Advance Custom HTML lets you write and display HTML, CSS, PHP, and other code snippets on WordPress with live preview and syntax highlighting.
| Code | Message | Location | Category | |
|---|---|---|---|---|
| ERROR | WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedVariableFound | Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$HTML". | build/render.php:3:1 | Plugin Repo |
| ERROR | WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedVariableFound | Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$isRenderViaIframe". | build/render.php:4:1 | Plugin Repo |
| ERROR | WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedVariableFound | Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$isDisplayCodeToFrontend". | build/render.php:5:1 | Plugin Repo |
| ERROR | WordPress.Security.EscapeOutput.OutputNotEscaped | All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found 'get_block_wrapper_attributes'. | build/render.php:9:21 | Security |
| ERROR | WordPress.Security.EscapeOutput.OutputNotEscaped | All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$HTML'. | build/render.php:11:10 | Security |
| ERROR | WordPress.Security.EscapeOutput.OutputNotEscaped | All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found 'get_block_wrapper_attributes'. | build/render.php:17:17 | Security |
| WARNING | textdomain_mismatch | The "Text Domain" header in the plugin file does not match the slug. Found "custom-html", expected "advance-custom-html". | advance-custom-html.php | Plugin Repo |
| WARNING | WordPress.Security.ValidatedSanitizedInput.MissingUnslash | $_POST['_wpnonce'] not unslashed before sanitization. Use wp_unslash() or similar | advance-custom-html.php:86:22 | Security |
| WARNING | WordPress.Security.ValidatedSanitizedInput.InputNotSanitized | Detected usage of a non-sanitized input variable: $_POST['_wpnonce'] | advance-custom-html.php:86:22 | Security |
| WARNING | WordPress.WP.EnqueuedResourceParameters.NotInFooter | In footer ($in_footer) is not set explicitly wp_enqueue_script; It is recommended to load scripts in the footer. Please set this value to `true` to load it in the footer, or explicitly `false` if it should be loaded in the header. | includes/AdminMenu.php:39:9 | Performance |
| 25.11.2025, 10:03:22 | 8s | 97 | 6 | 5 |
| 17.11.2025, 11:58:43 | 10s | 97 | 6 | 5 |
| 13.11.2025, 15:30:55 | 10s | 97 | 6 | 5 |