
  PHP CodeSniffer - Security Check

Using: Security ruleset (escaping, sanitization, SQL)

EE.E..EEE.E.. 13 / 13 (100%)



FILE: ...riation-swatches-and-photos/classes/class-wc-swatches-product-data-tab.php
--------------------------------------------------------------------------------
FOUND 69 ERRORS AFFECTING 43 LINES
--------------------------------------------------------------------------------
  58 | ERROR | All output should be run through an escaping function (like
     |       | esc_html_e() or esc_attr_e()), found '_e'.
     |       | (WordPress.Security.EscapeOutput.UnsafePrintingFunction)
  61 | ERROR | All output should be run through an escaping function (like
     |       | esc_html_e() or esc_attr_e()), found '_e'.
     |       | (WordPress.Security.EscapeOutput.UnsafePrintingFunction)
 152 | ERROR | All output should be run through an escaping function (see the
     |       | Security sections in the WordPress Developer Handbooks), found
     |       | '$current_label'.
     |       | (WordPress.Security.EscapeOutput.OutputNotEscaped)
 155 | ERROR | All output should be run through an escaping function (see the
     |       | Security sections in the WordPress Developer Handbooks), found
     |       | '$current_type_description'.
     |       | (WordPress.Security.EscapeOutput.OutputNotEscaped)
 167 | ERROR | All output should be run through an escaping function (see the
     |       | Security sections in the WordPress Developer Handbooks), found
     |       | '$key_attr'. (WordPress.Security.EscapeOutput.OutputNotEscaped)
 167 | ERROR | All output should be run through an escaping function (like
     |       | esc_html_e() or esc_attr_e()), found '_e'.
     |       | (WordPress.Security.EscapeOutput.UnsafePrintingFunction)
 170 | ERROR | All output should be run through an escaping function (see the
     |       | Security sections in the WordPress Developer Handbooks), found
     |       | '$key_attr'. (WordPress.Security.EscapeOutput.OutputNotEscaped)
 170 | ERROR | All output should be run through an escaping function (see the
     |       | Security sections in the WordPress Developer Handbooks), found
     |       | '$key'. (WordPress.Security.EscapeOutput.OutputNotEscaped)
 173 | ERROR | All output should be run through an escaping function (like
     |       | esc_html_e() or esc_attr_e()), found '_e'.
     |       | (WordPress.Security.EscapeOutput.UnsafePrintingFunction)
 175 | ERROR | All output should be run through an escaping function (like
     |       | esc_html_e() or esc_attr_e()), found '_e'.
     |       | (WordPress.Security.EscapeOutput.UnsafePrintingFunction)
 176 | ERROR | All output should be run through an escaping function (like
     |       | esc_html_e() or esc_attr_e()), found '_e'.
     |       | (WordPress.Security.EscapeOutput.UnsafePrintingFunction)
 184 | ERROR | All output should be run through an escaping function (see the
     |       | Security sections in the WordPress Developer Handbooks), found
     |       | '$key_attr'. (WordPress.Security.EscapeOutput.OutputNotEscaped)
 184 | ERROR | All output should be run through an escaping function (like
     |       | esc_html_e() or esc_attr_e()), found '_e'.
     |       | (WordPress.Security.EscapeOutput.UnsafePrintingFunction)
 188 | ERROR | All output should be run through an escaping function (see the
     |       | Security sections in the WordPress Developer Handbooks), found
     |       | '$key'. (WordPress.Security.EscapeOutput.OutputNotEscaped)
 190 | ERROR | All output should be run through an escaping function (see the
     |       | Security sections in the WordPress Developer Handbooks), found
     |       | '$layout'. (WordPress.Security.EscapeOutput.OutputNotEscaped)
 190 | ERROR | All output should be run through an escaping function (see the
     |       | Security sections in the WordPress Developer Handbooks), found
     |       | '$layout_name'.
     |       | (WordPress.Security.EscapeOutput.OutputNotEscaped)
 198 | ERROR | All output should be run through an escaping function (see the
     |       | Security sections in the WordPress Developer Handbooks), found
     |       | '$key_attr'. (WordPress.Security.EscapeOutput.OutputNotEscaped)
 198 | ERROR | All output should be run through an escaping function (like
     |       | esc_html_e() or esc_attr_e()), found '_e'.
     |       | (WordPress.Security.EscapeOutput.UnsafePrintingFunction)
 202 | ERROR | All output should be run through an escaping function (see the
     |       | Security sections in the WordPress Developer Handbooks), found
     |       | '$key'. (WordPress.Security.EscapeOutput.OutputNotEscaped)
 204 | ERROR | All output should be run through an escaping function (see the
     |       | Security sections in the WordPress Developer Handbooks), found
     |       | '$size'. (WordPress.Security.EscapeOutput.OutputNotEscaped)
 204 | ERROR | All output should be run through an escaping function (see the
     |       | Security sections in the WordPress Developer Handbooks), found
     |       | '$size'. (WordPress.Security.EscapeOutput.OutputNotEscaped)
 216 | ERROR | All output should be run through an escaping function (like
     |       | esc_html_e() or esc_attr_e()), found '_e'.
