Unescaped parameter $available_loc_query used in $wpdb->get_col($available_loc_query)\n$available_loc_query assigned unsafely at line 1267:\n $available_loc_query .= "\n\t\t\tAND pm.meta_key \t\t= 'property_status'\n\t\t\tAND pm.meta_value \t\tIN ('" . implode( "','", $property_status ) . "')"\n$property_status assigned unsafely at line 1265:\n $property_status = array_map( 'trim', explode( ',', $property_status ) )
Unescaped parameter $collate used in $wpdb->query("CREATE TABLE {$wpdb->prefix}babe_category_deactivate_schedule (\n id int NOT NULL AUTO_INCREMENT,\n category_id bigint(20) DEFAULT NULL,\n deactivate_date_from datetime DEFAULT NULL,\n deactivate_date_to datetime DEFAULT NULL,\n PRIMARY KEY (id),\n KEY category_id (category_id),\n KEY deactivate_date_from (deactivate_date_from),\n KEY deactivate_date_to (deactivate_date_to),\n KEY category_deactivate_date_from_to (category_id, deactivate_date_from, deactivate_date_to)\n) $collate;")\n$collate assigned unsafely at line 199:\n $collate = ''
Unescaped parameter $delete_prepared used in $wpdb->query($delete_prepared)\n$delete_prepared assigned unsafely at line 658:\n $delete_prepared = $wpdb->prepare(\n "DELETE FROM ".self::$table_av_cal."\n\t\t\t\t\t\t WHERE booking_obj_id=%d\n\t\t\t\t\t\t\tAND date_from IN (%s)",\n array( $post_id_to, implode("','", $removed_dates) )\n )\n$table_av_cal used without escaping.