UnescapedDBParameter

Unescaped parameter $Youzify_bookmark_table used in $wpdb->get_var($wpdb->prepare(\r\n "SELECT id FROM $Youzify_bookmark_table WHERE user_id = %d AND item_id = %d AND item_type = %s",\r\n $user_id, $item_id, $item_type\r\n ))

Unescaped parameter $Youzify_media_table used in $wpdb->get_var($wpdb->prepare( "SELECT count(*) FROM $Youzify_media_table WHERE user_id = %d ", $args['user_id'] ))

Unescaped parameter $Youzify_reviews_table used in $wpdb->get_var($wpdb->prepare( "SELECT AVG(rating) FROM $Youzify_reviews_table WHERE reviewed = %d", $user_id ))

Unescaped parameter $Youzify_reviews_table used in $wpdb->get_var($wpdb->prepare( "SELECT COUNT(*) FROM $Youzify_reviews_table WHERE reviewed = %d AND rating = '4'", $user_id ))

Unescaped parameter $Youzify_reviews_table used in $wpdb->get_var($wpdb->prepare( "SELECT reviewer FROM $Youzify_reviews_table WHERE id = %d", $review_id ))