| Code | Message | Location | Category | |
|---|---|---|---|---|
| ERROR | WordPress.DB.PreparedSQL.NotPrepared | Use placeholders and $wpdb->prepare(); found $query | 92:36 | Security |
| ERROR | PluginCheck.Security.DirectDB.UnescapedDBParameter | Unescaped parameter $query used in $wpdb->query($query)\n$query assigned unsafely at line 90:\n $query.=' ORDER BY ' . $orderby . ' ' . $order\n$orderby assigned unsafely at line 83:\n $orderby = $this->sanitize_value_by_array($orderby, $this->get_sortable_columns())\n$orderby assigned unsafely at line 82:\n $orderby = !empty($_GET["orderby"]) ? sanitize_text_field($_GET["orderby"]) : ''\nNote: sanitize_text_field() is not a safe escaping function.\n$_GET["orderby"] used without escaping. | 92:30 | Security |
| ERROR | WordPress.DateTime.RestrictedFunctions.date_date | date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead. | 79:35 | — |
| ERROR | PluginCheck.Security.DirectDB.UnescapedDBParameter | Unescaped parameter $query used in $wpdb->get_results($query)\n$query assigned unsafely at line 90:\n $query.=' ORDER BY ' . $orderby . ' ' . $order\n$orderby assigned unsafely at line 83:\n $orderby = $this->sanitize_value_by_array($orderby, $this->get_sortable_columns())\n$orderby assigned unsafely at line 82:\n $orderby = !empty($_GET["orderby"]) ? sanitize_text_field($_GET["orderby"]) : ''\nNote: sanitize_text_field() is not a safe escaping function.\n$_GET["orderby"] used without escaping. | 114:31 | Security |
| ERROR | WordPress.DB.PreparedSQL.NotPrepared | Use placeholders and $wpdb->prepare(); found $query | 114:43 | Security |
| ERROR | WordPress.WP.I18n.MissingArgDomain | Missing $domain parameter in function call to _e(). | 118:9 | General |
| ERROR | plugin_header_no_license | Missing "License" in Plugin Header. Please update your Plugin Header with a valid GPLv2 (or later) compatible license. | — | Plugin Repo |
| ERROR | WordPress.Security.EscapeOutput.UnsafePrintingFunction | All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'. | 118:9 | Security |
| ERROR | WordPress.WP.AlternativeFunctions.strip_tags_strip_tags | strip_tags() is discouraged. Use the more comprehensive wp_strip_all_tags() instead. | 94:43 | Plugin Repo |
| ERROR | WordPress.Security.EscapeOutput.OutputNotEscaped | All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found 'SWPM_WP_IMPORT_VERSION'. | 1:69 | Security |
| 11/14/2025, 7:53:20 AM | 9s | 82 | 17 | 50 |