MainWP Child – Securely Connects to the MainWP Dashboard to Manage Multiple Sites

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "active_plugins".

Processing form data without nonce verification.

Use placeholders and $wpdb->prepare(); found interpolated variable $_select at "SELECT $_select FROM $gpi_page_stats WHERE ( $reports_typestocheck[0] ) AND $nullcheck"

Detected usage of a non-sanitized input variable: $_POST['f']

Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "BACKWPUP_INITIALIZED".

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$bulk_settings_managercurrent_time".

Processing form data without nonce verification.

Incorrect number of replacements passed to $wpdb->prepare(). Found 1 replacement parameters, expected 2.

The use of function set_time_limit() is discouraged

Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "add_screen_option".

$_POST['mainwpver'] not unslashed before sanitization. Use wp_unslash() or similar

The plugin name includes a restricted term. Your chosen plugin name - "MainWP Child - Securely Connects to the MainWP Dashboard to Manage Multiple Sites" - contains the restricted term "wp" which cannot be used at all in your plugin name.

Replacement variables found, but no valid placeholders found in the query.

Plugin Updater detected. Detected code which may be altering WordPress update routines. Detected: _site_transient_update_themes

Function "wp_autoload_values_to_autoload()" requires WordPress 6.6.0, but your plugin minimum supported version is WordPress 6.2.0.

Writing files using ABSPATH may be problematic. Consider using wp_upload_dir() instead if storing user data or generated files.

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "$hook_name".

Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "PslTrie".

seems_utf8() has been deprecated since WordPress version 6.9.0. Use wp_is_valid_utf8() instead.

Using exclusionary parameters, like exclude, in calls to get_posts() should be done with caution, see https://wpvip.com/documentation/performance-improvements-by-removing-usage-of-post__not_in/ for more information.

Plugin name "MainWP Child - Securely Connects to the MainWP Dashboard to Manage Multiple Sites" is different from the name declared in plugin header "MainWP Child".

Plugin Updater detected. These are not permitted in WordPress.org hosted plugins. Detected: site_transient_update_plugins