Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots

Use of a direct database call is discouraged.

Use placeholders and $wpdb->prepare(); found $activity_sql

Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().

Use placeholders and $wpdb->prepare(); found interpolated variable $base at "$base AND {$wpdb->posts}.post_type = %s ORDER BY meta_key ASC LIMIT %d"

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"Since $package $version: "'.

Unescaped parameter $bulk_jobs_table used in $wpdb->get_row()\n$bulk_jobs_table assigned unsafely at line 133.

Unescaped parameter $ai_usage_table used in $wpdb->get_col()\n$ai_usage_table assigned unsafely at line 1948.

A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"$name not found on class"'.

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "after_wcfm_bpbm_messages".

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$__composer_autoload_files".

$_GET['bm-unsubscribe'] not unslashed before sanitization. Use wp_unslash() or similar

Processing form data without nonce verification.

unlink() is discouraged. Use wp_delete_file() to delete a file.

Detected usage of a non-sanitized input variable: $_GET['plugin']

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

Function "wp_register_ability()" requires WordPress 6.9.0, but your plugin minimum supported version is WordPress 5.9.0.

parse_url() is discouraged because of inconsistency in the output across PHP versions; use wp_parse_url() instead.

The use of function ini_set() is discouraged

Incorrect number of replacements passed to $wpdb->prepare(). Found 1 replacement parameters, expected 2.

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fclose().

All output should be run through an escaping function (like echo esc_html_x() or echo esc_attr_x()), found '_ex'.

Writing files using ABSPATH may be problematic. Consider using wp_upload_dir() instead if storing user data or generated files.

Processing form data without nonce verification.

Attempting a database schema change is discouraged.