Live Copy Paste for Elementor – Cross Domain Copy Paste & Page Duplicator

$_GET['duplicate_nonce'] not unslashed before sanitization. Use wp_unslash() or similar

Processing form data without nonce verification.

The $domain parameter must be a single text string literal. Found: $this->settings['text_domain']

Detected usage of a non-sanitized input variable: $_GET['duplicate_nonce']

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

Use of a direct database call is discouraged.

Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().

Processing form data without nonce verification.

Detected usage of a possibly undefined superglobal array index: $_REQUEST['post_id']. Check that the array index exists before using it.

load_plugin_textdomain() has been discouraged since WordPress version 4.6. When your plugin is hosted on WordPress.org, you no longer need to manually include this function call for translations under your plugin slug. WordPress will automatically load the translations for you as needed.

Sanitization missing for register_setting().

Unescaped parameter $bdt_sql_query used in $wpdb->query()\n$bdt_sql_query assigned unsafely at line 109.

Use placeholders and $wpdb->prepare(); found interpolated variable $bdt_post_id at "SELECT meta_key, meta_value FROM $wpdb->postmeta WHERE post_id=$bdt_post_id"

Use placeholders and $wpdb->prepare(); found $bdt_sql_query

wp_redirect() found. Using wp_safe_redirect(), along with the "allowed_redirect_hosts" filter if needed, can help avoid any chances of malicious redirects within code. It is also important to remember to call exit() after a redirect so that no other unwanted code is executed.

Plugin name "Live Copy Paste for Elementor - Cross Domain Copy Paste & Page Duplicator" is different from the name declared in plugin header "Live Copy Paste".

The "Short Description" section is too long and was truncated. A maximum of 150 characters is supported.