Name: Tracking Code Manager
Rating: 4.1
Author: Data443 Risk Mitigation, Inc.

Issues Details

98 issues found in latest scan

	Code	Message	Location	Category
ERROR	`WordPress.Security.EscapeOutput.OutputNotEscaped`	All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found 'TCMP_PLUGIN_ASSETS_URI'.	`25:38`	Security
ERROR	`WordPress.Security.EscapeOutput.OutputNotEscaped`	All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found 'TCMP_TAB_MANAGER_URI'.	`29:73`	Security
ERROR	`WordPress.Security.EscapeOutput.OutputNotEscaped`	All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found 'TCMP_TAB_DOCS_DCV_URI'.	`30:71`	Security
ERROR	`WordPress.Security.EscapeOutput.OutputNotEscaped`	All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found 'TCMP_PLUGIN_SLUG'.	`40:68`	Security
ERROR	`WordPress.Security.EscapeOutput.OutputNotEscaped`	All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found 'TCMP_TAB_EDITOR'.	`41:67`	Security
ERROR	`WordPress.Security.EscapeOutput.OutputNotEscaped`	All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found 'TCMP_TAB_MANAGER_URI'.	`79:129`	Security
ERROR	`PluginCheck.Security.DirectDB.UnescapedDBParameter`	Unescaped parameter $sql used in $wpdb->get_results($sql)\n$sql assigned unsafely at line 446:\n $sql = 'SELECT ID, post_title FROM ' . $wpdb->prefix . "posts WHERE post_status='publish' AND post_type='" . $options['type'] . "' ORDER BY post_title"\n$options['type'] assigned unsafely at line 424:\n $options['type'] = ''\n$query used without escaping.\n$array assigned unsafely at line 429:\n $array = $tcmp->ecommerce->getPlugins( false )\n$tcmp->ecommerce used without escaping.	`447:26`	Security
ERROR	`WordPress.Security.EscapeOutput.OutputNotEscaped`	All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found 'TCMP_TAB_EDITOR_URI'.	`102:156`	Security
ERROR	`WordPress.Security.EscapeOutput.ExceptionNotEscaped`	All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"No such method exists: $name"'.	`1023:47`	Security
ERROR	`WordPress.DB.PreparedSQL.NotPrepared`	Use placeholders and $wpdb->prepare(); found $sql	`447:39`	Security

98 total row(s)

Tracking Code Manager

Security54

General27

Plugin Repository9