Custom API for WP

Library files that are already in the WordPress core are not permitted.

Use placeholders and $wpdb->prepare(); found $final_get_query

Use placeholders and $wpdb->prepare(); found $sql_query

Unescaped parameter $query used in $wpdb->get_results($query)\n$query assigned unsafely at line 215:\n $query = self::build_prepared_select_query(\r\n\t\t\t\t$table,\r\n\t\t\t\t$column_names,\r\n\t\t\t\t$query_condition,\r\n\t\t\t\t$where_values\r\n\t\t\t)\n$table assigned unsafely at line 214:\n $table = $wpdb->prefix . 'mo_external_api_config'\n$column_names assigned unsafely at line 209:\n $column_names = '*'\n$query_condition assigned unsafely at line 199:\n $query_condition = ' WHERE ' . implode( ' AND ', $where_clauses )\n$where_values assigned unsafely at line 197:\n $where_values[] = $column_value\n$configuration_type assigned unsafely at line 184:\n $configuration_type = $row_filter['type']\n$where_clauses assigned unsafely at line 196:\n $where_clauses[] = '`' . esc_sql( $column_name ) . '` = %s'\n$column_value used without escaping.\n$row_filter['type'] used without escaping.\n$where_values[] used without escaping.

Use placeholders and $wpdb->prepare(); found $query

Unescaped parameter $query used in $wpdb->get_results($query)\n$query assigned unsafely at line 224:\n $query = self::build_prepared_select_query(\r\n\t\t\t\t$table,\r\n\t\t\t\t$column_names,\r\n\t\t\t\t$query_condition,\r\n\t\t\t\t$where_values\r\n\t\t\t)\n$table assigned unsafely at line 223:\n $table = $wpdb->prefix . 'mo_custom_endpoint_config'\n$table assigned unsafely at line 214:\n $table = $wpdb->prefix . 'mo_external_api_config'\n$column_names assigned unsafely at line 209:\n $column_names = '*'\n$query_condition assigned unsafely at line 199:\n $query_condition = ' WHERE ' . implode( ' AND ', $where_clauses )\n$where_values assigned unsafely at line 197:\n $where_values[] = $column_value\n$configuration_type assigned unsafely at line 184:\n $configuration_type = $row_filter['type']\n$where_clauses assigned unsafely at line 196:\n $where_clauses[] = '`' . esc_sql( $column_name ) . '` = %s'\n$column_value used without escaping.\n$row_filter['type'] used without escaping.\n$where_values[] used without escaping.

Use placeholders and $wpdb->prepare(); found $query

Unescaped parameter $query used in $wpdb->get_results($query)\n$query assigned unsafely at line 308:\n $query = self::build_prepared_select_query(\r\n\t\t\t$table,\r\n\t\t\t$column_names,\r\n\t\t\t$query_condition,\r\n\t\t\t$where_values\r\n\t\t)\n$table assigned unsafely at line 306:\n $table = $wpdb->prefix . 'mo_custom_endpoint_config'\n$table assigned unsafely at line 304:\n $table = $wpdb->prefix . 'mo_external_endpoint_config'\n$column_names assigned unsafely at line 299:\n $column_names = '`namespace`'\n$configuration_type assigned unsafely at line 298:\n $configuration_type = $table_configuration['type']\n$table_configuration['type'] used without escaping.

Use placeholders and $wpdb->prepare(); found $query

Do not use Localhost/127.0.0.1/*.local in your code. Found: http://localhost/