Unescaped parameter $metakey_query used in $wpdb->get_results($metakey_query)\n$metakey_query assigned unsafely at line 139:\n $metakey_query = "SELECT * FROM $wpdb->postmeta WHERE `post_id` = $menu_item->ID"\n$menu_item->ID used without escaping.
Unescaped parameter $query used in $wpdb->get_results($wpdb->prepare( $query, $errorid, $type ))\n$query assigned unsafely at line 174:\n $query .= 'order by ignre'\n$query assigned unsafely at line 171:\n $query .= ' and ignre != 2 '\n$query assigned unsafely at line 167:\n $query = 'SELECT * FROM ' . $wpdb->prefix . 'wp_ada_compliance_basic where postid = %d and type = %s '\n$results assigned unsafely at line 176:\n $results = $wpdb->get_results( $wpdb->prepare( $query, $errorid, $type ), ARRAY_A )\n$errorid assigned unsafely at line 44:\n $errorid = ''\n$type assigned unsafely at line 120:\n $type = sanitize_text_field( wp_unslash( $_GET['type'] ) )\nNote: sanitize_text_field() is not a safe escaping function.\n$report_filtered_errors assigned unsafely at line 31:\n $report_filtered_errors = get_option( 'wp_ada_compliance_basic_report_filtered_errors', 'scanonly' )\n$postid assigned unsafely at line 74:\n $postid = sanitize_text_field( wp_unslash( $_GET['postid'] ) )\n$_GET['type'] used without escaping.\n$_GET['postid'] used without escaping.
Affected Plugins
Plugins that have instances of this rule violation
Unescaped parameter $query used in $wpdb->get_results($wpdb->prepare( $query, $query_variables ))\n$query assigned unsafely at line 883:\n $query .= $totalquery\n$totalquery assigned unsafely at line 879:\n $totalquery .= ' and postid = %d '\n$errorid used without escaping.
Unescaped parameter $query used in $wpdb->get_results($wpdb->prepare( $query, $query_variables ))\n$query assigned unsafely at line 923:\n $query .= ' and errorcode = %s '\n$query_variables[] used without escaping.
Unescaped parameter $query used in $wpdb->get_results($wpdb->prepare( $query, $query_variables_main ))\n$query assigned unsafely at line 1047:\n $query .= 'and date >= DATE_SUB(NOW(),INTERVAL ' . $interval . ') order by date DESC, id DESC '\n$interval assigned unsafely at line 1036:\n $interval = '1 HOUR'