Unescaped parameter $table_name used in $wpdb->get_results("SELECT * FROM $table_name ORDER BY created_at DESC LIMIT 1")\n$table_name assigned unsafely at line 9:\n $table_name = $wpdb->prefix . 'disclaimerInfor'\n$valor used without escaping.\n$welcome_text assigned unsafely at line 16:\n $welcome_text = 'Congratulations, you just completed the installation!'\n$result assigned unsafely at line 29:\n $result = $wpdb->get_results("SELECT * FROM $table_name ORDER BY created_at DESC LIMIT 1")
Affected Plugins
Plugins that have instances of this rule violation