| ERROR | WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedVariableFound | Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$php". | includes/migrations/v303.php:33:5 | Plugin Repo |
| ERROR | WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedVariableFound | Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$exists". | includes/migrations/v300.php:11:1 | Plugin Repo |
| ERROR | WordPress.WP.EnqueuedResources.NonEnqueuedScript | Scripts must be registered/enqueued via wp_enqueue_script() | includes/views/captcha_invisible.php:10:1 | Performance |
| ERROR | WordPress.Security.EscapeOutput.OutputNotEscaped | All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$id'. | includes/views/captcha_invisible.php:17:45 | Security |
| ERROR | PluginCheck.Security.DirectDB.UnescapedDBParameter | Unescaped parameter $prefix used in $wpdb->get_var("SELECT COUNT(*) FROM " . $prefix . "options WHERE option_name = 'webarx_api_token'")\n$prefix used without escaping. | includes/migrations/v300.php:11:18 | Security |
| ERROR | WordPress.DB.PreparedSQL.NotPrepared | Use placeholders and $wpdb->prepare(); found $prefix | includes/migrations/v300.php:11:53 | Security |
| ERROR | WordPress.Security.EscapeOutput.OutputNotEscaped | All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$id'. | includes/views/captcha_invisible.php:21:37 | Security |
| ERROR | WordPress.DateTime.RestrictedFunctions.date_date | date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead. | lib/patchstack/src/Extensions/WordPress/Extension.php:117:48 | — |
| ERROR | WordPress.WP.EnqueuedResources.NonEnqueuedScript | Scripts must be registered/enqueued via wp_enqueue_script() | includes/views/captcha_v3.php:10:1 | Performance |
| ERROR | PluginCheck.Security.DirectDB.UnescapedDBParameter | Unescaped parameter $prefix used in $wpdb->query('INSERT IGNORE INTO ' . $prefix . "options (option_name, option_value, autoload) SELECT REPLACE(option_name, 'webarx_', 'patchstack_') as option_name, option_value, autoload FROM " . $prefix . "options WHERE option_name like 'webarx_%'")\n$prefix used without escaping. | includes/migrations/v300.php:13:9 | Security |