Unescaped parameter $action_query used in $wpdb->query($action_query)\n$action_query assigned unsafely at line 106:\n $action_query = ''\n$action used without escaping.
Unescaped parameter $actions used in $wpdb->query("ALTER TABLE {$actions} ADD on_event VARCHAR(155) NULL DEFAULT 'DEFAULT.PROCESS'")\n$actions assigned unsafely at line 16:\n $actions = Record_Action_Result_Model::table()
Unescaped parameter $actions used in $wpdb->query("ALTER TABLE {$actions} DROP COLUMN on_event")\n$actions assigned unsafely at line 39:\n $actions = Record_Action_Result_Model::table()
Unescaped parameter $actions_meta_sql[ 'insert' ] used in $wpdb->query($wpdb->prepare(\n "\n INSERT INTO {$wpdb->prefix}nf3_action_meta ( {$actions_meta_sql[ 'insert' ]} )\n SELECT {$actions_meta_sql[ 'select' ]}\n FROM {$wpdb->prefix}nf3_action_meta\n WHERE parent_id = %d;\n ", $new_action_id, $old_action->id\n ))\n$actions_meta_sql[ 'insert' ] used without escaping.
Unescaped parameter $actions_sql[ 'insert' ] used in $wpdb->query($wpdb->prepare(\n "\n INSERT INTO {$wpdb->prefix}nf3_actions ( {$actions_sql[ 'insert' ]} )\n SELECT {$actions_sql[ 'select' ]}\n FROM {$wpdb->prefix}nf3_actions\n WHERE id = %d\n ", $new_form_id, $old_action->id\n ))\n$actions_sql[ 'insert' ] used without escaping.
Affected Plugins
Plugins that have instances of this rule violation