| Code | Message | Location | Category | |
|---|---|---|---|---|
| ERROR | WordPress.Security.EscapeOutput.OutputNotEscaped | All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$name'. | 307:75 | Security |
| ERROR | WordPress.Security.EscapeOutput.OutputNotEscaped | All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$notice'. | 307:115 | Security |
| ERROR | WordPress.Security.EscapeOutput.OutputNotEscaped | All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$msg'. | 4:126 | Security |
| ERROR | WordPress.WP.AlternativeFunctions.file_system_operations_chmod | File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: chmod(). | 85:14 | Plugin Repo |
| ERROR | WordPress.DB.PreparedSQL.NotPrepared | Use placeholders and $wpdb->prepare(); found $sql_html | 28:52 | Security |
| ERROR | WordPress.DateTime.RestrictedFunctions.date_date | date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead. | 7:28 | — |
| ERROR | WordPress.WP.AlternativeFunctions.file_system_operations_chmod | File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: chmod(). | 20:18 | Plugin Repo |
| ERROR | WordPress.WP.I18n.TextDomainMismatch | Mismatched text domain. Expected 'wppao-sitemap' but got 'wppao_sitemap'. | 49:32 | General |
| ERROR | WordPress.DateTime.RestrictedFunctions.date_date | date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead. | 59:21 | — |
| ERROR | PluginCheck.Security.DirectDB.UnescapedDBParameter | Unescaped parameter $sql_mini used in $wpdb->get_results($sql_mini)\n$sql_mini assigned unsafely at line 20:\n $sql_mini = "select ID,post_modified,post_date,post_type FROM $wpdb->posts WHERE post_password = '' AND (post_type='post' or post_type='page') AND post_status = 'publish' ORDER BY post_modified DESC LIMIT 0,$new_posts_limit"\n$new_posts_limit assigned unsafely at line 11:\n $new_posts_limit = '1000'\n$xml_contents assigned unsafely at line 14:\n $xml_contents = ''\n$xml_contents_page assigned unsafely at line 15:\n $xml_contents_page = ''\n$xml_contents_post assigned unsafely at line 16:\n $xml_contents_post = '' | 21:36 | Security |
| 11/13/2025, 5:16:57 PM | 10s | 59 | 117 | 21 |