Vibe AI – MCP Server for WordPress. Connect Claude, ChatGPT & Cursor

Sample message

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$audit_table".

Sample message

Unescaped parameter $audit_table used in $wpdb->query()\n$audit_table assigned unsafely at line 26.

Sample message

Use placeholders and $wpdb->prepare(); found interpolated variable {$table} at "DELETE FROM {$table} WHERE id < %d"

Sample message

A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$post_id'.

Sample message

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: rmdir().

Sample message

Found call to wp_enqueue_script() with external resource. Offloading scripts to your servers or any remote service is disallowed.

Sample message

Processing form data without nonce verification.

Sample message

Detected usage of a non-sanitized input variable: $_POST[$key]

Sample message

unlink() is discouraged. Use wp_delete_file() to delete a file.