VikAppointments Services Booking Calendar

A reliable tool for managing any kind of appointments, scheduling the bookings of various services, and organizing the calendars of several employees.

v1.2.19e4jvikwpUpdated Added 500 installs100% rating
25
Score
9,753
Errors
5,207
Warnings
+0
Change

Category Scores

Security0
Repo100
Performance100
Maintainability0

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

14,960 findings

Security

8,983

5 issue groups

Maintainability

5,410

16 issue groups

I18n

426

4 issue groups

ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"<link href=\"{$href}\" {$relType}=\"$relation\" "'.8,598
Category
Security
Occurrences
8,598
Severity
error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"<link href=\"{$href}\" {$relType}=\"$relation\" "'.

WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: &quot;$COMMENT_DESC_LENGTH&quot;.4,193
Category
Maintainability
Occurrences
4,193
Severity
warning

Sample message

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: &quot;$COMMENT_DESC_LENGTH&quot;.

WARNINGMaintainabilityNon-prefixed classClasses declared by a theme/plugin should start with the theme/plugin prefix. Found: &quot;AliasHelper&quot;.640
Category
Maintainability
Occurrences
640
Severity
warning

Sample message

Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: &quot;AliasHelper&quot;.

ERRORSecurityException output is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"Config {$class} not found!"'.259
Category
Security
Occurrences
259
Severity
error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"Config {$class} not found!"'.

ERRORI18nMissing Translators CommentA function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.224
Category
I18n
Occurrences
224
Severity
error

Sample message

A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.

WARNINGMaintainabilityNon-prefixed constantGlobal constants defined by a theme/plugin should start with the theme/plugin prefix. Found: &quot;CF_EXCLUDE_FILE&quot;.172
Category
Maintainability
Occurrences
172
Severity
warning

Sample message

Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: &quot;CF_EXCLUDE_FILE&quot;.

ERRORI18nMissing Arg DomainMissing $domain parameter in function call to __().160
Category
I18n
Occurrences
160
Severity
error

Sample message

Missing $domain parameter in function call to __().

ERRORSecurityUnsafe printing functionAll output should be run through an escaping function (like echo esc_html_x() or echo esc_attr_x()), found '_ex'.74
Category
Security
Occurrences
74
Severity
error

Sample message

All output should be run through an escaping function (like echo esc_html_x() or echo esc_attr_x()), found '_ex'.

ERRORMaintainabilityNot AllowedUse of heredoc syntax (<<<) is not allowed; use standard strings or inline HTML instead62
Category
Maintainability
Occurrences
62
Severity
error

Sample message

Use of heredoc syntax (<<<) is not allowed; use standard strings or inline HTML instead

ERRORMaintainabilityfile system operations fcloseFile operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fclose().57
Category
Maintainability
Occurrences
57
Severity
error

Sample message

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fclose().

Show 15 more
ERRORMaintainabilitydate date42
Category
Maintainability
Occurrences
42
Severity
error

Sample message

date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.

ERRORMaintainabilityunlink unlink37
Category
Maintainability
Occurrences
37
Severity
error

Sample message

unlink() is discouraged. Use wp_delete_file() to delete a file.

WARNINGMaintainabilityNon-prefixed hook name31
Category
Maintainability
Occurrences
31
Severity
warning

Sample message

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: &quot;&#039;get_supported_payments_&#039; . $plugin&quot;.

WARNINGMaintainabilityDynamic hook name30
Category
Maintainability
Occurrences
30
Severity
warning

Sample message

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: &quot;$bc&quot;.

ERRORMaintainabilityfile system operations fread27
Category
Maintainability
Occurrences
27
Severity
error

Sample message

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fread().

WARNINGSecurityInput is not sanitized26
Category
Security
Occurrences
26
Severity
warning

Sample message

Detected usage of a non-sanitized input variable: $_SERVER[&#039;DOCUMENT_ROOT&#039;]

WARNINGSecurityRequest data is not unslashed26
Category
Security
Occurrences
26
Severity
warning

Sample message

$_SERVER[&#039;DOCUMENT_ROOT&#039;] not unslashed before sanitization. Use wp_unslash() or similar

ERRORI18nUnordered Placeholders Text26
Category
I18n
Occurrences
26
Severity
error

Sample message

Multiple placeholders in translatable strings should be ordered. Expected "%1$d, %2$d", but got "%d, %d" in '%d/%d redeemed packages'.

ERRORMaintainabilitystrip tags strip tags24
Category
Maintainability
Occurrences
24
Severity
error

Sample message

strip_tags() is discouraged. Use the more comprehensive wp_strip_all_tags() instead.

ERRORMaintainabilitycurl curl setopt23
Category
Maintainability
Occurrences
23
Severity
error

Sample message

Using cURL functions is highly discouraged. Use wp_remote_get() instead.

ERRORMaintainabilityfile system operations fopen22
Category
Maintainability
Occurrences
22
Severity
error

Sample message

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fopen().

ERRORMaintainabilityMissing direct file access protection20
Category
Maintainability
Occurrences
20
Severity
error

Sample message

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

WARNINGMaintainabilityerror log print r16
Category
Maintainability
Occurrences
16
Severity
warning

Sample message

print_r() found. Debug code should not normally be used in production.

WARNINGI18nNo Html Wrapped Strings16
Category
I18n
Occurrences
16
Severity
warning

Sample message

Translatable string should not be wrapped in HTML. Found: &#039;&lt;p&gt;Before to proceed you should complete all the following steps first.&lt;/p&gt;&#039;

WARNINGMaintainabilityNon-prefixed interface14
Category
Maintainability
Occurrences
14
Severity
warning

Sample message

Interfaces declared by a theme/plugin should start with the theme/plugin prefix. Found: &quot;JLanguageHandler&quot;.

External Connections

Potential connections found in static code analysis.

3 domains

Outbound calls

300

External assets

0

Incoming endpoints

0

Notable Domains

vikwp.com149 · outbound

Platform / Reference Domains

gnu.org149 · platform/reference

External Asset Domains

No external asset domains detected.

Incoming Endpoints

No public endpoints detected.

Score History

First score snapshot

v1.2.19

25

Latest

Findings
14,960
Errors
9,753
Warnings
5,207
Check
2.0.0

Relationship Map

Author, categories, issues, domains, and nearby plugins.

31 nodes

Related Plugins