fix: avoid calling wp_kses with null software versions

[javiercasares]

Summary

• guard detected software versions before sanitising them with wp_kses
• return null when detection helpers yield empty values to avoid PHP 8.1+ deprecation warnings

Testing

• vendor/bin/phpunit (fails: WordPress test library is not installed in the container)
• vendor/bin/phpstan analyse --memory-limit=1G wpvulnerability-software.php (fails: plugin helper functions are not autoloaded for standalone analysis)
• vendor/bin/phpcs wpvulnerability-software.php (fails: repository PHPCS configuration references a missing PHPCompatibilityWP sniff)

---

https://chatgpt.com/codex/tasks/task_b_69048ff5fb60832180ca626377fa6725

[amplify-security]

🔍 Amplify code check status:  

⚠️ 0 issues detected in   📄 1 file and   ❇️ 46 lines of code   🛠️ using Opengrep

Last updated by commit d604eeb at 2025-10-31 10:39:57 UTC.

[sonarqubecloud]

Quality Gate passed

Issues
1 New issue
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud