Enhance WPForms with a secure file upload field, allowing users to upload files directly through forms.
| Code | Message | Location | Category | |
|---|---|---|---|---|
| ERROR | WordPress.DateTime.RestrictedFunctions.date_date | date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead. | 74:34 | — |
| ERROR | WordPress.WP.I18n.MissingTranslatorsComment | A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders. | 87:9 | General |
| ERROR | WordPress.Security.EscapeOutput.OutputNotEscaped | All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '__'. | 87:9 | Security |
| ERROR | WordPress.Security.EscapeOutput.OutputNotEscaped | All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found 'add_query_arg'. | 90:9 | Security |
| ERROR | five_star_reviews_detected | Linking directly to 5 stars reviews is not allowed. | 91:14 | Plugin Repo |
| ERROR | WordPress.Security.EscapeOutput.OutputNotEscaped | All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found 'wpforms_html_attributes'. | 300:13 | Security |
| ERROR | WordPress.Security.EscapeOutput.OutputNotEscaped | All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$this'. | 142:30 | Security |
| ERROR | readme_mismatched_header_requires | Mismatched Requires at least: 5.6 != 6.6. "Requires at least" needs to be exactly the same with that in your main plugin file's header. | — | Plugin Repo |
| ERROR | WordPress.DateTime.RestrictedFunctions.date_date | date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead. | 69:25 | — |
| WARNING | WordPress.Security.ValidatedSanitizedInput.MissingUnslash | $_SERVER['HTTP_HOST'] not unslashed before sanitization. Use wp_unslash() or similar | 151:11 | Security |
| 16.11.2025, 00:24:00 | 10s | 93 | 9 | 16 |