Simple, easy, fast and flexible, this add-on to WP All Import processes large data sets from any XML or CSV files to any contents.
| Code | Message | Location | Category | |
|---|---|---|---|---|
| ERROR | PluginCheck.Security.DirectDB.UnescapedDBParameter | Unescaped parameter $my_pod->ID used in $wpdb->get_results("\n\t\t\t\tSELECT post_name, post_title, post_content \n\t\t\t\tFROM ". $table_prefix ."posts\n\t\t\t\tWHERE post_type = '_pods_field'\n\t\t\t\t AND post_parent=" . $my_pod->ID)\n$my_pod->ID used without escaping. | 48:26 | Security |
| ERROR | WordPress.WP.I18n.NonSingularStringLiteralText | The $text parameter must be a single text string literal. Found: $field_params['name'] | 538:71 | General |
| ERROR | WordPress.WP.I18n.TextDomainMismatch | Mismatched text domain. Expected 'custom-fields-csv-xml-importer' but got 'wp_all_import_plugin'. | 538:94 | General |
| ERROR | WordPress.DB.PreparedSQL.NotPrepared | Use placeholders and $wpdb->prepare(); found $table_prefix | 50:13 | Security |
| ERROR | WordPress.DB.PreparedSQL.NotPrepared | Use placeholders and $wpdb->prepare(); found $my_pod | 52:26 | Security |
| ERROR | WordPress.DB.PreparedSQL.NotPrepared | Use placeholders and $wpdb->prepare(); found ID | 52:35 | Security |
| ERROR | outdated_tested_upto_header | Tested up to: 4.9 < 6.8. The "Tested up to" value in your plugin is not set to the current version of WordPress. This means your plugin will not show up in searches, as we require plugins to be compatible and documented as tested up to the most recent version of WordPress. | — | Plugin Repo |
| ERROR | WordPress.Security.EscapeOutput.OutputNotEscaped | All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$field_params['tooltip']'. | 538:229 | Security |
| ERROR | WordPress.Security.EscapeOutput.OutputNotEscaped | All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$field_params['name']'. | 543:26 | Security |
| ERROR | WordPress.Security.EscapeOutput.OutputNotEscaped | All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$field_params['name']'. | 546:63 | Security |
| 16.11.2025, 07:20:06 | 12s | 91 | 21 | 8 |