     |       | (WordPress.Security.EscapeOutput.UnsafePrintingFunction)
 227 | ERROR | All output should be run through an escaping function (see the
     |       | Security sections in the WordPress Developer Handbooks), found
     |       | '__'. (WordPress.Security.EscapeOutput.OutputNotEscaped)
 227 | ERROR | All output should be run through an escaping function (see the
     |       | Security sections in the WordPress Developer Handbooks), found
     |       | '$current_label'.
     |       | (WordPress.Security.EscapeOutput.OutputNotEscaped)
 235 | ERROR | All output should be run through an escaping function (like
     |       | esc_html_e() or esc_attr_e()), found '_e'.
     |       | (WordPress.Security.EscapeOutput.UnsafePrintingFunction)
 244 | ERROR | All output should be run through an escaping function (like
     |       | esc_html_e() or esc_attr_e()), found '_e'.
     |       | (WordPress.Security.EscapeOutput.UnsafePrintingFunction)
 247 | ERROR | All output should be run through an escaping function (like
     |       | esc_html_e() or esc_attr_e()), found '_e'.
     |       | (WordPress.Security.EscapeOutput.UnsafePrintingFunction)
 250 | ERROR | All output should be run through an escaping function (like
     |       | esc_html_e() or esc_attr_e()), found '_e'.
     |       | (WordPress.Security.EscapeOutput.UnsafePrintingFunction)
 294 | ERROR | All output should be run through an escaping function (see the
     |       | Security sections in the WordPress Developer Handbooks), found
     |       | '$key_attr'. (WordPress.Security.EscapeOutput.OutputNotEscaped)
 294 | ERROR | All output should be run through an escaping function (see the
     |       | Security sections in the WordPress Developer Handbooks), found
     |       | '$attribute_term['id']'.
     |       | (WordPress.Security.EscapeOutput.OutputNotEscaped)
 297 | ERROR | All output should be run through an escaping function (see the
     |       | Security sections in the WordPress Developer Handbooks), found
     |       | '$current_attribute_image_src'.
     |       | (WordPress.Security.EscapeOutput.OutputNotEscaped)
 299 | ERROR | All output should be run through an escaping function (see the
     |       | Security sections in the WordPress Developer Handbooks), found
     |       | '$key_attr'. (WordPress.Security.EscapeOutput.OutputNotEscaped)
 299 | ERROR | All output should be run through an escaping function (see the
     |       | Security sections in the WordPress Developer Handbooks), found
     |       | '$attribute_term['id']'.
     |       | (WordPress.Security.EscapeOutput.OutputNotEscaped)
 301 | ERROR | All output should be run through an escaping function (see the
     |       | Security sections in the WordPress Developer Handbooks), found
     |       | '$current_attribute_color'.
     |       | (WordPress.Security.EscapeOutput.OutputNotEscaped)
 301 | ERROR | All output should be run through an escaping function (see the
     |       | Security sections in the WordPress Developer Handbooks), found
     |       | '$attribute_term['label']'.
     |       | (WordPress.Security.EscapeOutput.OutputNotEscaped)
 306 | ERROR | All output should be run through an escaping function (see the
     |       | Security sections in the WordPress Developer Handbooks), found
     |       | '$attribute_term['label']'.
     |       | (WordPress.Security.EscapeOutput.OutputNotEscaped)
 309 | ERROR | All output should be run through an escaping function (see the
     |       | Security sections in the WordPress Developer Handbooks), found
     |       | '__'. (WordPress.Security.EscapeOutput.OutputNotEscaped)
 309 | ERROR | All output should be run through an escaping function (see the
     |       | Security sections in the WordPress Developer Handbooks), found
     |       | '__'. (WordPress.Security.EscapeOutput.OutputNotEscaped)
 323 | ERROR | All output should be run through an escaping function (see the
     |       | Security sections in the WordPress Developer Handbooks), found
     |       | '$key_attr'. (WordPress.Security.EscapeOutput.OutputNotEscaped)
 324 | ERROR | All output should be run through an escaping function (like
     |       | esc_html_e() or esc_attr_e()), found '_e'.
     |       | (WordPress.Security.EscapeOutput.UnsafePrintingFunction)
 328 | ERROR | All output should be run through an escaping function (see the
     |       | Security sections in the WordPress Developer Handbooks), found
     |       | '$key_attr'. (WordPress.Security.EscapeOutput.OutputNotEscaped)
 328 | ERROR | All output should be run through an escaping function (see the
     |       | Security sections in the WordPress Developer Handbooks), found
     |       | '$key'. (WordPress.Security.EscapeOutput.OutputNotEscaped)
 329 | ERROR | All output should be run through an escaping function (like
     |       | esc_html_e() or esc_attr_e()), found '_e'.
