Appointment booking calendar and scheduling plugin for services, events and meetings, with staff management, online payments and Google Calendar sync.
Prioritized issue groups from the latest Plugin Check scan
Maintainability
130
12 issue groups
Security
61
9 issue groups
I18n
1
1 issue group
Repo Compliance
1
1 issue group
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$args".
Sample message
Use placeholders and $wpdb->prepare(); found interpolated variable $in at \t\t\t\t WHERE t.payment_id = %d AND a.employee_id IN ($in)\n
Sample message
error_log() found. Debug code should not normally be used in production.
Sample message
Unescaped parameter $appt used in $wpdb->get_var()
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
Sample message
Use of a direct database call is discouraged.
Sample message
Processing form data without nonce verification.
Sample message
Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "check_rtrb_booking_currency_support".
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: mkdir().
Sample message
Function "str_contains()" requires WordPress 5.9.0, but your plugin minimum supported version is WordPress 5.8.0.
Sample message
Processing form data without nonce verification.
Sample message
The %i modifier is only supported in WP 6.2 or higher. Found: "%i".
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$columns'.
Sample message
Attempting a database schema change is discouraged.
Sample message
Replacement variables found, but no valid placeholders found in the query.
Sample message
Detected usage of a non-sanitized input variable: $_GET['redirect_to']
Sample message
$_GET['redirect_to'] not unslashed before sanitization. Use wp_unslash() or similar
Sample message
unlink() is discouraged. Use wp_delete_file() to delete a file.
Sample message
Multiple placeholders in translatable strings should be ordered. Expected "%1$s, %2$s", but got "%s, %s" in 'Get upto %s OFF %s — Limited-time Early Bird offer.'.
Sample message
Your plugin has a different license declared in the readme file and plugin header. Please update your readme with a valid GPL license identifier.
Sample message
Plugin name "Radius Booking — Booking Calendar for Appointments, Services, Events & Meetings" is different from the name declared in plugin header "Radius Booking - Al-Powered Appointment & Service Booking".
Sample message
The "/vendor" directory using composer exists, but "composer.json" file is missing.
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
Potential connections found in static code analysis.
Outbound calls
167
External assets
0
Incoming endpoints
7
No external asset domains detected.
register_rest_route
wp_ajax
wp_ajax
wp_ajax
wp_ajax
wp_ajax
wp_ajax
First score snapshot
v1.0.19
36
Latest
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 36 | 193 | 17 | 176 | v1.0.19 | 2.1.0 |
Author, categories, issues, domains, and nearby plugins.