UnescapedDBParameter

Unescaped parameter $query used in $wpdb->get_results($query)\n$query assigned unsafely at line 333:\n $query = $wpdb->prepare( $sql, $params )\n$sql assigned unsafely at line 331:\n $sql = apply_filters( 'irecommendthis_top_posts_sql', $sql, $params, $atts )\n$sql assigned unsafely at line 317:\n $sql .= ' AND p.post_type = %s'\n$params assigned unsafely at line 318:\n $params[] = $post_type\n$atts used without escaping.\n$post_type assigned unsafely at line 284:\n $post_type = sanitize_text_field( $atts['post_type'] )\nNote: sanitize_text_field() is not a safe escaping function.\n$atts['post_type'] used without escaping.

Unescaped parameter $query used in $wpdb->get_results($query)\n$query assigned unsafely at line 605:\n $query = self::build_db_logs_query(\n\t\t\t\t$filters,\n\t\t\t\t$limit,\n\t\t\t\t$offset,\n\t\t\t\t$order\n\t\t\t)\n$filters used without escaping.\n$limit used without escaping.\n$offset used without escaping.\n$order used without escaping.

Unescaped parameter $query used in $wpdb->query($query)\n$query assigned unsafely at line 663:\n $query = "SELECT {$columns} UNION ALL " . $query\n$columns assigned unsafely at line 660:\n $columns .= "'" . self::$_log_columns[ $i ] . "'"\n$_log_columns[$i] used without escaping.