Self-hosted, privacy-friendly stats for WordPress. Simple interface, no setup. Get detailed analytics with Burst Statistics.
| Code | Message | Location | Category | |
|---|---|---|---|---|
| ERROR | WordPress.DB.PreparedSQL.NotPrepared | Use placeholders and $wpdb->prepare(); found $custom_sql | includes/Admin/Statistics/class-query-data.php:865:4 | Security |
| ERROR | WordPress.DB.PreparedSQL.NotPrepared | Use placeholders and $wpdb->prepare(); found $sql | src/Frontend/Tracking/class-tracking.php:301:41 | Security |
| ERROR | PluginCheck.Security.DirectDB.UnescapedDBParameter | Unescaped parameter $item used in $wpdb->get_results("SELECT ID, name FROM {$wpdb->prefix}burst_{$item}s")\n$item used without escaping. | includes/Frontend/Tracking/class-tracking.php:464:23 | Security |
| ERROR | WordPress.DB.PreparedSQL.NotPrepared | Use placeholders and $wpdb->prepare(); found $sql | includes/Frontend/Tracking/class-tracking.php:738:41 | Security |
| ERROR | WordPress.DB.PreparedSQL.NotPrepared | Use placeholders and $wpdb->prepare(); found $values | includes/Frontend/Tracking/class-tracking.php:921:34 | Security |
| ERROR | WordPress.DB.PreparedSQL.NotPrepared | Use placeholders and $wpdb->prepare(); found $sql_string | includes/Frontend/class-frontend-statistics.php:184:5 | Security |
| ERROR | WordPress.DB.PreparedSQL.NotPrepared | Use placeholders and $wpdb->prepare(); found $sql_string | includes/Frontend/class-frontend-statistics.php:192:5 | Security |
| ERROR | WordPress.DB.PreparedSQL.NotPrepared | Use placeholders and $wpdb->prepare(); found $sql | includes/Frontend/class-frontend-statistics.php:463:33 | Security |
| ERROR | PluginCheck.Security.DirectDB.UnescapedDBParameter | Unescaped parameter $sql used in $wpdb->get_row($sql)\n$sql assigned unsafely at line 89:\n $sql = burst_loader()->admin->statistics->get_sql_table( $qd )\n$qd assigned unsafely at line 81:\n $qd = new Query_Data(\n\t\t\t[\n\t\t\t\t'date_start' => $start,\n\t\t\t\t'date_end' => $end,\n\t\t\t\t'select' => [ 'pageviews' ],\n\t\t\t]\n\t\t)\n$start used without escaping.\n$end used without escaping. | includes/Admin/class-milestones.php:90:20 | Security |
| ERROR | WordPress.DB.PreparedSQL.NotPrepared | Use placeholders and $wpdb->prepare(); found $sql | includes/Admin/class-milestones.php:90:29 | Security |
| 24.12.2025, 12:31:20 | 29s | 19 | 123 | 360 |
| 25.11.2025, 10:33:20 | 32s | 16 | 227 | 368 |
| 12.11.2025, 18:16:57 | 43s | 16 | 227 | 368 |