WP Travel is the optimal choice among the WordPress Travel Booking Plugin and Tour Operator to Create Travel and Trekking Websites Without Coding!
Category Scores
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Maintainability
1,680
14 issue groups
Security
517
9 issue groups
I18n
95
2 issue groups
WARNINGMaintainabilityNon Prefixed Hookname FoundHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "'wp_travel_admin_pointers-' . $screen_id".628
- Category
- Maintainability
- Occurrences
- 628
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "'wp_travel_admin_pointers-' . $screen_id".
WARNINGMaintainabilityNon Prefixed Variable FoundGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$active_plugins".557
- Category
- Maintainability
- Occurrences
- 557
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$active_plugins".
WARNINGSecurityRecommendedProcessing form data without nonce verification.120
- Category
- Security
- Occurrences
- 120
- Severity
- warning
Sample message
Processing form data without nonce verification.
ERRORMaintainabilitymissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;118
- Category
- Maintainability
- Occurrences
- 118
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
ERRORSecurityOutput Not EscapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$best_destination_results[0]['total_bookings']'.103
- Category
- Security
- Occurrences
- 103
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$best_destination_results[0]['total_bookings']'.
WARNINGMaintainabilityNon Prefixed Class FoundClasses declared by a theme/plugin should start with the theme/plugin prefix. Found: "IPNListener".92
- Category
- Maintainability
- Occurrences
- 92
- Severity
- warning
Sample message
Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "IPNListener".
WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.84
- Category
- Maintainability
- Occurrences
- 84
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGSecurityMissingProcessing form data without nonce verification.83
- Category
- Security
- Occurrences
- 83
- Severity
- warning
Sample message
Processing form data without nonce verification.
ERRORI18nText Domain MismatchMismatched text domain. Expected 'wp-travel' but got 'textdomain'.79
- Category
- I18n
- Occurrences
- 79
- Severity
- error
Sample message
Mismatched text domain. Expected 'wp-travel' but got 'textdomain'.
WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().73
- Category
- Maintainability
- Occurrences
- 73
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
Show 15 more issue groups
WARNINGSecurityInput Not Sanitized71
- Category
- Security
- Occurrences
- 71
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_COOKIE['wptravel_view_mode']
WARNINGSecurityMissing Unslash61
- Category
- Security
- Occurrences
- 61
- Severity
- warning
Sample message
$_COOKIE['wptravel_view_mode'] not unslashed before sanitization. Use wp_unslash() or similar
WARNINGMaintainabilityNon Prefixed Function Found48
- Category
- Maintainability
- Occurrences
- 48
- Severity
- warning
Sample message
Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "add_trip_filter_to_itinerary_bookings".
WARNINGSecurityInput Not Validated39
- Category
- Security
- Occurrences
- 39
- Severity
- warning
Sample message
Detected usage of a possibly undefined superglobal array index: $_FILES['wp_travel_bank_deposit_slip']['name']. Check that the array index exists before using it.
ERRORMaintainabilitycurl curl setopt21
- Category
- Maintainability
- Occurrences
- 21
- Severity
- error
Sample message
Using cURL functions is highly discouraged. Use wp_remote_get() instead.
WARNINGSecurityInterpolated Not Prepared18
- Category
- Security
- Occurrences
- 18
- Severity
- warning
Sample message
Use placeholders and $wpdb->prepare(); found interpolated variable $end_date at \t\tAND booking_post.post_date BETWEEN '$start_date' AND '$end_date'\n
ERRORI18nMissing Translators Comment16
- Category
- I18n
- Occurrences
- 16
- Severity
- error
Sample message
A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.
ERRORSecurityUnsafe Printing Function15
- Category
- Security
- Occurrences
- 15
- Severity
- error
Sample message
All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.
ERRORMaintainabilitydate date14
- Category
- Maintainability
- Occurrences
- 14
- Severity
- error
Sample message
date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.
WARNINGMaintainabilityslow db query meta key10
- Category
- Maintainability
- Occurrences
- 10
- Severity
- warning
Sample message
Detected usage of meta_key, possible slow query.
WARNINGMaintainabilityDynamic Hookname Found10
- Category
- Maintainability
- Occurrences
- 10
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "$filter_name".
WARNINGMaintainabilityslow db query meta query9
- Category
- Maintainability
- Occurrences
- 9
- Severity
- warning
Sample message
Detected usage of meta_query, possible slow query.
WARNINGMaintainabilityslow db query tax query8
- Category
- Maintainability
- Occurrences
- 8
- Severity
- warning
Sample message
Detected usage of tax_query, possible slow query.
ERRORMaintainabilityunlink unlink8
- Category
- Maintainability
- Occurrences
- 8
- Severity
- error
Sample message
unlink() is discouraged. Use wp_delete_file() to delete a file.
WARNINGSecurityUnescaped DBParameter7
- Category
- Security
- Occurrences
- 7
- Severity
- warning
Sample message
Unescaped parameter $date_table used in $wpdb->get_results()\n$date_table assigned unsafely at line 171.
Score History
First score snapshot
Scan records1
v11.7.0
24
Latest
- Findings
- 2,389
- Errors
- 427
- Warnings
- 1,962
- Plugin Check
- 2.0.0
- Model
- 2026.06-mvp-static-v2
| Scan | Score | Findings | Errors | Warnings | Plugin | Plugin Check | Model |
|---|---|---|---|---|---|---|---|
| Latest | 24 | 2,389 | 427 | 1,962 | v11.7.0 | 2.0.0 | 2026.06-mvp-static-v2 |
Related Plugins
3k+ active installs
4k+ active installs
20k+ active installs