Sitekit

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$archives'.

Sample message

All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.

Sample message

strip_tags() is discouraged. Use the more comprehensive wp_strip_all_tags() instead.

Sample message

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

Sample message

Using exclusionary parameters, like exclude, in calls to get_posts() should be done with caution, see https://wpvip.com/documentation/performance-improvements-by-removing-usage-of-post__not_in/ for more information.

Sample message

Hidden files are not permitted.

Sample message

print_r() found. Debug code should not normally be used in production.

Sample message

Scripts must be registered/enqueued via wp_enqueue_script()

Sample message

Tested up to: 6.8 < 7.0. The "Tested up to" value in your plugin is not set to the current version of WordPress. This means your plugin will not show up in searches, as we require plugins to be compatible and documented as tested up to the most recent version of WordPress.

Sample message

One or more tags were ignored. Please limit your plugin to 5 tags.