A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.

Multiple placeholders in translatable strings should be ordered. Expected "%1$s, %2$s, %3$s, %4$s", but got "%s, %s, %s, %s" in '%sThis post contains a sensitive short-code %s, that may allow others to sign-up with distinguished roles. If unsure, remove the short-code before publishing (recommended) %sas this may be exploited as a security vulnerability.%s'.

Not using strict comparison for in_array; supply true for $strict argument.

Scripts must be registered/enqueued via wp_enqueue_script()

Opening PHP tag must be on a line by itself

Opening PHP tag must be on a line by itself

Multi-line function call not indented correctly; expected 24 spaces but found 20

Line indented incorrectly; expected at least 16 tabs, found 5

Closing PHP tag must be on a line by itself

Line indented incorrectly; expected at least 2 tabs, found 0

The following actions uses node12 which is deprecated and will be forced to run on node16: actions/checkout@v2, pat-s/always-upload-cache@v1.1.4. For more info: https://github.blog/changelog/2023-06-13-github-actions-all-actions-will-run-on-node16-instead-of-node12-by-default/

The following actions use a deprecated Node.js version and will be forced to run on node20: actions/checkout@v2, pat-s/always-upload-cache@v1.1.4. For more info: https://github.blog/changelog/2024-03-07-github-actions-all-actions-will-run-on-node20-instead-of-node16-by-default/

The `set-output` command is deprecated and will be disabled soon. Please upgrade to using Environment Files. For more information see: https://github.blog/changelog/2022-10-11-github-actions-deprecating-save-state-and-set-output-commands/

The `save-state` command is deprecated and will be disabled soon. Please upgrade to using Environment Files. For more information see: https://github.blog/changelog/2022-10-11-github-actions-deprecating-save-state-and-set-output-commands/

The `set-output` command is deprecated and will be disabled soon. Please upgrade to using Environment Files. For more information see: https://github.blog/changelog/2022-10-11-github-actions-deprecating-save-state-and-set-output-commands/

This comment is 54% valid code; is this commented out code?

wp_redirect() found. Using wp_safe_redirect(), along with the "allowed_redirect_hosts" filter if needed, can help avoid any chances of malicious redirects within code. It is also important to remember to call exit() after a redirect so that no other unwanted code is executed.

base64_encode() can be used to obfuscate code which is strongly discouraged. Please verify that the function is used for benign reasons.

This comment is 57% valid code; is this commented out code?

The method parameter $post_ID is never used

Use placeholders and $wpdb->prepare(); found $sql

The method parameter $userdata is never used

The method parameter $form_id is never used

The method parameter $form_settings is never used