| ERROR | WordPress.Security.EscapeOutput.OutputNotEscaped | All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$custom_scripts'. | cp_contactformpp_public_int.inc.php:8:46 | Security |
| ERROR | WordPress.DB.PreparedSQL.NotPrepared | Use placeholders and $wpdb->prepare(); found CP_CONTACTFORMPP_FORMS_TABLE | cp_contactformpp_admin_int_message_list.inc.php:82:66 | Security |
| ERROR | WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedVariableFound | Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$current_page". | cp_contactformpp_admin_int_message_list.inc.php:86:5 | Plugin Repo |
| ERROR | WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedVariableFound | Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$current_page". | cp_contactformpp_admin_int_message_list.inc.php:88:5 | Plugin Repo |
| ERROR | WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedVariableFound | Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$cond". | cp_contactformpp_admin_int_message_list.inc.php:90:1 | Plugin Repo |
| ERROR | WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedVariableFound | Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$cond". | cp_contactformpp_admin_int_message_list.inc.php:91:56 | Plugin Repo |
| ERROR | WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedFunctionFound | Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "cp_contactformpp_cleanJSON". | cp_contactformpp_functions.php:518:1 | Plugin Repo |
| ERROR | WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedFunctionFound | Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "cp_contact_form_paypal_check_init_actions". | cp_contactformpp_functions.php:537:1 | Plugin Repo |
| ERROR | WordPress.Security.EscapeOutput.OutputNotEscaped | All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$id'. | cp_contactformpp_public_int.inc.php:10:603 | Security |
| ERROR | WordPress.DB.PreparedSQL.NotPrepared | Use placeholders and $wpdb->prepare(); found CP_CONTACTFORMPP_POSTS_TABLE_NAME | cp_contactformpp_functions.php:950:32 | Security |