Unescaped parameter $table_contents_sql used in $wpdb->get_results($table_contents_sql)\n$table_contents_sql assigned unsafely at line 1024:\n $table_contents_sql .= ' ORDER BY id ASC LIMIT 5'\n$table_contents_sql assigned unsafely at line 1022:\n $table_contents_sql = "SELECT * FROM {$table_name}"\n$is_partial assigned unsafely at line 1015:\n $is_partial = 'full' !== $type\n$start used without escaping.\n$table_name assigned unsafely at line 1017:\n $table_name = $wpdb->base_prefix . 'bp_invite_anyone'\n$type used without escaping.\n$total_table_contents assigned unsafely at line 1020:\n $total_table_contents = $wpdb->get_var( "SELECT COUNT(*) FROM {$table_name}" )
Unescaped parameter $table_name used in $wpdb->get_var("SELECT COUNT(*) FROM {$table_name}")\n$table_name assigned unsafely at line 1017:\n $table_name = $wpdb->base_prefix . 'bp_invite_anyone'\n$total_table_contents assigned unsafely at line 1020:\n $total_table_contents = $wpdb->get_var( "SELECT COUNT(*) FROM {$table_name}" )
Unescaped parameter $table_name used in $wpdb->get_var("SELECT COUNT(*) FROM {$table_name}")\n$table_name assigned unsafely at line 964:\n $table_name = $wpdb->base_prefix . 'bp_invite_anyone'\n$invite_count assigned unsafely at line 967:\n $invite_count = $wpdb->get_var( "SELECT COUNT(*) FROM {$table_name}" )
Affected Plugins
Plugins that have instances of this rule violation