Unescaped parameter $table_name used in $wpdb->get_results("SELECT * FROM $table_name")\n$table_name assigned unsafely at line 144:\n $table_name = $wpdb->prefix . "iconfonts"\n$results assigned unsafely at line 145:\n $results = $wpdb->get_results( "SELECT * FROM $table_name")
Unescaped parameter $table_name used in $wpdb->get_results("SELECT * FROM $table_name")\n$table_name assigned unsafely at line 278:\n $table_name = $wpdb->prefix . "iconfonts"\n$results assigned unsafely at line 279:\n $results = $wpdb->get_results( "SELECT * FROM $table_name")
Unescaped parameter $table_name used in $wpdb->get_row($wpdb->prepare("SELECT path FROM $table_name WHERE id = %d", $id))
Affected Plugins
Plugins that have instances of this rule violation