| Code | Message | Location | Category | |
|---|---|---|---|---|
| ERROR | plugin_header_no_license | Missing "License" in Plugin Header. Please update your Plugin Header with a valid GPLv2 (or later) compatible license. | — | Plugin Repo |
| ERROR | WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedFunctionFound | Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "register_search_and_replace_menu". | 27:1 | Plugin Repo |
| ERROR | WordPress.DB.PreparedSQL.NotPrepared | Use placeholders and $wpdb->prepare(); found $where_query | 131:16 | Security |
| ERROR | PluginCheck.Security.DirectDB.UnescapedDBParameter | Unescaped parameter $query used in $wpdb->query($query)\n$query assigned unsafely at line 121:\n $query = $wpdb->prepare( \r\n\r\n\t\t\t\t\t\t"UPDATE ".$wpdb->posts."\r\n\r\n\t\t\t\t\t\t SET post_excerpt = REPLACE(post_excerpt, %s, %s),\r\n\r\n\t\t\t\t\t\t post_content = REPLACE(post_content, %s, %s),\r\n\r\n\t\t\t\t\t\t post_title = REPLACE(post_title, %s, %s)\r\n\r\n\t\t\t\t\t\t WHERE ".$where_query,\r\n\r\n\t\t\t\t\t $search, $replace, $search, $replace, $search, $replace\r\n\r\n\t\t\t\t)\n$where_query assigned unsafely at line 111:\n $where_query = implode(' OR ', $where)\n$where assigned unsafely at line 93:\n $where[] = "post_type = 'page'"\n$where assigned unsafely at line 89:\n $where[] = "post_type = 'post'"\n$_POST['page'] used without escaping. | 139:19 | Security |
| ERROR | WordPress.DB.PreparedSQL.NotPrepared | Use placeholders and $wpdb->prepare(); found $query | 141:6 | Security |
| ERROR | WordPress.WP.I18n.MissingTranslatorsComment | A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders. | 147:91 | General |
| ERROR | WordPress.WP.DeprecatedParameters.Load_plugin_textdomainParam2Found | The parameter "FALSE" at position #2 of load_plugin_textdomain() has been deprecated since WordPress version 2.7.0. Use "" instead. | 175:5 | Plugin Repo |
| WARNING | WordPress.Security.ValidatedSanitizedInput.InputNotSanitized | Detected usage of a non-sanitized input variable: $_POST['r'] | 117:34 | Security |
| WARNING | WordPress.DB.DirectDatabaseQuery.DirectQuery | Use of a direct database call is discouraged. | 139:24 | Security |
| WARNING | WordPress.DB.DirectDatabaseQuery.NoCaching | Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete(). | 139:24 | Security |
| 11/13/2025, 6:12:39 PM | 8s | 96 | 7 | 8 |