The highly customizable lightbox for WordPress
| Code | Message | Location | Category | |
|---|---|---|---|---|
| ERROR | WordPress.Security.EscapeOutput.OutputNotEscaped | All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$this'. | 1032:18 | Security |
| ERROR | WordPress.Security.EscapeOutput.OutputNotEscaped | All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '__'. | 45:21 | Security |
| ERROR | PluginCheck.Security.DirectDB.UnescapedDBParameter | Unescaped parameter $q used in $wpdb->get_results($q)\n$q assigned unsafely at line 1076:\n $q = $wpdb->prepare( "SELECT post_id, meta_value FROM $wpdb->postmeta WHERE `meta_key` = %s AND LOWER(`meta_value`) IN $uris_flat LIMIT %d", '_wp_attached_file', count( $uris_base ) )\n$uris_flat assigned unsafely at line 1075:\n $uris_flat = "('" . implode( "','", array_keys( $uris_base ) ) . "')" | 1077:24 | Security |
| ERROR | WordPress.Security.EscapeOutput.OutputNotEscaped | All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$this'. | 525:22 | Security |
| ERROR | Generic.PHP.ForbiddenFunctions.Found | The use of function eval() is forbidden | 1716:10 | — |
| ERROR | WordPress.DB.PreparedSQL.NotPrepared | Use placeholders and $wpdb->prepare(); found $q | 1077:37 | Security |
| ERROR | WordPress.WP.AlternativeFunctions.rand_mt_rand | mt_rand() is discouraged. Use the far less predictable wp_rand() instead. | 1183:12 | Plugin Repo |
| ERROR | WordPress.Security.EscapeOutput.OutputNotEscaped | All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$out'. | 1627:14 | Security |
| ERROR | PluginCheck.CodeAnalysis.DiscouragedFunctions.load_plugin_textdomainFound | load_plugin_textdomain() has been discouraged since WordPress version 4.6. When your plugin is hosted on WordPress.org, you no longer need to manually include this function call for translations under your plugin slug. WordPress will automatically load the translations for you as needed. | 175:4 | Plugin Repo |
| ERROR | WordPress.Security.EscapeOutput.OutputNotEscaped | All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$this'. | 385:14 | Security |
| 11/12/2025, 7:22:20 PM | 21s | 81 | 19 | 46 |