All-in-One Sticky Anything – Fixed Widget, Sticky Header, Menu, Sidebar, Social Icons & Cookie Consent

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$css'.

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$css_vars'.

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$css_vars'.

load_plugin_textdomain() has been discouraged since WordPress version 4.6. When your plugin is hosted on WordPress.org, you no longer need to manually include this function call for translations under your plugin slug. WordPress will automatically load the translations for you as needed.

Detected usage of a non-sanitized input variable: $_POST['data']

Detected usage of a possibly undefined superglobal array index: $_POST['data']. Use isset() or empty() to check the index exists before using it

The plugin slug includes a restricted term. Your plugin slug - "all-in-one-wp-sticky-anything" - contains the restricted term "wp" which can be used within the plugin slug, as long as you don't use the full name in the plugin name. For example: You can use WP but not WordPress.