| ERROR | PluginCheck.Security.DirectDB.UnescapedDBParameter | Unescaped parameter $sql used in $wpdb->get_col($sql)\n$sql assigned unsafely at line 90:\n $sql = $wpdb->prepare(\r\n\t\t\t"SELECT $col FROM $tbl WHERE $idCol IN ($ids_placeholder)",\r\n\t\t\t...$ids\r\n\t\t)\n$col assigned unsafely at line 85:\n $col = '`' . esc_sql( $column_name ) . '`'\n$tbl assigned unsafely at line 84:\n $tbl = '`' . esc_sql( $prefix . $table_name ) . '`'\n$id_column_name used without escaping. | includes/models/class-adbc-common-model.php:96:21 | Security |
| ERROR | WordPress.DB.PreparedSQL.NotPrepared | Use placeholders and $wpdb->prepare(); found $sql | includes/models/class-adbc-common-model.php:96:30 | Security |
| ERROR | PluginCheck.Security.DirectDB.UnescapedDBParameter | Unescaped parameter $postmeta used in $wpdb->get_var("\r\n\t\t\t\tSELECT COUNT(*)\r\n\t\t\t\tFROM {$postmeta} main\r\n\t\t\t\tLEFT JOIN {$posts} p ON p.ID = main.post_id\r\n\t\t\t\tWHERE p.ID IS NULL\r\n\t\t\t")\n$postmeta assigned unsafely at line 571:\n $postmeta = $site['prefix'] . 'postmeta'\n$site['prefix'] used without escaping. | includes/models/class-adbc-posts-meta.php:573:26 | Security |
| ERROR | WordPress.WP.AlternativeFunctions.unlink_unlink | unlink() is discouraged. Use wp_delete_file() to delete a file. | includes/classes/class-adbc-automation.php:351:10 | Plugin Repo |
| ERROR | WordPress.WP.AlternativeFunctions.file_system_operations_fopen | File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fopen(). | includes/classes/class-adbc-migration.php:725:16 | Plugin Repo |
| ERROR | WordPress.WP.AlternativeFunctions.file_system_operations_fclose | File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fclose(). | includes/classes/class-adbc-migration.php:728:7 | Plugin Repo |
| ERROR | PluginCheck.Security.DirectDB.UnescapedDBParameter | Unescaped parameter $sql_rows used in $wpdb->get_results($sql_rows)\n$sql_rows assigned unsafely at line 180:\n $sql_rows = $wpdb->prepare(\r\n\t\t\t"SELECT \r\n\t\t\t\t`TABLE_NAME` AS `table_name`, \r\n\t\t\t\t(`DATA_LENGTH` + `INDEX_LENGTH`) AS `size`, \r\n\t\t\t\t`TABLE_ROWS` AS `rows`, \r\n\t\t\t\t`DATA_FREE` as `overhead`, \r\n\t\t\t\t`ENGINE` AS `type`\r\n\t\t\tFROM \r\n\t\t\t\t`information_schema`.`TABLES`\r\n\t\t\tWHERE \r\n\t\t\t\t`TABLE_SCHEMA` = %s\r\n\t\t\t$order_by_sql\r\n\t\t\tLIMIT %d OFFSET %d",\r\n\t\t\tDB_NAME,\r\n\t\t\tabsint( $limit ),\r\n\t\t\tabsint( $offset )\r\n\t\t)\n$order_by_sql assigned unsafely at line 175:\n $order_by_sql = isset( $allowed_columns[ $sort_col ] )\r\n\t\t\t\t? "ORDER BY {$allowed_columns[ $sort_col ]} {$sort_dir}"\r\n\t\t\t\t: ''\n$sort_dir assigned unsafely at line 149:\n $sort_dir = $sort_dir === 'DESC' ? 'DESC' : 'ASC'\n$sort_col assigned unsafely at line 147:\n $sort_col = $sort_by ?? ''\n$prefix_list assigned unsafely at line 153:\n $prefix_list = ADBC_Sites::instance()->get_all_prefixes()\n$sort_by used without escaping. | includes/models/class-adbc-tables.php:198:17 | Security |
| ERROR | WordPress.DB.PreparedSQL.NotPrepared | Use placeholders and $wpdb->prepare(); found $sql_rows | includes/models/class-adbc-tables.php:198:30 | Security |
| ERROR | WordPress.WP.AlternativeFunctions.file_system_operations_fwrite | File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fwrite(). | includes/classes/class-adbc-migration.php:802:5 | Plugin Repo |
| ERROR | WordPress.WP.AlternativeFunctions.file_system_operations_fwrite | File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fwrite(). | includes/classes/class-adbc-migration.php:806:5 | Plugin Repo |