     |       | (WordPress.Security.EscapeOutput.UnsafePrintingFunction)
 330 | ERROR | All output should be run through an escaping function (like
     |       | esc_html_e() or esc_attr_e()), found '_e'.
     |       | (WordPress.Security.EscapeOutput.UnsafePrintingFunction)
 337 | ERROR | All output should be run through an escaping function (like
     |       | esc_html_e() or esc_attr_e()), found '_e'.
     |       | (WordPress.Security.EscapeOutput.UnsafePrintingFunction)
 340 | ERROR | All output should be run through an escaping function (see the
     |       | Security sections in the WordPress Developer Handbooks), found
     |       | '$key_attr'. (WordPress.Security.EscapeOutput.OutputNotEscaped)
 340 | ERROR | All output should be run through an escaping function (see the
     |       | Security sections in the WordPress Developer Handbooks), found
     |       | '$attribute_term['id']'.
     |       | (WordPress.Security.EscapeOutput.OutputNotEscaped)
 341 | ERROR | All output should be run through an escaping function (see the
     |       | Security sections in the WordPress Developer Handbooks), found
     |       | '$key_attr'. (WordPress.Security.EscapeOutput.OutputNotEscaped)
 341 | ERROR | All output should be run through an escaping function (see the
     |       | Security sections in the WordPress Developer Handbooks), found
     |       | '$attribute_term['id']'.
     |       | (WordPress.Security.EscapeOutput.OutputNotEscaped)
 341 | ERROR | All output should be run through an escaping function (see the
     |       | Security sections in the WordPress Developer Handbooks), found
     |       | '$key'. (WordPress.Security.EscapeOutput.OutputNotEscaped)
 341 | ERROR | All output should be run through an escaping function (see the
     |       | Security sections in the WordPress Developer Handbooks), found
     |       | '$current_attribute_color'.
     |       | (WordPress.Security.EscapeOutput.OutputNotEscaped)
 347 | ERROR | All output should be run through an escaping function (like
     |       | esc_html_e() or esc_attr_e()), found '_e'.
     |       | (WordPress.Security.EscapeOutput.UnsafePrintingFunction)
 352 | ERROR | All output should be run through an escaping function (see the
     |       | Security sections in the WordPress Developer Handbooks), found
     |       | '$key_attr'. (WordPress.Security.EscapeOutput.OutputNotEscaped)
 352 | ERROR | All output should be run through an escaping function (see the
     |       | Security sections in the WordPress Developer Handbooks), found
     |       | '$attribute_term['id']'.
     |       | (WordPress.Security.EscapeOutput.OutputNotEscaped)
 353 | ERROR | All output should be run through an escaping function (see the
     |       | Security sections in the WordPress Developer Handbooks), found
     |       | '$current_attribute_image_src'.
     |       | (WordPress.Security.EscapeOutput.OutputNotEscaped)
 353 | ERROR | All output should be run through an escaping function (like
     |       | esc_html_e() or esc_attr_e()), found '_e'.
     |       | (WordPress.Security.EscapeOutput.UnsafePrintingFunction)
 355 | ERROR | All output should be run through an escaping function (see the
     |       | Security sections in the WordPress Developer Handbooks), found
     |       | '$key_attr'. (WordPress.Security.EscapeOutput.OutputNotEscaped)
 355 | ERROR | All output should be run through an escaping function (see the
     |       | Security sections in the WordPress Developer Handbooks), found
     |       | '$attribute_term['id']'.
     |       | (WordPress.Security.EscapeOutput.OutputNotEscaped)
 355 | ERROR | All output should be run through an escaping function (see the
     |       | Security sections in the WordPress Developer Handbooks), found
     |       | '$key'. (WordPress.Security.EscapeOutput.OutputNotEscaped)
 355 | ERROR | All output should be run through an escaping function (see the
     |       | Security sections in the WordPress Developer Handbooks), found
     |       | '$current_attribute_image_id'.
     |       | (WordPress.Security.EscapeOutput.OutputNotEscaped)
 356 | ERROR | All output should be run through an escaping function (see the
     |       | Security sections in the WordPress Developer Handbooks), found
     |       | '$post_id'. (WordPress.Security.EscapeOutput.OutputNotEscaped)
 356 | ERROR | All output should be run through an escaping function (like
     |       | esc_html_e() or esc_attr_e()), found '_e'.
     |       | (WordPress.Security.EscapeOutput.UnsafePrintingFunction)
 357 | ERROR | All output should be run through an escaping function (see the
     |       | Security sections in the WordPress Developer Handbooks), found
     |       | '$post_id'. (WordPress.Security.EscapeOutput.OutputNotEscaped)
 357 | ERROR | All output should be run through an escaping function (like
     |       | esc_html_e() or esc_attr_e()), found '_e'.
     |       | (WordPress.Security.EscapeOutput.UnsafePrintingFunction)
 382 | ERROR | All output should be run through an escaping function (see the
     |       | Security sections in the WordPress Developer Handbooks), found
     |       | '__'. (WordPress.Security.EscapeOutput.OutputNotEscaped)
 417 | ERROR | Processing form data without nonce verification.
