Unescaped parameter $column_name used in $wpdb->get_var($wpdb->prepare(\n\t\t\t\t"SELECT {$column_name} FROM {$wpdb->posts} WHERE ID=%d AND post_type=%s", \t\t\t\t$action_id,\n\t\t\t\tself::POST_TYPE\n\t\t\t))
Unescaped parameter $insert_sql used in $wpdb->query($insert_sql)\n$insert_sql assigned unsafely at line 118:\n $insert_sql = $this->build_insert_sql( $data, $unique )\n$data assigned unsafely at line 100:\n $data = array(\n\t\t\t\t'hook' => $action->get_hook(),\n\t\t\t\t'status' => ( $action->is_finished() ? self::STATUS_COMPLETE : self::STATUS_PENDING ),\n\t\t\t\t'scheduled_date_gmt' => $this->get_scheduled_date_string( $action, $date ),\n\t\t\t\t'scheduled_date_local' => $this->get_scheduled_date_string_local( $action, $date ),\n\t\t\t\t'schedule' => serialize( $action->get_schedule() ), // phpcs:ignore WordPress.PHP.DiscouragedPHPFunctions.serialize_serialize\n\t\t\t\t'group_id' => current( $this->get_group_ids( $action->get_group() ) ),\n\t\t\t\t'priority' => $action->get_priority(),\n\t\t\t)\n$unique used without escaping.\n$action used without escaping.\n$date used without escaping.
Affected Plugins
Plugins that have instances of this rule violation
Unescaped parameter $query used in $wpdb->query($query)\n$query assigned unsafely at line 134:\n $query = "\n\t\t\t\tALTER TABLE {$table_name}\n\t\t\t\tMODIFY COLUMN scheduled_date_gmt datetime NULL default '{$default_date}',\n\t\t\t\tMODIFY COLUMN scheduled_date_local datetime NULL default '{$default_date}',\n\t\t\t\tMODIFY COLUMN last_attempt_gmt datetime NULL default '{$default_date}',\n\t\t\t\tMODIFY COLUMN last_attempt_local datetime NULL default '{$default_date}'\n\t\t"\n$table_name assigned unsafely at line 129:\n $table_name = $wpdb->prefix . 'actionscheduler_actions'\n$table_list assigned unsafely at line 130:\n $table_list = $wpdb->get_col( "SHOW TABLES LIKE '{$table_name}'" )
Unescaped parameter $query used in $wpdb->query($query)\n$query assigned unsafely at line 92:\n $query = "\n\t\t\t\tALTER TABLE {$table_name}\n\t\t\t\tMODIFY COLUMN log_date_gmt datetime NULL default '{$default_date}',\n\t\t\t\tMODIFY COLUMN log_date_local datetime NULL default '{$default_date}'\n\t\t\t"\n$table_name assigned unsafely at line 87:\n $table_name = $wpdb->prefix . 'actionscheduler_logs'\n$table_list assigned unsafely at line 88:\n $table_list = $wpdb->get_col( "SHOW TABLES LIKE '{$table_name}'" )
Unescaped parameter $query_count used in $wpdb->get_var($query_count)\n$query_count assigned unsafely at line 500:\n $query_count = "SELECT COUNT({$this->ID}) FROM {$this->table_name} {$where}"\n$where assigned unsafely at line 493:\n $where = ''\n$sql assigned unsafely at line 496:\n $sql = "SELECT $columns FROM {$this->table_name} {$where} {$order} {$limit} {$offset}"\n$columns assigned unsafely at line 488:\n $columns = '`' . implode( '`, `', $this->get_table_columns() ) . '`'\n$order assigned unsafely at line 481:\n $order = $this->get_items_query_order()\n$limit assigned unsafely at line 479:\n $limit = $this->get_items_query_limit()\n$offset assigned unsafely at line 480:\n $offset = $this->get_items_query_offset()