Unescaped parameter $actions_meta used in $wpdb->get_var("SELECT COUNT(*) FROM {$actions_meta} AS am WHERE am.meta_key = 'post' AND am.meta_value = {$post_id}")\n$actions_meta assigned unsafely at line 113:\n $actions_meta = AutomatorWP()->db->actions_meta
Unescaped parameter $automations used in $wpdb->query("UPDATE {$automations} AS a SET a.type = 'user' WHERE a.type = ''")\n$automations assigned unsafely at line 66:\n $automations = AutomatorWP()->db->automations
Unescaped parameter $automations used in $wpdb->get_results($wpdb->prepare( "\r\n SELECT a.id\r\n FROM {$automations} AS a \r\n LEFT JOIN {$automations_meta} AS am1 ON ( am1.id = a.id AND am1.meta_key = 'schedule_run' )\r\n LEFT JOIN {$automations_meta} AS am2 ON ( am2.id = a.id AND am2.meta_key = 'recurring_run' )\r\n LEFT JOIN {$automations_meta} AS am3 ON ( am3.id = a.id AND am3.meta_key = 'next_run_date' )\r\n WHERE a.type IN ( {$patterns} ) \r\n AND a.status = 'active' \r\n AND ( am1.meta_value = 'on' OR am2.meta_value = 'on' )\r\n AND am3.meta_value <= '{$datetime}'",\r\n $loop_types\r\n ))\n$automations assigned unsafely at line 59:\n $automations = AutomatorWP()->db->automations
Affected Plugins
Plugins that have instances of this rule violation
Unescaped parameter $automations_meta used in $wpdb->get_results("\r\n SELECT id\r\n FROM {$automations_meta} \r\n WHERE meta_key = 'schedule_run'\r\n AND meta_value = 'on'\r\n AND id IN (\r\n SELECT id\r\n FROM {$automations_meta}\r\n WHERE meta_key = 'schedule_run_datetime'\r\n AND meta_value > {$timestamp} \r\n ) ")\n$automations_meta assigned unsafely at line 117:\n $automations_meta = AutomatorWP()->db->automations_meta
Unescaped parameter $boards used in $wpdb->get_results("SELECT boardid FROM {$boards}")\n$boards assigned unsafely at line 27:\n $boards = WPF()->tables->boards