Mobile Contact Bar

All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$hooked'.

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$blog_ids".

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "mcb_admin_add_button".

Use of a direct database call is discouraged.

Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().

The $text parameter must be a single text string literal. Found: $plugin_data['Description']

Missing $domain parameter in function call to esc_attr_e().

A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.

Detected usage of a non-sanitized input variable: $_POST['contact_type']

$_POST['contact_type'] not unslashed before sanitization. Use wp_unslash() or similar

parse_url() is discouraged because of inconsistency in the output across PHP versions; use wp_parse_url() instead.

Multiple placeholders in translatable strings should be ordered. Expected "%1$s, %2$s", but got "%s, %s" in 'Mobile Contact Bar requires at least PHP version %s. You are running version %s. Please upgrade and try again.'.

Processing form data without nonce verification.

Missing singular placeholder, needed for some languages. See https://codex.wordpress.org/I18n_for_WordPress_Developers#Plurals

Function "sanitize_textarea_field()" requires WordPress 4.7.0, but your plugin minimum supported version is WordPress 4.6.0.