     |       | (WordPress.Security.NonceVerification.Missing)
 417 | ERROR | $_POST['_swatch_type_options'] not unslashed before
     |       | sanitization. Use wp_unslash() or similar
     |       | (WordPress.Security.ValidatedSanitizedInput.MissingUnslash)
 417 | ERROR | Detected usage of a non-sanitized input variable:
     |       | $_POST['_swatch_type_options']
     |       | (WordPress.Security.ValidatedSanitizedInput.InputNotSanitized)
 417 | ERROR | Processing form data without nonce verification.
     |       | (WordPress.Security.NonceVerification.Missing)
--------------------------------------------------------------------------------


FILE: ...e-variation-swatches-and-photos/classes/class-wc-swatches-ajax-handler.php
--------------------------------------------------------------------------------
FOUND 5 ERRORS AFFECTING 2 LINES
--------------------------------------------------------------------------------
 21 | ERROR | Processing form data without nonce verification.
    |       | (WordPress.Security.NonceVerification.Missing)
 21 | ERROR | Processing form data without nonce verification.
    |       | (WordPress.Security.NonceVerification.Missing)
 26 | ERROR | $_POST['product_id'] not unslashed before sanitization. Use
    |       | wp_unslash() or similar
    |       | (WordPress.Security.ValidatedSanitizedInput.MissingUnslash)
 26 | ERROR | Detected usage of a non-sanitized input variable:
    |       | $_POST['product_id']
    |       | (WordPress.Security.ValidatedSanitizedInput.InputNotSanitized)
 26 | ERROR | Processing form data without nonce verification.
    |       | (WordPress.Security.NonceVerification.Missing)
--------------------------------------------------------------------------------


FILE: ...swatches-and-photos/classes/class-wc-swatches-product-attribute-images.php
--------------------------------------------------------------------------------
FOUND 66 ERRORS AND 16 WARNINGS AFFECTING 56 LINES
--------------------------------------------------------------------------------
  55 | WARNING | Processing form data without nonce verification.
     |         | (WordPress.Security.NonceVerification.Recommended)
  56 | WARNING | Processing form data without nonce verification.
     |         | (WordPress.Security.NonceVerification.Recommended)
  56 | ERROR   | $_REQUEST['taxonomy'] not unslashed before sanitization. Use
     |         | wp_unslash() or similar
     |         | (WordPress.Security.ValidatedSanitizedInput.MissingUnslash)
  56 | ERROR   | Detected usage of a non-sanitized input variable:
     |         | $_REQUEST['taxonomy']
     |         | (WordPress.Security.ValidatedSanitizedInput.InputNotSanitized)
 105 | WARNING | Processing form data without nonce verification.
     |         | (WordPress.Security.NonceVerification.Recommended)
 105 | ERROR   | Detected usage of a possibly undefined superglobal array
     |         | index: $_REQUEST['taxonomy']. Check that the array index
     |         | exists before using it.
     |         | (WordPress.Security.ValidatedSanitizedInput.InputNotValidated)
 105 | ERROR   | $_REQUEST['taxonomy'] not unslashed before sanitization. Use
     |         | wp_unslash() or similar
     |         | (WordPress.Security.ValidatedSanitizedInput.MissingUnslash)
 105 | ERROR   | Detected usage of a non-sanitized input variable:
     |         | $_REQUEST['taxonomy']
     |         | (WordPress.Security.ValidatedSanitizedInput.InputNotSanitized)
 106 | WARNING | Processing form data without nonce verification.
     |         | (WordPress.Security.NonceVerification.Recommended)
 106 | WARNING | Processing form data without nonce verification.
     |         | (WordPress.Security.NonceVerification.Recommended)
 106 | ERROR   | $_REQUEST['tag_ID'] not unslashed before sanitization. Use
     |         | wp_unslash() or similar
     |         | (WordPress.Security.ValidatedSanitizedInput.MissingUnslash)
 106 | ERROR   | Detected usage of a non-sanitized input variable:
     |         | $_REQUEST['tag_ID']
     |         | (WordPress.Security.ValidatedSanitizedInput.InputNotSanitized)
 106 | WARNING | Processing form data without nonce verification.
     |         | (WordPress.Security.NonceVerification.Recommended)
 106 | ERROR   | Detected usage of a possibly undefined superglobal array
     |         | index: $_REQUEST['taxonomy']. Check that the array index
     |         | exists before using it.
     |         | (WordPress.Security.ValidatedSanitizedInput.InputNotValidated)
 106 | ERROR   | $_REQUEST['taxonomy'] not unslashed before sanitization. Use
     |         | wp_unslash() or similar
     |         | (WordPress.Security.ValidatedSanitizedInput.MissingUnslash)
 106 | ERROR   | Detected usage of a non-sanitized input variable:
     |         | $_REQUEST['taxonomy']
     |         | (WordPress.Security.ValidatedSanitizedInput.InputNotSanitized)
 109 | WARNING | Processing form data without nonce verification.
