Simple Like Page – Fast & Privacy-Friendly Page Embeds

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$after_title'.

Mismatched text domain. Expected 'simple-facebook-plugin' but got 'simple-like-page-plugin'.

Processing form data without nonce verification.

All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.

Missing $domain parameter in function call to _e().

$_POST['locale'] not unslashed before sanitization. Use wp_unslash() or similar

strip_tags() is discouraged. Use the more comprehensive wp_strip_all_tags() instead.

Processing form data without nonce verification.

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

Detected usage of a non-sanitized input variable: $_POST['locale']

Resource version not set in call to wp_register_style(). This means new versions of the style may not always be loaded due to browser caching.

A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.

Plugin name "Simple Like Page – Fast & Privacy-Friendly Page Embeds" is different from the name declared in plugin header "Simple Like Page".

Tested up to: 6.9 < 7.0. The "Tested up to" value in your plugin is not set to the current version of WordPress. This means your plugin will not show up in searches, as we require plugins to be compatible and documented as tested up to the most recent version of WordPress.

The "Text Domain" header in the plugin file does not match the slug. Found "simple-like-page-plugin", expected "simple-facebook-plugin".

The plugin slug includes a restricted term. Your plugin slug - "simple-facebook-plugin" - contains the restricted term "facebook" which cannot be used at all in your plugin slug.