Sitewide Notice WP

All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found 'plugins_url'.

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found 'htmlspecialchars_decode'.

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found 'stripcslashes'.

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found 'wp_create_nonce'.

$_POST['background-color'] not unslashed before sanitization. Use wp_unslash() or similar

$_POST['font-color'] not unslashed before sanitization. Use wp_unslash() or similar

$_POST['message'] not unslashed before sanitization. Use wp_unslash() or similar

The plugin name includes a restricted term. Your plugin name - "Sitewide Notice WP" - contains the restricted term "wp" which can be used , as long as you don't change it to the full name. For example: You can use WP but not WordPress.

The plugin slug includes a restricted term. Your plugin slug - "sitewide-notice-wp" - contains the restricted term "wp" which can be used within the plugin slug, as long as you don't use the full name in the plugin name. For example: You can use WP but not WordPress.