     |         | (WordPress.Security.NonceVerification.Recommended)
 109 | ERROR   | Detected usage of a possibly undefined superglobal array
     |         | index: $_REQUEST['taxonomy']. Check that the array index
     |         | exists before using it.
     |         | (WordPress.Security.ValidatedSanitizedInput.InputNotValidated)
 109 | ERROR   | $_REQUEST['taxonomy'] not unslashed before sanitization. Use
     |         | wp_unslash() or similar
     |         | (WordPress.Security.ValidatedSanitizedInput.MissingUnslash)
 109 | ERROR   | Detected usage of a non-sanitized input variable:
     |         | $_REQUEST['taxonomy']
     |         | (WordPress.Security.ValidatedSanitizedInput.InputNotSanitized)
 112 | WARNING | Processing form data without nonce verification.
     |         | (WordPress.Security.NonceVerification.Recommended)
 112 | ERROR   | Detected usage of a possibly undefined superglobal array
     |         | index: $_REQUEST['taxonomy']. Check that the array index
     |         | exists before using it.
     |         | (WordPress.Security.ValidatedSanitizedInput.InputNotValidated)
 112 | ERROR   | $_REQUEST['taxonomy'] not unslashed before sanitization. Use
     |         | wp_unslash() or similar
     |         | (WordPress.Security.ValidatedSanitizedInput.MissingUnslash)
 112 | ERROR   | Detected usage of a non-sanitized input variable:
     |         | $_REQUEST['taxonomy']
     |         | (WordPress.Security.ValidatedSanitizedInput.InputNotSanitized)
 133 | ERROR   | All output should be run through an escaping function (see the
     |         | Security sections in the WordPress Developer Handbooks), found
     |         | '$this'. (WordPress.Security.EscapeOutput.OutputNotEscaped)
 134 | ERROR   | All output should be run through an escaping function (see the
     |         | Security sections in the WordPress Developer Handbooks), found
     |         | '$this'. (WordPress.Security.EscapeOutput.OutputNotEscaped)
 135 | ERROR   | All output should be run through an escaping function (see the
     |         | Security sections in the WordPress Developer Handbooks), found
     |         | '$this'. (WordPress.Security.EscapeOutput.OutputNotEscaped)
 144 | ERROR   | All output should be run through an escaping function (see the
     |         | Security sections in the WordPress Developer Handbooks), found
     |         | '$this'. (WordPress.Security.EscapeOutput.OutputNotEscaped)
 156 | ERROR   | All output should be run through an escaping function (see the
     |         | Security sections in the WordPress Developer Handbooks), found
     |         | 'sanitize_title'.
     |         | (WordPress.Security.EscapeOutput.OutputNotEscaped)
 157 | ERROR   | All output should be run through an escaping function (like
     |         | esc_html_e() or esc_attr_e()), found '_e'.
     |         | (WordPress.Security.EscapeOutput.UnsafePrintingFunction)
 158 | ERROR   | All output should be run through an escaping function (see the
     |         | Security sections in the WordPress Developer Handbooks), found
     |         | '$this'. (WordPress.Security.EscapeOutput.OutputNotEscaped)
 162 | ERROR   | All output should be run through an escaping function (see the
     |         | Security sections in the WordPress Developer Handbooks), found
     |         | '$this'. (WordPress.Security.EscapeOutput.OutputNotEscaped)
 164 | ERROR   | All output should be run through an escaping function (see the
     |         | Security sections in the WordPress Developer Handbooks), found
     |         | '$this'. (WordPress.Security.EscapeOutput.OutputNotEscaped)
 170 | ERROR   | All output should be run through an escaping function (see the
     |         | Security sections in the WordPress Developer Handbooks), found
     |         | 'sanitize_title'.
     |         | (WordPress.Security.EscapeOutput.OutputNotEscaped)
 171 | ERROR   | All output should be run through an escaping function (like
     |         | esc_html_e() or esc_attr_e()), found '_e'.
     |         | (WordPress.Security.EscapeOutput.UnsafePrintingFunction)
 172 | ERROR   | All output should be run through an escaping function (see the
     |         | Security sections in the WordPress Developer Handbooks), found
     |         | '$this'. (WordPress.Security.EscapeOutput.OutputNotEscaped)
 174 | ERROR   | All output should be run through an escaping function (see the
     |         | Security sections in the WordPress Developer Handbooks), found
     |         | 'apply_filters'.
