Unescaped parameter $escaped_list used in $wpdb->get_results("SELECT * FROM {$wpdb->prefix}woocommerce_shipping_zone_methods " .\n\t\t\t"LEFT JOIN {$wpdb->prefix}woocommerce_shipping_zones " .\n\t\t\t"ON {$wpdb->prefix}woocommerce_shipping_zone_methods.zone_id = {$wpdb->prefix}woocommerce_shipping_zones.zone_id " .\n\t\t\t\t\t\t\t\t\t\t\t\t"WHERE method_id IN ({$escaped_list}) " .\n\t\t\t'ORDER BY zone_order, instance_id;')\n$escaped_list assigned unsafely at line 550:\n $escaped_list .= ','\n$escaped_list assigned unsafely at line 547:\n $escaped_list = ''\n$shipping_service used without escaping.\n$service_ids used without escaping.
Affected Plugins
Plugins that have instances of this rule violation