Unescaped parameter $insert used in $wpdb->query($new_query . $insert)\n$insert assigned unsafely at line 135:\n $insert .= ', '\n$insert assigned unsafely at line 117:\n $insert = ''\n$new_post_id assigned unsafely at line 87:\n $new_post_id = wp_insert_post( array(\r\n\t\t\t'post_title' => $post->post_title . ' - ' . __( 'Copy', 'athemes-addons-for-elementor-lite' ),\r\n\t\t\t'post_content' => $post->post_content,\r\n\t\t\t'post_status' => 'draft',\r\n\t\t\t'post_type' => $post->post_type,\r\n\t\t\t'post_excerpt' => $post->post_excerpt,\r\n\t\t\t'post_parent' => $post->post_parent,\r\n\t\t\t'post_password' => $post->post_password,\r\n\t\t\t'post_author' => $current_user->ID,\r\n\t\t) )\n$meta_key assigned unsafely at line 121:\n $meta_key = sanitize_text_field( $meta_info->meta_key )\nNote: sanitize_text_field() is not a safe escaping function.\n$meta_value assigned unsafely at line 122:\n $meta_value = $meta_info->meta_value\n$post_meta assigned unsafely at line 112:\n $post_meta = $wpdb->get_results( $wpdb->prepare( "SELECT meta_key, meta_value FROM $wpdb->postmeta WHERE post_id = %d", $post_id ) )\n$meta_info used without escaping.\n$meta_info->meta_key used without escaping.\n$post->post_title used without escaping.\n$post->post_content used without escaping.\n$post->post_type used without escaping.\n$post->post_excerpt used without escaping.\n$post->post_parent used without escaping.\n$post->post_password used without escaping.\n$current_user->ID used without escaping.\n$meta_info->meta_value used without escaping.
Affected Plugins
Plugins that have instances of this rule violation