JSM Show Post Metadata

Processing form data without nonce verification.

$_GET[$key] not unslashed before sanitization. Use wp_unslash() or similar

Detected usage of a non-sanitized input variable: $_POST['meta_key']

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "$filter_prefix . '_load_lib'".

print_r() found. Debug code should not normally be used in production.

Detected usage of a possibly undefined superglobal array index: $_SERVER['PHP_SELF']. Check that the array index exists before using it.

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$metabox_html'.

The $domain parameter must be a single text string literal. Found: $text_domain

The $text parameter must be a single text string literal. Found: $opt_label

The use of function ini_set() is discouraged

Use of a direct database call is discouraged.

error_log() found. Debug code should not normally be used in production.

var_export() found. Debug code should not normally be used in production.

Processing form data without nonce verification.

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

load_plugin_textdomain() has been discouraged since WordPress version 4.6. When your plugin is hosted on WordPress.org, you no longer need to manually include this function call for translations under your plugin slug. WordPress will automatically load the translations for you as needed.

Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().

Use placeholders and $wpdb->prepare(); found $select_sql

Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "SuextMinifyCssCompressor".

strip_tags() is discouraged. Use the more comprehensive wp_strip_all_tags() instead.

The parameter "$deprecated = ''" at position #3 of add_option() has been deprecated since WordPress version 2.3.0. Use "" instead.

Using exclusionary parameters, like post__not_in, in calls to get_posts() should be done with caution, see https://wpvip.com/documentation/performance-improvements-by-removing-usage-of-post__not_in/ for more information.

Function "utf8_encode()" requires WordPress 6.9.0, but your plugin minimum supported version is WordPress 6.0.0.