| ERROR | WordPress.DB.PreparedSQL.NotPrepared | Use placeholders and $wpdb->prepare(); found BuilderiusTemplatePostType | src/Bundle/TemplateBundle/Migrations/v1_0_6/BuilderiusTemplateLocationConditionsMigration.php:17:67 | Security |
| ERROR | WordPress.DB.PreparedSQL.NotPrepared | Use placeholders and $wpdb->prepare(); found POST_TYPE | src/Bundle/TemplateBundle/Migrations/v1_0_6/BuilderiusTemplateLocationConditionsMigration.php:17:95 | Security |
| ERROR | WordPress.WP.AlternativeFunctions.file_system_operations_chmod | File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: chmod(). | src/Bundle/TemplateBundle/EventListener/TemplateProdCssAssetsCreationListener.php:52:26 | Plugin Repo |
| ERROR | Squiz.PHP.Heredoc.NotAllowed | Use of heredoc and nowdoc syntax ("<<<") is not allowed; use standard strings or inline HTML instead | src/Bundle/TemplateBundle/EventListener/InitialCommitForNewTemplatePostCreationEventListener.php:140:57 | — |
| ERROR | WordPress.WP.AlternativeFunctions.file_system_operations_chmod | File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: chmod(). | src/Bundle/TemplateBundle/EventListener/TemplateDevCssAssetsCreationListener.php:80:42 | Plugin Repo |
| ERROR | WordPress.Security.EscapeOutput.OutputNotEscaped | All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$this'. | src/Bundle/ThemeBundle/Hook/ThemeTemplateChangingForBuilderInnerPreviewHook.php:198:30 | Security |
| ERROR | WordPress.WP.I18n.NonSingularStringLiteralText | The $text parameter must be a single text string literal. Found: $this->get(self::LABEL_FIELD) | src/Bundle/TemplateBundle/Location/BuilderiusTemplateLocation.php:63:19 | General |
| ERROR | WordPress.Security.EscapeOutput.OutputNotEscaped | All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found 'file_get_contents'. | src/Bundle/ImportExportBundle/Ajax/BuilderiusCompositeModulesExportAjaxRequestHandler.php:132:14 | Security |
| ERROR | WordPress.Security.EscapeOutput.OutputNotEscaped | All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$content'. | src/Bundle/BuilderBundle/Registration/BuilderiusInnerFrameShortcodesScriptLocalization.php:364:110 | Security |
| ERROR | WordPress.Security.EscapeOutput.OutputNotEscaped | All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found 'wp_auth_check_html'. | src/Bundle/BuilderBundle/Hook/WpAuthCheckHtmlHook.php:14:14 | Security |