| Code | Message | Location | Category | |
|---|---|---|---|---|
| ERROR | WordPress.DB.PreparedSQL.NotPrepared | Use placeholders and $wpdb->prepare(); found ?? | 122:73 | Security |
| ERROR | PluginCheck.Security.DirectDB.UnescapedDBParameter | Unescaped parameter $sql used in $wpdb->get_row($sql)\n$sql assigned unsafely at line 67:\n $sql = self::getReadEventsSQL($key)\n$key used without escaping. | 72:37 | Security |
| ERROR | WordPress.DB.PreparedSQL.NotPrepared | Use placeholders and $wpdb->prepare(); found $sql | 72:45 | Security |
| ERROR | WordPress.DB.PreparedSQL.NotPrepared | Use placeholders and $wpdb->prepare(); found PHP_INT_MAX | 122:76 | Security |
| ERROR | WordPress.Security.EscapeOutput.OutputNotEscaped | All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$html'. | 154:10 | Security |
| ERROR | WordPress.WP.I18n.NonSingularStringLiteralSingle | The $single parameter must be a single text string literal. Found: $singular | 58:16 | General |
| ERROR | WordPress.WP.I18n.TextDomainMismatch | Mismatched text domain. Expected 'wpf2b-addon-blocklist' but got 'wp-fail2ban-addon-blocklist'. | 199:65 | General |
| ERROR | WordPress.WP.I18n.NonSingularStringLiteralPlural | The $plural parameter must be a single text string literal. Found: $plural | 58:27 | General |
| ERROR | PluginCheck.Security.DirectDB.UnescapedDBParameter | Unescaped parameter $sql used in $wpdb->get_var(sprintf($sql, $opt['last']['GET']['id'] ?? PHP_INT_MAX))\n$sql assigned unsafely at line 107:\n $sql = <<< SQL\nSELECT COUNT({$addrField})\n FROM {$wpdb->base_prefix}fail2ban_log\n WHERE 16 > LENGTH({$addrField})\n AND event IN ($events)\n AND ID > %d;\nSQL\n$addrField assigned unsafely at line 100:\n $addrField = (class_exists(WP_FAIL2BAN_NS.'\\IP'))\n ? 'ipv6'\n : 'addr'\n$events assigned unsafely at line 103:\n $events = join(',', RestRoute::$events) | 114:25 | Security |
| ERROR | WordPress.DB.PreparedSQL.NotPrepared | Use placeholders and $wpdb->prepare(); found $sql | 114:41 | Security |
| 11/14/2025, 9:27:07 AM | 11s | 73 | 64 | 45 |