ERRORsecurity

UnescapedDBParameter

PluginCheck.Security.DirectDB.UnescapedDBParameter

Affected Plugins

On this page

Total Issues

Instances found

Total Impact

Active installations

Examples

Real messages found in scanned plugins

Unescaped parameter $querySql used in $wpdb->get_results($querySql)\n$querySql assigned unsafely at line 514:\n $querySql = $wpdb->prepare($querySql, $allParams)\n$querySql assigned unsafely at line 509:\n $querySql .= $sql\n$sql used without escaping.

Affected Plugins

Plugins that have instances of this rule violation

Ninjalytics (formerly Product Sales Report)

product-sales-report-for-woocommerce

issues

installs