| ERROR | WordPress.WP.I18n.NonSingularStringLiteralText | The $text parameter must be a single text string literal. Found: $title | templates/educare-default-search-form.php:121:76 | General |
| ERROR | WordPress.WP.I18n.NonSingularStringLiteralText | The $text parameter must be a single text string literal. Found: $menu_title | includes/admin/menu.php:67:16 | General |
| ERROR | PluginCheck.Security.DirectDB.UnescapedDBParameter | Unescaped parameter $query used in $wpdb->get_results($query)\n$query assigned unsafely at line 564:\n $query = $wpdb->prepare( "SELECT * FROM $table_name WHERE id = %d", $id )\n$table_name assigned unsafely at line 561:\n $table_name = $wpdb->prefix . 'educare_results'\n$table_name assigned unsafely at line 559:\n $table_name = $wpdb->prefix . 'educare_students'\n$id used without escaping. | includes/functions.php:565:28 | Security |
| ERROR | WordPress.DB.PreparedSQL.NotPrepared | Use placeholders and $wpdb->prepare(); found $query | includes/functions.php:565:40 | Security |
| ERROR | PluginCheck.Security.DirectDB.UnescapedDBParameter | Unescaped parameter $query used in $wpdb->get_results($query)\n$query assigned unsafely at line 626:\n $query = $wpdb->prepare( "SELECT * FROM $table WHERE list = %s", $list )\n$table assigned unsafely at line 621:\n $table = $wpdb->prefix."educare_settings"\n$list used without escaping. | includes/functions.php:629:20 | Security |
| ERROR | WordPress.DB.PreparedSQL.NotPrepared | Use placeholders and $wpdb->prepare(); found $query | includes/functions.php:629:32 | Security |
| ERROR | WordPress.Security.EscapeOutput.OutputNotEscaped | All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '__'. | includes/functions.php:858:89 | Security |
| ERROR | PluginCheck.Security.DirectDB.UnescapedDBParameter | Unescaped parameter $query used in $wpdb->get_results($query)\n$query assigned unsafely at line 954:\n $query = $wpdb->prepare( "SELECT * FROM $table WHERE list = %s", $data_for )\n$table assigned unsafely at line 953:\n $table = $wpdb->prefix."educare_settings"\n$data_for used without escaping. | includes/functions.php:955:20 | Security |
| ERROR | WordPress.DB.PreparedSQL.NotPrepared | Use placeholders and $wpdb->prepare(); found $query | includes/functions.php:955:32 | Security |
| ERROR | PluginCheck.Security.DirectDB.UnescapedDBParameter | Unescaped parameter $query used in $wpdb->get_results($query)\n$query assigned unsafely at line 1001:\n $query = $wpdb->prepare( "SELECT * FROM $table WHERE list = %s", $option_for )\n$table assigned unsafely at line 1000:\n $table = $wpdb->prefix."educare_settings"\n$option_for used without escaping. | includes/functions.php:1002:20 | Security |