Unescaped parameter $query used in $wpdb->get_results($query)\n$query assigned unsafely at line 1099:\n $query = "SELECT DATE(timestamp) AS date, AVG(load_time) AS average_load_time\n FROM $table_name\n WHERE timestamp >= CURDATE() - INTERVAL 6 DAY\n AND NOT page_url LIKE 'wp-admin'\n GROUP BY DATE(timestamp)\n ORDER BY date"\n$table_name assigned unsafely at line 1086:\n $table_name = $wpdb->prefix . "wptools_page_load_times"
Unescaped parameter $table used in $wpdb->get_var("SHOW TABLES LIKE '$table'")\n$table assigned unsafely at line 542:\n $table = esc_attr($table)\nNote: esc_attr() is not a safe escaping function.
Unescaped parameter $table used in $wpdb->query("DROP TABLE IF EXISTS $table")\n$table assigned unsafely at line 38:\n $table = $wpdb->prefix . "wpmemory_log"
Unescaped parameter $table used in $wpdb->query("DROP TABLE IF EXISTS $table")\n$table assigned unsafely at line 41:\n $table = $wpdb->prefix . 'bill_catch_some_bots'\n$table assigned unsafely at line 38:\n $table = $wpdb->prefix . "wpmemory_log"
Affected Plugins
Plugins that have instances of this rule violation
Unescaped parameter $table used in $wpdb->query("DROP TABLE IF EXISTS $table")\n$table assigned unsafely at line 45:\n $table = $wpdb->prefix . 'bill_catch_bots'\n$table assigned unsafely at line 41:\n $table = $wpdb->prefix . 'bill_catch_some_bots'\n$table assigned unsafely at line 38:\n $table = $wpdb->prefix . "wpmemory_log"