     |         | (WordPress.Security.EscapeOutput.OutputNotEscaped)
 175 | ERROR   | All output should be run through an escaping function (see the
     |         | Security sections in the WordPress Developer Handbooks), found
     |         | '$this'. (WordPress.Security.EscapeOutput.OutputNotEscaped)
 175 | ERROR   | All output should be run through an escaping function (see the
     |         | Security sections in the WordPress Developer Handbooks), found
     |         | '$this'. (WordPress.Security.EscapeOutput.OutputNotEscaped)
 178 | ERROR   | All output should be run through an escaping function (see the
     |         | Security sections in the WordPress Developer Handbooks), found
     |         | '$this'. (WordPress.Security.EscapeOutput.OutputNotEscaped)
 179 | ERROR   | All output should be run through an escaping function (see the
     |         | Security sections in the WordPress Developer Handbooks), found
     |         | '$this'. (WordPress.Security.EscapeOutput.OutputNotEscaped)
 181 | ERROR   | All output should be run through an escaping function (like
     |         | esc_html_e() or esc_attr_e()), found '_e'.
     |         | (WordPress.Security.EscapeOutput.UnsafePrintingFunction)
 183 | ERROR   | All output should be run through an escaping function (like
     |         | esc_html_e() or esc_attr_e()), found '_e'.
     |         | (WordPress.Security.EscapeOutput.UnsafePrintingFunction)
 198 | ERROR   | All output should be run through an escaping function (like
     |         | esc_html_e() or esc_attr_e()), found '_e'.
     |         | (WordPress.Security.EscapeOutput.UnsafePrintingFunction)
 200 | ERROR   | All output should be run through an escaping function (see the
     |         | Security sections in the WordPress Developer Handbooks), found
     |         | '$this'. (WordPress.Security.EscapeOutput.OutputNotEscaped)
 201 | ERROR   | All output should be run through an escaping function (see the
     |         | Security sections in the WordPress Developer Handbooks), found
     |         | '$this'. (WordPress.Security.EscapeOutput.OutputNotEscaped)
 202 | ERROR   | All output should be run through an escaping function (see the
     |         | Security sections in the WordPress Developer Handbooks), found
     |         | '$this'. (WordPress.Security.EscapeOutput.OutputNotEscaped)
 204 | ERROR   | All output should be run through an escaping function (like
     |         | esc_html_e() or esc_attr_e()), found '_e'.
     |         | (WordPress.Security.EscapeOutput.UnsafePrintingFunction)
 206 | ERROR   | All output should be run through an escaping function (like
     |         | esc_html_e() or esc_attr_e()), found '_e'.
     |         | (WordPress.Security.EscapeOutput.UnsafePrintingFunction)
 208 | ERROR   | All output should be run through an escaping function (like
     |         | esc_html_e() or esc_attr_e()), found '_e'.
     |         | (WordPress.Security.EscapeOutput.UnsafePrintingFunction)
 215 | ERROR   | All output should be run through an escaping function (see the
     |         | Security sections in the WordPress Developer Handbooks), found
     |         | '$this'. (WordPress.Security.EscapeOutput.OutputNotEscaped)
 227 | ERROR   | All output should be run through an escaping function (see the
     |         | Security sections in the WordPress Developer Handbooks), found
     |         | '$style'. (WordPress.Security.EscapeOutput.OutputNotEscaped)
 228 | ERROR   | All output should be run through an escaping function (like
     |         | esc_html_e() or esc_attr_e()), found '_e'.
     |         | (WordPress.Security.EscapeOutput.UnsafePrintingFunction)
 230 | ERROR   | All output should be run through an escaping function (see the
     |         | Security sections in the WordPress Developer Handbooks), found
     |         | 'sanitize_title'.
     |         | (WordPress.Security.EscapeOutput.OutputNotEscaped)
 232 | ERROR   | All output should be run through an escaping function (see the
     |         | Security sections in the WordPress Developer Handbooks), found
     |         | '$this'. (WordPress.Security.EscapeOutput.OutputNotEscaped)
 236 | ERROR   | All output should be run through an escaping function (see the
     |         | Security sections in the WordPress Developer Handbooks), found
     |         | '$this'. (WordPress.Security.EscapeOutput.OutputNotEscaped)
 238 | ERROR   | All output should be run through an escaping function (see the
     |         | Security sections in the WordPress Developer Handbooks), found
     |         | '$this'. (WordPress.Security.EscapeOutput.OutputNotEscaped)
 239 | ERROR   | All output should be run through an escaping function (see the
     |         | Security sections in the WordPress Developer Handbooks), found
     |         | '$swatch_term'.
     |         | (WordPress.Security.EscapeOutput.OutputNotEscaped)
 246 | ERROR   | All output should be run through an escaping function (see the
     |         | Security sections in the WordPress Developer Handbooks), found
     |         | '$style'. (WordPress.Security.EscapeOutput.OutputNotEscaped)
 247 | ERROR   | All output should be run through an escaping function (like
     |         | esc_html_e() or esc_attr_e()), found '_e'.
     |         | (WordPress.Security.EscapeOutput.UnsafePrintingFunction)
 249 | ERROR   | All output should be run through an escaping function (see the
     |         | Security sections in the WordPress Developer Handbooks), found
     |         | '$this'. (WordPress.Security.EscapeOutput.OutputNotEscaped)
 251 | ERROR   | All output should be run through an escaping function (see the
     |         | Security sections in the WordPress Developer Handbooks), found
     |         | '$swatch_term'.
