Defender Security – Malware Scanner, Login Security & Firewall

Namespaces declared by a theme/plugin should start with the theme/plugin prefix. Found: "WP_Defender".

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"Circular dependency detected while trying to resolve entry '$entryName': Dependencies: "'.

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "'wd_2fa_init_provider_' . $slug".

Mismatched text domain. Expected 'defender-security' but got 'plugin-cross-sell-textdomain'.

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$_tests_dir".

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

var_export() found. Debug code should not normally be used in production.

Use placeholders and $wpdb->prepare(); found interpolated variable $column at \t\t\t\tSET `$column` = '$option_key',\n

Unescaped parameter $placeholders used in $wpdb->query()\n$placeholders used without escaping.

Use of a direct database call is discouraged.

Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().

Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "DONOTCACHEPAGE".

Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "get_public_suffix".

File and folder names must not contain spaces or special characters.

Attempting a database schema change is discouraged.

Plugin folders are deleted when upgraded. Do not save data to the plugin folder using file_put_contents(). Detected usage of constant WPINC. Use wp_upload_dir() to get the uploads directory path or save to the database instead.

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"Could not find $_tests_dir/includes/functions.php, have you run bin/install-wp-tests.sh ?"'.

Use of heredoc syntax (<<<) is not allowed; use standard strings or inline HTML instead

Writing files using ABSPATH may be problematic. Consider using wp_upload_dir() instead if storing user data or generated files.

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: &quot;$filter_name&quot;.

Unescaped parameter $column used in $wpdb->query()\n$column assigned unsafely at line 154.

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: chmod().

unlink() is discouraged. Use wp_delete_file() to delete a file.

Detected usage of a non-sanitized input variable: $_ENV[$variableName]

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fread().