Form Vibes – Database Manager for Forms

Mismatched text domain. Expected 'form-vibes' but got 'wpv-fv'.

$_GET['fv_nonce'] not unslashed before sanitization. Use wp_unslash() or similar

Use of a direct database call is discouraged.

Detected usage of a possibly undefined superglobal array index: $_POST['ajaxNonce']. Check that the array index exists before using it.

Detected usage of a non-sanitized input variable: $_GET['fv_nonce']

Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().

Use placeholders and $wpdb->prepare(); found interpolated variable $idsPlaceholder at "Delete from {$wpdb->prefix}fv_enteries where id IN ( $idsPlaceholder )"

date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.

Use placeholders and $wpdb->prepare(); found $data_query

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "fv_after_entry_meta_failed".

Unescaped parameter $data_query used in $wpdb->get_results()\n$data_query assigned unsafely at line 164.

Unescaped parameter $data_query used in $wpdb->get_results()\n$data_query assigned unsafely at line 125.

Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "WPV_FV_MIN_VERSION".

Complex placeholders used for values in the query string in $wpdb->prepare() will NOT be quoted automagically. Found: %1s.

Scripts must be registered/enqueued via wp_enqueue_script()

Detected usage of meta_key, possible slow query.

Detected usage of meta_value, possible slow query.

Detected usage of meta_query, possible slow query.

Simple placeholders should not be quoted in the query string in $wpdb->prepare(). Found: '%s'.

load_plugin_textdomain() has been discouraged since WordPress version 4.6. When your plugin is hosted on WordPress.org, you no longer need to manually include this function call for translations under your plugin slug. WordPress will automatically load the translations for you as needed.

SQL wildcards for a LIKE query should be passed in through a replacement parameter. Found: LIKE '%%'.

Processing form data without nonce verification.

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fclose().

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fwrite().

Plugin name "Form Vibes - Database Manager for Forms" is different from the name declared in plugin header "Form Vibes".