Setting is missing a sanitization callback

Why It Shows Up

Plugin Check found `register_setting()` without a `sanitize_callback` or equivalent validation strategy.

Why It Matters

Settings can be saved by administrators and then displayed or used later. Without sanitization, invalid or unsafe values can persist.

How to Fix

• Pass a `sanitize_callback` in the `register_setting()` arguments.
• Use built-in sanitizers for simple values and custom callbacks for structured settings.
• Validate allowed values and return a safe default when input is invalid.

References