BuddyPress Profile Completion Plugin allows site admins to force BuddyPress site members to fill all required profile fields, upload profile photo and …
| Code | Message | Location | Category | |
|---|---|---|---|---|
| ERROR | WordPress.Security.EscapeOutput.OutputNotEscaped | All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$class'. | 63:68 | Security |
| ERROR | WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedHooknameFound | Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "buddypress_profile_completion_has_uploaded_avatar". | 325:31 | Plugin Repo |
| ERROR | WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedHooknameFound | Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "buddypress_profile_completion_has_uploaded_cover". | 342:31 | Plugin Repo |
| ERROR | PluginCheck.Security.DirectDB.UnescapedDBParameter | Unescaped parameter $query used in $wpdb->get_results($query)\n$query assigned unsafely at line 374:\n $query = $wpdb->prepare( "SELECT field_id, value FROM {$table} WHERE user_id = %d AND field_id IN {$fields_list} GROUP BY field_id", $user_id )\n$table assigned unsafely at line 355:\n $table = buddypress()->profile->table_name_data\n$fields_list assigned unsafely at line 372:\n $fields_list = '(' . join( ',', $required_fields ) . ')'\n$required_fields assigned unsafely at line 363:\n $required_fields = self::get_all_required_profile_fields( $user_id )\n$user_id used without escaping. | 376:29 | Security |
| ERROR | WordPress.DB.PreparedSQL.NotPrepared | Use placeholders and $wpdb->prepare(); found $query | 376:42 | Security |
| ERROR | WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedHooknameFound | Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "buddypress_profile_completion_has_required_fields_complete". | 399:31 | Plugin Repo |
| ERROR | PluginCheck.Security.DirectDB.UnescapedDBParameter | Unescaped parameter $query used in $wpdb->get_results($query)\n$query assigned unsafely at line 414:\n $query = $wpdb->prepare( "SELECT * FROM {$table} WHERE is_required = %d", 1 )\n$table assigned unsafely at line 412:\n $table = buddypress()->profile->table_name_fields | 416:20 | Security |
| ERROR | WordPress.DB.PreparedSQL.NotPrepared | Use placeholders and $wpdb->prepare(); found $query | 416:33 | Security |
| ERROR | WordPress.Security.EscapeOutput.OutputNotEscaped | All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$size'. | 36:38 | Security |
| ERROR | WordPress.Security.EscapeOutput.OutputNotEscaped | All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$desc'. | 131:30 | Security |
| 16.11.2025, 01:14:57 | 12s | 87 | 36 | 19 |