Unescaped parameter $column_name used in $wpdb->get_var($wpdb->prepare(\n\t\t\t\t"SELECT {$column_name} FROM {$wpdb->posts} WHERE ID=%d AND post_type=%s", \t\t\t\t$action_id,\n\t\t\t\tself::POST_TYPE\n\t\t\t))
Unescaped parameter $insert_sql used in $wpdb->query($insert_sql)\n$insert_sql assigned unsafely at line 118:\n $insert_sql = $this->build_insert_sql( $data, $unique )\n$data assigned unsafely at line 100:\n $data = array(\n\t\t\t\t'hook' => $action->get_hook(),\n\t\t\t\t'status' => ( $action->is_finished() ? self::STATUS_COMPLETE : self::STATUS_PENDING ),\n\t\t\t\t'scheduled_date_gmt' => $this->get_scheduled_date_string( $action, $date ),\n\t\t\t\t'scheduled_date_local' => $this->get_scheduled_date_string_local( $action, $date ),\n\t\t\t\t'schedule' => serialize( $action->get_schedule() ), // phpcs:ignore WordPress.PHP.DiscouragedPHPFunctions.serialize_serialize\n\t\t\t\t'group_id' => current( $this->get_group_ids( $action->get_group() ) ),\n\t\t\t\t'priority' => $action->get_priority(),\n\t\t\t)\n$unique used without escaping.\n$action used without escaping.\n$date used without escaping.
Affected Plugins
Plugins that have instances of this rule violation
Unescaped parameter $item->query used in $wpdb->query($item->query)\n$item->query used without escaping.
Unescaped parameter $query used in $wpdb->get_results($query)\n$query assigned unsafely at line 53:\n $query = "\n\t\t\tSELECT\n\t\t\t\tmollie_customer.mollie_id,\n\t\t\t\tmollie_customer.test_mode,\n\t\t\t\tmollie_customer.name,\n\t\t\t\tmollie_customer.email\n\t\t\tFROM\n\t\t\t\t$wpdb->pronamic_pay_mollie_customer_users AS mollie_customer_user\n\t\t\t\t\tINNER JOIN\n\t\t\t\t$wpdb->pronamic_pay_mollie_customers AS mollie_customer\n\t\t\t\t\t\tON mollie_customer_user.customer_id = mollie_customer.id\n\t\t\tWHERE\n\t\t\t\t $where\n\t\t\t;\n\t\t"\n$where assigned unsafely at line 47:\n $where = '1 = 1'
Unescaped parameter $query used in $wpdb->query($query)\n$query assigned unsafely at line 134:\n $query = "\n\t\t\t\tALTER TABLE {$table_name}\n\t\t\t\tMODIFY COLUMN scheduled_date_gmt datetime NULL default '{$default_date}',\n\t\t\t\tMODIFY COLUMN scheduled_date_local datetime NULL default '{$default_date}',\n\t\t\t\tMODIFY COLUMN last_attempt_gmt datetime NULL default '{$default_date}',\n\t\t\t\tMODIFY COLUMN last_attempt_local datetime NULL default '{$default_date}'\n\t\t"\n$table_name assigned unsafely at line 129:\n $table_name = $wpdb->prefix . 'actionscheduler_actions'\n$table_list assigned unsafely at line 130:\n $table_list = $wpdb->get_col( "SHOW TABLES LIKE '{$table_name}'" )