Advanced Import: One-Click Demo Import for WordPress

Unescaped parameter str_replace( '_', '\_', $wpdb->prefix ) ) ) used in $wpdb->get_col(sprintf( "SHOW TABLES LIKE '%s%%'", str_replace( '_', '\_', $wpdb->prefix ) ))

A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '__'.

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$user'.

Missing $domain parameter in function call to esc_html_e().

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$plugins'.

Missing $domain parameter in function call to esc_html__().

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '__'.

A function call to esc_html__() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found 'strtolower'.