WP Performance Score Booster – Optimize Speed, Enable Cache & Page Preload

All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$expire_caching'.

Processing form data without nonce verification.

$_GET['tab'] not unslashed before sanitization. Use wp_unslash() or similar

Use of heredoc syntax (<<<) is not allowed; use standard strings or inline HTML instead

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

The plugin name includes a restricted term. Your chosen plugin name - "WP Performance Score Booster – Optimize Speed, Enable Cache &amp; Page Preload" - contains the restricted term "wp" which cannot be used at all in your plugin name.

Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: &quot;dcg_settings_link&quot;.

Processing form data without nonce verification.

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: is_writable().

Translatable string should not be wrapped in HTML. Found: &#039;&lt;strong&gt;Settings Saved.&lt;/strong&gt;&#039;

The $text parameter must be a single text string literal. Found: $notice_contents

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: &quot;plugin_locale&quot;.

wp_redirect() found. Using wp_safe_redirect(), along with the &quot;allowed_redirect_hosts&quot; filter if needed, can help avoid any chances of malicious redirects within code. It is also important to remember to call exit() after a redirect so that no other unwanted code is executed.

Detected usage of a non-sanitized input variable: $_REQUEST[&#039;_wpnonce&#039;]

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: mkdir().

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: rmdir().

unlink() is discouraged. Use wp_delete_file() to delete a file.

The parameter "FALSE" at position #2 of load_plugin_textdomain() has been deprecated since WordPress version 2.7.0. Use "" instead.

Resource version not set in call to wp_enqueue_style(). This means new versions of the style may not always be loaded due to browser caching.

Missing $domain parameter in function call to __().

Plugin name "WP Performance Score Booster – Optimize Speed, Enable Cache & Page Preload" is different from the name declared in plugin header "WP Performance Score Booster".

One or more tags were ignored. Please limit your plugin to 5 tags.