Unescaped parameter $category_table used in $wpdb->get_row($wpdb->prepare( \t\t\t\t\t"SELECT * FROM $category_table WHERE cli_cookie_category_name = %s", \t\t\t\t\t$category\n\t\t\t\t))\n$category_table assigned unsafely at line 1081:\n $category_table = $wpdb->prefix . $this->category_table\nNote: sanitize_text_field() is not a safe escaping function.
Unescaped parameter $cookies_table used in $wpdb->get_row($wpdb->prepare( \t\t\t\t\t\t"SELECT * FROM $cookies_table WHERE cookie_id = %s", \t\t\t\t\t\t$cookie_id\n\t\t\t\t\t))\n$cookies_table assigned unsafely at line 1115:\n $cookies_table = $wpdb->prefix . $this->cookies_table\nNote: sanitize_text_field() is not a safe escaping function.
Unescaped parameter $languages used in $wpdb->query("DELETE from {$wpdb->prefix}cmplz_cookies where language NOT IN ('" . implode( "','", $languages ) . "')")\n$languages assigned unsafely at line 117:\n $languages = COMPLIANZ::$banner_loader->get_supported_languages()\n$banner_loader used without escaping.
Unescaped parameter $query used in $wpdb->get_results($query)\n$query assigned unsafely at line 137:\n $query = "SELECT $cases FROM $wpdb->posts WHERE ($wpdb->posts.post_type = '$cpt' AND $wpdb->posts.post_status<>'trash')"\n$cases assigned unsafely at line 136:\n $cases = join( ',', $cases )\n$cases assigned unsafely at line 134:\n $cases[] = "SUM(CASE WHEN $wpdb->posts.post_name LIKE '$id%' THEN 1 ELSE 0 END) as '$id'"\n$cpt assigned unsafely at line 130:\n $cpt = CPT::type()\n$id assigned unsafely at line 133:\n $id = $page->id()\n$page assigned unsafely at line 123:\n $page = Wpautoterms::get_legal_page( $page_id )\n$page_id assigned unsafely at line 119:\n $page_id = isset( $_REQUEST['page_name'] ) ? sanitize_text_field( $_REQUEST['page_name'] ) : ''\nNote: sanitize_text_field() is not a safe escaping function.
Affected Plugins
Plugins that have instances of this rule violation
Unescaped parameter $records_table used in $wpdb->query("DROP TABLE IF EXISTS {$records_table}")\n$records_table assigned unsafely at line 119:\n $records_table = $wpdb->prefix . 'wpconsent_consent_logs'