Cyr to Lat reloaded – transliteration of links and file names

Simple placeholders should not be quoted in the query string in $wpdb->prepare(). Found: '%s'.

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found 'str_replace'.

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$this'.

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$this'.

Mismatched text domain. Expected 'cyr-and-lat' but got 'cyr-to-lat-reloaded'.

Short PHP opening tag used with echo; expected "<?php echo esc_url ..." but found "<?= esc_url ..."

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$this'.

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$this'.

A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '__'.