WP OpenAPI is a WordPress plugin to provide the OpenAPI spec and a beautifu viewer for your WordPress REST API.
| Code | Message | Location | Category | |
|---|---|---|---|---|
| ERROR | WordPress.Security.EscapeOutput.OutputNotEscaped | All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$checked'. | 58:94 | Security |
| ERROR | WordPress.Security.EscapeOutput.OutputNotEscaped | All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found 'new'. | 95:32 | Security |
| ERROR | WordPress.Security.EscapeOutput.OutputNotEscaped | All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found 'self'. | 97:46 | Security |
| ERROR | WordPress.Security.EscapeOutput.OutputNotEscaped | All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found 'self'. | 98:46 | Security |
| ERROR | PluginCheck.CodeAnalysis.SettingSanitization.register_settingMissing | Sanitization missing for register_setting(). | 109:5 | Plugin Repo |
| ERROR | WordPress.Security.EscapeOutput.ExceptionNotEscaped | All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"$in is not a valid value. It must be one of "'. | 22:17 | Security |
| ERROR | WordPress.Security.EscapeOutput.ExceptionNotEscaped | All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$this'. | 22:80 | Security |
| ERROR | WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedHooknameFound | Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "wp-openapi-filters-elements-props". | 193:32 | Plugin Repo |
| ERROR | WordPress.Security.EscapeOutput.ExceptionNotEscaped | All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"\n'. | 57:17 | Security |
| ERROR | WordPress.Security.EscapeOutput.ExceptionNotEscaped | All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found 'self'. | 58:77 | Security |
| 17.11.2025, 09:03:45 | 13s | 91 | 18 | 21 |
| Source | Host | URL | Plugin File / Stack | Captured |
|---|---|---|---|---|
| Static | fb.me | https://fb.me/react-controlled-components | build/resources/scripts/app.js:1 | 11/17/2025, 9:03:49 AM |
| Static | github.com | https://github.com/styled-components/polished/blob/main/src/internalHelpers/errors.md# | build/resources/scripts/app.js:1 | 11/17/2025, 9:03:49 AM |
| Static | localhost | https://localhost/ | build/resources/scripts/app.js:1 | 11/17/2025, 9:03:49 AM |
| Static | fb.me | http://fb.me/use-check-prop-types | build/resources/scripts/app.js:1 | 11/17/2025, 9:03:49 AM |
| Static | curl.haxx.se | http://curl.haxx.se/libcurl/ | build/resources/scripts/app.js:1 | 11/17/2025, 9:03:49 AM |
| Static | github.com | https://github.com/dakrone/clj-http | build/resources/scripts/app.js:1 | 11/17/2025, 9:03:49 AM |
| Static | restsharp.org | http://restsharp.org/ | build/resources/scripts/app.js:1 | 11/17/2025, 9:03:49 AM |
| Static | docs.microsoft.com | https://docs.microsoft.com/en-us/dotnet/api/system.net.http.httpclient | build/resources/scripts/app.js:1 | 11/17/2025, 9:03:49 AM |
| Static | golang.org | http://golang.org/pkg/net/http/#NewRequest | build/resources/scripts/app.js:1 | 11/17/2025, 9:03:49 AM |
| Static | tools.ietf.org | https://tools.ietf.org/html/rfc7230 | build/resources/scripts/app.js:1 | 11/17/2025, 9:03:49 AM |