Add variable analysis sniff #4
Annotations
10 errors and 10 warnings
|
Run plugin check:
templates/feed-rss2-comments.php#L10
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found 'get_option'.
|
|
Run plugin check:
templates/feed-rss2-comments.php#L39
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '__'.
|
|
Run plugin check:
templates/feed-rss2-comments.php#L39
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found 'get_the_title_rss'.
|
|
Run plugin check:
templates/feed-rss2-comments.php#L42
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '__'.
|
|
Run plugin check:
templates/feed-rss2-comments.php#L42
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found 'get_bloginfo_rss'.
|
|
Run plugin check:
templates/feed-rss2-comments.php#L45
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '__'.
|
|
Run plugin check:
templates/feed-rss2-comments.php#L45
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found 'get_wp_title_rss'.
|
|
Run plugin check:
templates/feed-rss2-comments.php#L52
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found 'get_feed_build_date'.
|
|
Run plugin check:
templates/feed-rss2-comments.php#L56
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found 'apply_filters'.
|
|
Run plugin check:
templates/feed-rss2-comments.php#L62
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found 'apply_filters'.
|
|
Run plugin check:
templates/reply-metabox.php#L12
Processing form data without nonce verification.
|
|
Run plugin check:
templates/reply-metabox.php#L13
Processing form data without nonce verification.
|
|
Run plugin check:
includes/class-kind-metabox.php#L99
Processing form data without nonce verification.
|
|
Run plugin check:
includes/class-kind-taxonomy.php#L582
Using exclusionary parameters, like exclude, in calls to get_posts() should be done with caution, see https://wpvip.com/documentation/performance-improvements-by-removing-usage-of-post__not_in/ for more information.
|
|
Run plugin check:
includes/class-kind-taxonomy.php#L966
Processing form data without nonce verification.
|
|
Run plugin check:
includes/class-kind-taxonomy.php#L967
Processing form data without nonce verification.
|
|
Run plugin check:
includes/class-kind-taxonomy.php#L1159
Processing form data without nonce verification.
|
|
Run plugin check:
includes/class-kind-taxonomy.php#L1159
Processing form data without nonce verification.
|
|
Run plugin check:
readme.txt#L1
The upgrade notice for "3.6.0" exceeds the limit of 300 characters.
|
|
Run plugin check:
readme.txt#L1
The upgrade notice for "3.1.0" exceeds the limit of 300 characters.
|
Loading