Unescaped parameter $sql used in $wpdb->query($sql)\n$sql assigned unsafely at line 239:\n $sql = "\n\t\t\tUPDATE $wpdb->users\n\t\t\tSET user_nicename = CASE ID\n\t\t\t{$when_sql}\n\t\t\tELSE user_nicename\n\t\t\tEND\n\t\t\t{$where_sql}\n\t\t"\n$where_sql assigned unsafely at line 235:\n $where_sql = 'WHERE ID IN ( ' . implode( ',', $where ) . ' )'\n$where_sql assigned unsafely at line 233:\n $where_sql = ''
Affected Plugins
Plugins that have instances of this rule violation