     |         | (WordPress.Security.EscapeOutput.OutputNotEscaped)
 252 | ERROR   | All output should be run through an escaping function (see the
     |         | Security sections in the WordPress Developer Handbooks), found
     |         | '$swatch_term'.
     |         | (WordPress.Security.EscapeOutput.OutputNotEscaped)
 253 | ERROR   | All output should be run through an escaping function (see the
     |         | Security sections in the WordPress Developer Handbooks), found
     |         | '$swatch_term'.
     |         | (WordPress.Security.EscapeOutput.OutputNotEscaped)
 256 | ERROR   | All output should be run through an escaping function (see the
     |         | Security sections in the WordPress Developer Handbooks), found
     |         | '$this'. (WordPress.Security.EscapeOutput.OutputNotEscaped)
 257 | ERROR   | All output should be run through an escaping function (see the
     |         | Security sections in the WordPress Developer Handbooks), found
     |         | '$this'. (WordPress.Security.EscapeOutput.OutputNotEscaped)
 258 | ERROR   | All output should be run through an escaping function (see the
     |         | Security sections in the WordPress Developer Handbooks), found
     |         | '$swatch_term'.
     |         | (WordPress.Security.EscapeOutput.OutputNotEscaped)
 260 | ERROR   | All output should be run through an escaping function (like
     |         | esc_html_e() or esc_attr_e()), found '_e'.
     |         | (WordPress.Security.EscapeOutput.UnsafePrintingFunction)
 262 | ERROR   | All output should be run through an escaping function (like
     |         | esc_html_e() or esc_attr_e()), found '_e'.
     |         | (WordPress.Security.EscapeOutput.UnsafePrintingFunction)
 273 | ERROR   | Processing form data without nonce verification.
     |         | (WordPress.Security.NonceVerification.Missing)
 275 | ERROR   | $_POST['product_attribute_meta'] not unslashed before
     |         | sanitization. Use wp_unslash() or similar
     |         | (WordPress.Security.ValidatedSanitizedInput.MissingUnslash)
 275 | ERROR   | Detected usage of a non-sanitized input variable:
     |         | $_POST['product_attribute_meta']
     |         | (WordPress.Security.ValidatedSanitizedInput.InputNotSanitized)
 275 | ERROR   | Processing form data without nonce verification.
     |         | (WordPress.Security.NonceVerification.Missing)
 330 | WARNING | Use of a direct database call is discouraged.
     |         | (WordPress.DB.DirectDatabaseQuery.DirectQuery)
 330 | WARNING | Direct database call without caching detected. Consider using
     |         | wp_cache_get() / wp_cache_set() or wp_cache_delete().
     |         | (WordPress.DB.DirectDatabaseQuery.NoCaching)
 350 | WARNING | Use of a direct database call is discouraged.
     |         | (WordPress.DB.DirectDatabaseQuery.DirectQuery)
 350 | WARNING | Direct database call without caching detected. Consider using
     |         | wp_cache_get() / wp_cache_set() or wp_cache_delete().
     |         | (WordPress.DB.DirectDatabaseQuery.NoCaching)
 350 | ERROR   | Use placeholders and $wpdb->prepare(); found $sql
     |         | (WordPress.DB.PreparedSQL.NotPrepared)
 351 | WARNING | Use of a direct database call is discouraged.
     |         | (WordPress.DB.DirectDatabaseQuery.DirectQuery)
 351 | WARNING | Direct database call without caching detected. Consider using
     |         | wp_cache_get() / wp_cache_set() or wp_cache_delete().
     |         | (WordPress.DB.DirectDatabaseQuery.NoCaching)
 352 | WARNING | Use of a direct database call is discouraged.
     |         | (WordPress.DB.DirectDatabaseQuery.DirectQuery)
 352 | WARNING | Direct database call without caching detected. Consider using
     |         | wp_cache_get() / wp_cache_set() or wp_cache_delete().
