Plugin check #502
Annotations
10 errors and 10 warnings
|
includes/ui/tabs/diagnostics.php#L19
All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.
|
|
includes/ui/tabs/diagnostics.php#L21
Missing $domain parameter in function call to _e().
|
|
includes/ui/tabs/diagnostics.php#L21
All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.
|
|
includes/class-plugin.php#L830
Use of heredoc and nowdoc syntax ("<<<") is not allowed; use standard strings or inline HTML instead
|
|
includes/class-plugin.php#L854
Use of heredoc and nowdoc syntax ("<<<") is not allowed; use standard strings or inline HTML instead
|
|
includes/class-plugin.php#L1087
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '__'.
|
|
includes/class-plugin.php#L1087
The $text parameter must be a single text string literal. Found: $message
|
|
.gitignore#L1
Hidden files are not permitted.
|
|
includes/ui/settings.php#L101
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$this'.
|
|
includes/ui/widget.php#L37
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found 'network_admin_url'.
|
|
includes/class-plugin.php#L1079
Detected usage of a possibly undefined superglobal array index: $_POST['nonce']. Use isset() or empty() to check the index exists before using it
|
|
includes/class-plugin.php#L1079
$_POST['nonce'] not unslashed before sanitization. Use wp_unslash() or similar
|
|
includes/class-plugin.php#L1079
Detected usage of a non-sanitized input variable: $_POST['nonce']
|
|
includes/class-plugin.php#L1603
Processing form data without nonce verification.
|
|
includes/class-plugin.php#L1603
Processing form data without nonce verification.
|
|
includes/class-plugin.php#L1603
Processing form data without nonce verification.
|
|
.github/workflows/cluster/cluster.php#L3
The use of function ini_set() is discouraged
|
|
.github/workflows/cluster/cluster.php#L4
The use of function ini_set() is discouraged
|
|
.github/workflows/cluster/cluster.php#L6
error_reporting() can lead to full path disclosure.
|
|
.github/workflows/cluster/cluster.php#L39
var_dump() found. Debug code should not normally be used in production.
|
The logs for this run have expired and are no longer available.
Loading