Smart Manager – Advanced WooCommerce Bulk Edit & Inventory Management

Use placeholders and $wpdb->prepare(); found !

The upgrade notice for "4.0.0" exceeds the limit of 300 characters.

Processing form data without nonce verification.

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "plugin_locale".

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$confirmation_message'.

Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "IS_WOO13".

Use of a direct database call is discouraged.

Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().

Unescaped parameter $args['col_nm'] used in $wpdb->get_var()\n$args['col_nm'] used without escaping.

Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "get_sa_manager_common_params".

Use placeholders and $wpdb->prepare(); found interpolated variable $fields at "SELECT $fields\n

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$common_core_controller".

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "$plugin_prefix . '_batch_email_template'".

The $domain parameter must be a single text string literal. Found: SM_TEXT_DOMAIN

Unescaped parameter $join used in $wpdb->get_col()\n$join assigned unsafely at line 1413.

Processing form data without nonce verification.

In footer ($in_footer) is not set explicitly wp_register_script; It is recommended to load scripts in the footer. Please set this value to `true` to load it in the footer, or explicitly `false` if it should be loaded in the header.

The $text parameter must be a single text string literal. Found: $discount

Replacement variables found, but no valid placeholders found in the query.

Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "SA_Manager_Background_Updater".

All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.

Detected usage of a non-sanitized input variable: $_GET['dashboard']

$_GET['dashboard'] not unslashed before sanitization. Use wp_unslash() or similar

Attempting a database schema change is discouraged.

Offloading images, js, css, and other scripts to your servers or any remote service is disallowed.