     |         | (WordPress.DB.DirectDatabaseQuery.NoCaching)
--------------------------------------------------------------------------------


FILE: ...rce-variation-swatches-and-photos/classes/class-wc-ex-product-data-tab.php
--------------------------------------------------------------------------------
FOUND 7 ERRORS AFFECTING 3 LINES
--------------------------------------------------------------------------------
 46 | ERROR | All output should be run through an escaping function (see the
    |       | Security sections in the WordPress Developer Handbooks), found
    |       | '$this'. (WordPress.Security.EscapeOutput.OutputNotEscaped)
 53 | ERROR | All output should be run through an escaping function (see the
    |       | Security sections in the WordPress Developer Handbooks), found
    |       | '$this'. (WordPress.Security.EscapeOutput.OutputNotEscaped)
 53 | ERROR | All output should be run through an escaping function (see the
    |       | Security sections in the WordPress Developer Handbooks), found
    |       | '$this'. (WordPress.Security.EscapeOutput.OutputNotEscaped)
 53 | ERROR | All output should be run through an escaping function (see the
    |       | Security sections in the WordPress Developer Handbooks), found
    |       | '$this'. (WordPress.Security.EscapeOutput.OutputNotEscaped)
 53 | ERROR | All output should be run through an escaping function (see the
    |       | Security sections in the WordPress Developer Handbooks), found
    |       | '$this'. (WordPress.Security.EscapeOutput.OutputNotEscaped)
 59 | ERROR | All output should be run through an escaping function (see the
    |       | Security sections in the WordPress Developer Handbooks), found
    |       | '$this'. (WordPress.Security.EscapeOutput.OutputNotEscaped)
 59 | ERROR | All output should be run through an escaping function (see the
    |       | Security sections in the WordPress Developer Handbooks), found
    |       | '$this'. (WordPress.Security.EscapeOutput.OutputNotEscaped)
--------------------------------------------------------------------------------


FILE: ...woocommerce-variation-swatches-and-photos/classes/class-wc-swatch-term.php
--------------------------------------------------------------------------------
FOUND 2 ERRORS AFFECTING 1 LINE
--------------------------------------------------------------------------------
 107 | ERROR | Detected usage of a possibly undefined superglobal array index:
     |       | $_SERVER['REQUEST_URI']. Check that the array index exists
     |       | before using it.
     |       | (WordPress.Security.ValidatedSanitizedInput.InputNotValidated)
 107 | ERROR | Detected usage of a non-sanitized input variable:
     |       | $_SERVER['REQUEST_URI']
     |       | (WordPress.Security.ValidatedSanitizedInput.InputNotSanitized)
--------------------------------------------------------------------------------


FILE: ...-variation-swatches-and-photos/woocommerce-swatches-template-functions.php
--------------------------------------------------------------------------------
FOUND 9 ERRORS AND 2 WARNINGS AFFECTING 7 LINES
--------------------------------------------------------------------------------
  28 | WARNING | Processing form data without nonce verification.
     |         | (WordPress.Security.NonceVerification.Recommended)
  28 | WARNING | Processing form data without nonce verification.
     |         | (WordPress.Security.NonceVerification.Recommended)
  28 | ERROR   | Detected usage of a non-sanitized input variable:
     |         | $_REQUEST[$selected_key]
     |         | (WordPress.Security.ValidatedSanitizedInput.InputNotSanitized)
  55 | ERROR   | All output should be run through an escaping function (see the
     |         | Security sections in the WordPress Developer Handbooks), found
     |         | '$id'. (WordPress.Security.EscapeOutput.OutputNotEscaped)
  55 | ERROR   | All output should be run through an escaping function (see the
     |         | Security sections in the WordPress Developer Handbooks), found
     |         | 'apply_filters'.
     |         | (WordPress.Security.EscapeOutput.OutputNotEscaped)
  78 | ERROR   | All output should be run through an escaping function (see the
     |         | Security sections in the WordPress Developer Handbooks), found
     |         | '$swatch_term'.
     |         | (WordPress.Security.EscapeOutput.OutputNotEscaped)
  88 | ERROR   | All output should be run through an escaping function (see the
     |         | Security sections in the WordPress Developer Handbooks), found
     |         | '$swatch_term'.
     |         | (WordPress.Security.EscapeOutput.OutputNotEscaped)
  97 | ERROR   | All output should be run through an escaping function (see the
     |         | Security sections in the WordPress Developer Handbooks), found
     |         | '$id'. (WordPress.Security.EscapeOutput.OutputNotEscaped)
  97 | ERROR   | All output should be run through an escaping function (see the
     |         | Security sections in the WordPress Developer Handbooks), found
     |         | 'apply_filters'.
     |         | (WordPress.Security.EscapeOutput.OutputNotEscaped)
 130 | ERROR   | Detected usage of a non-sanitized input variable:
     |         | $_REQUEST[$selected_key]
     |         | (WordPress.Security.ValidatedSanitizedInput.InputNotSanitized)
 226 | ERROR   | All output should be run through an escaping function (see the
     |         | Security sections in the WordPress Developer Handbooks), found
     |         | '$selected'.
     |         | (WordPress.Security.EscapeOutput.OutputNotEscaped)
--------------------------------------------------------------------------------


FILE: ...s/woocommerce-variation-swatches-and-photos/woo-includes/woo-functions.php
--------------------------------------------------------------------------------
FOUND 1 ERROR AFFECTING 1 LINE
--------------------------------------------------------------------------------
 86 | ERROR | All output should be run through an escaping function (see the
    |       | Security sections in the WordPress Developer Handbooks), found
    |       | '$message'. (WordPress.Security.EscapeOutput.OutputNotEscaped)
--------------------------------------------------------------------------------

Time: 197ms; Memory: 10MB


✖ Security issues found
ℹ Run with --fix to auto-fix some issues
