Embed Plus for YouTube Gallery, Livestream and Lazy Loading with Facades

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$array['align']'.

All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.

Detected usage of a possibly undefined superglobal array index: $_POST['options']. Check that the array index exists before using it.

Missing $domain parameter in function call to __().

$_POST['options'] not unslashed before sanitization. Use wp_unslash() or similar

Detected usage of a non-sanitized input variable: $_POST['options']

Processing form data without nonce verification.

Mismatched text domain. Expected 'youtube-embed-plus' but got 'text_domain'.

rand() is discouraged. Use the far less predictable wp_rand() instead.

Use of a direct database call is discouraged.

Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().

strip_tags() is discouraged. Use the more comprehensive wp_strip_all_tags() instead.

In footer ($in_footer) is not set explicitly wp_enqueue_script; It is recommended to load scripts in the footer. Please set this value to `true` to load it in the footer, or explicitly `false` if it should be loaded in the header.

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$all_yt_options".

Found single-underscore "_()" function when double-underscore expected.

Use placeholders and $wpdb->prepare(); found $query_sql

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "ytprefs_filter_the_content_light".

Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "EPYTGB_INCLUDES_PATH".

print_r() found. Debug code should not normally be used in production.

parse_url() is discouraged because of inconsistency in the output across PHP versions; use wp_parse_url() instead.

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

Function "register_block_type()" requires WordPress 5.0.0, but your plugin minimum supported version is WordPress 4.5.0.

Plugin folders are deleted when upgraded. Do not save data to the plugin folder using fwrite(). Detected usage of __FILE__ or __DIR__ magic constant. Use wp_upload_dir() to get the uploads directory path or save to the database instead.

Unescaped parameter $vi_table_name used in $wpdb->query()\n$vi_table_name assigned unsafely at line 26.

Unescaped parameter $sql used in $wpdb->query()\n$sql assigned unsafely at line 1830.