Booster for WooCommerce – PDF Invoices, Abandoned Cart, Variation Swatches & 100+ Tools

Sample message

$_SERVER['DOCUMENT_ROOT'] not unslashed before sanitization. Use wp_unslash() or similar

Sample message

Using cURL functions is highly discouraged. Use wp_remote_get() instead.

Sample message

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fread().

Sample message

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fclose().

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$code'.

Sample message

Using exclusionary parameters, like post__not_in, in calls to get_posts() should be done with caution, see https://wpvip.com/documentation/performance-improvements-by-removing-usage-of-post__not_in/ for more information.

Sample message

Unescaped parameter $attribute_name used in $wpdb->get_row()\n$attribute_name assigned unsafely at line 145.

Sample message

unlink() is discouraged. Use wp_delete_file() to delete a file.

Sample message

Processing form data without nonce verification.

Sample message

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fwrite().

Sample message

parse_url() is discouraged because of inconsistency in the output across PHP versions; use wp_parse_url() instead.

Sample message

The parameter "$args" at position #2 of get_terms() has been deprecated since WordPress version 4.5.0. Instead do not pass the parameter.

Sample message

Function "str_contains()" requires WordPress 5.9.0, but your plugin minimum supported version is WordPress 5.8.0.

Sample message

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fopen().

Sample message

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: mkdir().