| ERROR | WordPress.DB.PreparedSQL.NotPrepared | Use placeholders and $wpdb->prepare(); found $sql | src/Main.php:306:16 | Security |
| ERROR | PluginCheck.Security.DirectDB.UnescapedDBParameter | Unescaped parameter $query used in $wpdb->query($wpdb->prepare($query, $log_rows))\n$query assigned unsafely at line 273:\n $query = "DELETE FROM {$table_name} WHERE log_id IN ({$format})"\n$table_name assigned unsafely at line 267:\n $table_name = $this->logger->get_logger_table_name() | src/Views/Log_List_Table.php:275:11 | Security |
| ERROR | WordPress.WP.I18n.NonSingularStringLiteralText | The $text parameter must be a single text string literal. Found: get_admin_page_title() | src/Main.php:362:34 | General |
| ERROR | WordPress.WP.I18n.MissingTranslatorsComment | A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders. | src/BackgroundProcess/Libs/WP_Background_Process.php:692:33 | General |
| ERROR | WordPress.DB.PreparedSQL.NotPrepared | Use placeholders and $wpdb->prepare(); found $query | src/Views/Log_List_Table.php:276:20 | Security |
| ERROR | WordPress.Security.EscapeOutput.OutputNotEscaped | All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$html'. | src/Views/WPOSA.php:837:14 | Security |
| ERROR | WordPress.Security.EscapeOutput.OutputNotEscaped | All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found 'call_user_func'. | src/Views/WPOSA.php:993:43 | Security |
| ERROR | PluginCheck.Security.DirectDB.UnescapedDBParameter | Unescaped parameter $tables used in $wpdb->query($tables)\n$tables used without escaping. | uninstall.php:18:10 | Security |
| ERROR | WordPress.DB.PreparedSQL.NotPrepared | Use placeholders and $wpdb->prepare(); found $tables | uninstall.php:18:16 | Security |
| ERROR | WordPress.Security.EscapeOutput.OutputNotEscaped | All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$args['desc']'. | src/Views/WPOSA.php:993:75 | Security |