Shipping for Nova Poshta

Using cURL functions is highly discouraged. Use wp_remote_get() instead.

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$order_id'.

Unescaped parameter $resultstring used in $wpdb->get_var($resultstring)\n$resultstring assigned unsafely at line 1530:\n $resultstring = "SELECT `invoice_ref` FROM {$wpdb->prefix}novaposhta_ttn_invoices WHERE `order_id` = '{$order_id}'"\n$order_id assigned unsafely at line 1522:\n $order_id = $_POST['order_id']\n$_POST['order_id'] used without escaping.

Use placeholders and $wpdb->prepare(); found $resultstring

Unescaped parameter $order_id used in $wpdb->get_results("SELECT * FROM {$wpdb->prefix}novaposhta_ttn_invoices WHERE order_id = '$order_id'")\n$order_id assigned unsafely at line 1652:\n $order_id = $order->get_id()\n$order used without escaping.

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$meta_ttn'.

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$meta_ttn'.

Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "WC_NovaPoshta_Shipping_Method_Poshtomat".

The $domain parameter must be a single text string literal. Found: NOVA_POSHTA_TTN_DOMAIN

The $domain parameter must be a single text string literal. Found: NOVA_POSHTA_TTN_DOMAIN