| ERROR | PluginCheck.Security.DirectDB.UnescapedDBParameter | Unescaped parameter $query used in $wpdb->query($wpdb->prepare($query, $log_rows))\n$query assigned unsafely at line 273:\n $query = "DELETE FROM {$table_name} WHERE log_id IN ({$format})"\n$table_name assigned unsafely at line 267:\n $table_name = $this->logger->get_logger_table_name() | src/Views/Log_List_Table.php:275:11 | Security |
| ERROR | WordPress.WP.I18n.MissingArgDomain | Missing $domain parameter in function call to __(). | src/BackgroundProcess/Libs/WP_Background_Process.php:690:24 | General |
| ERROR | WordPress.WP.I18n.MissingArgDomain | Missing $domain parameter in function call to __(). | src/BackgroundProcess/Libs/WP_Background_Process.php:692:33 | General |
| ERROR | WordPress.WP.I18n.MissingTranslatorsComment | A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders. | src/BackgroundProcess/Libs/WP_Background_Process.php:692:33 | General |
| ERROR | WordPress.DateTime.RestrictedFunctions.date_date | date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead. | src/Main.php:246:17 | — |
| ERROR | WordPress.DB.PreparedSQL.NotPrepared | Use placeholders and $wpdb->prepare(); found $sql | src/Main.php:306:16 | Security |
| ERROR | WordPress.WP.I18n.NonSingularStringLiteralText | The $text parameter must be a single text string literal. Found: get_admin_page_title() | src/Main.php:362:34 | General |
| ERROR | WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedHooknameFound | Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "wposa_submitted_data". | src/Views/WPOSA.php:519:53 | Plugin Repo |
| ERROR | WordPress.Security.EscapeOutput.OutputNotEscaped | All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$html'. | src/Views/WPOSA.php:837:14 | Security |
| ERROR | WordPress.Security.EscapeOutput.OutputNotEscaped | All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found 'call_user_func'. | src/Views/WPOSA.php:993:43 | Security |