNINGSecurityInput is not validated or sanitized2

Category: Security
Occurrences: 2
Severity: warning

Sample message

Detected usage of a non-sanitized, non-validated input variable _SERVER: Server Software: $_SERVER[SERVER_SOFTWARE]\r\n

WordPress.Security.ValidatedSanitizedInput.InputNotValidatedNotSanitized

ERRORMaintainabilityplugin updater detected2

Category: Maintainability
Occurrences: 2
Severity: error

Sample message

Plugin Updater detected. These are not permitted in WordPress.org hosted plugins. Detected: class EDD_SL_Plugin_Updater

plugin_updater_detected

WARNINGMaintainabilityupdate modification detected2

Category: Maintainability
Occurrences: 2
Severity: warning

Sample message

Plugin Updater detected. Detected code which may be altering WordPress update routines. Detected: _site_transient_update_plugins

update_modification_detected Reference

WARNINGMaintainabilityslow db query tax query1

Category: Maintainability
Occurrences: 1
Severity: warning

Sample message

Detected usage of tax_query, possible slow query.

WordPress.DB.SlowDBQuery.slow_db_query_tax_query

ERRORMaintainabilitycurl curl setopt1

Category: Maintainability
Occurrences: 1
Severity: error

Sample message

Using cURL functions is highly discouraged. Use wp_remote_get() instead.

WordPress.WP.AlternativeFunctions.curl_curl_setopt

ERRORRepo Compliancelicense mismatch1

Category: Repo Compliance
Occurrences: 1
Severity: error

Sample message

Your plugin has a different license declared in the readme file and plugin header. Please update your readme with a valid GPL license identifier.

license_mismatch Reference

WARNINGMaintainabilitymismatched plugin name1

Category: Maintainability
Occurrences: 1
Severity: warning

Sample message

Plugin name "My Tickets - Accessible Event Ticketing" is different from the name declared in plugin header "My Tickets".

mismatched_plugin_name Reference

WARNINGRepo Complianceplugin header invalid domain path1

Category: Repo Compliance
Occurrences: 1
Severity: warning

Sample message

The "Domain Path" header in the plugin file must start with forward slash.

plugin_header_invalid_domain_path Reference

External Connections

Potential connections found in static code analysis.

44 domains

Outbound calls

192

External assets

Incoming endpoints

Notable Domains

joedolson.com51 · outbound

developer.mozilla.org10 · outbound

en.wikipedia.org9 · outbound

php.net6 · outbound

thonky.com6 · outbound

docs.joedolson.com4 · outbound

Platform / Reference Domains

github.com47 · platform/reference

w3.org14 · platform/reference

gnu.org1 · platform/reference

profiles.wordpress.org1 · platform/reference

wordpress.org1 · platform/reference

External Asset Domains

No external asset domains detected.

Incoming Endpoints

wp_ajax_nopriv_mt_ajax_cartpublic

wp_ajax

wp_ajax_nopriv_mt_ajax_handlerpublic

wp_ajax

wp_ajax_nopriv_mt_ajax_load_modelpublic

wp_ajax

Admin AJAX endpoints7

wp_ajax_delete_ticketauthenticated

wp_ajax

wp_ajax_move_ticketauthenticated

wp_ajax

wp_ajax_mt_ajax_cartauthenticated

wp_ajax

wp_ajax_mt_ajax_handlerauthenticated

wp_ajax

wp_ajax_mt_ajax_load_modelauthenticated

wp_ajax

wp_ajax_mt_event_lookupauthenticated

wp_ajax

wp_ajax_mt_post_lookupauthenticated

wp_ajax

Score History

First score snapshot

2 days ago

v2.2.1

Latest

Findings: 880
Errors: 314
Warnings: 566
Check: 2.0.0

Scan	Score	Findings	Errors	Warnings	Plugin	Check
2 days agoLatest	34	880	314	566	v2.2.1	2.0.0

Relationship Map

Author, categories, issues, domains, and nearby plugins.

37 nodes

Loading map

PluginAuthorCategoryIssueDomainRelated

Relationship links

Issue

Domain

joedolson.com51 signals developer.mozilla.org10 signals en.wikipedia.org9 signals php.net6 signals thonky.com6 signals docs.joedolson.com4 signals polymer.github.io4 signals web.archive.org3 signals

Related Plugins

Accessibility New Window Warnings

1k+ active installs

100

Definitely allow mobile zooming

7k+ active installs

100

Accessibility Tool Kit: WP Accessibility checker plugin for WCAG, Section 508, ADA, EAA Compliance

1k+ active installs

Better Aria Label Support

5k+ active installs

Improving Search Form Accessibility

700 active installs

Allow Cyrillic Usernames

600 active installs