A modern, granular user activity and audit log WordPress plugin with a custom-designed dashboard interface for comprehensive site monitoring.
| Code | Message | Location | Category | |
|---|---|---|---|---|
| WARNING | WordPress.DB.DirectDatabaseQuery.DirectQuery | Use of a direct database call is discouraged. | 242:16 | Security |
| WARNING | PluginCheck.Security.DirectDB.UnescapedDBParameter | Unescaped parameter $prepared_sql used in $wpdb->get_results($prepared_sql)\n$prepared_sql assigned unsafely at line 239:\n $prepared_sql = $wpdb->prepare( $sql, $prepare_values )\n$sql assigned unsafely at line 227:\n $sql = "\r\n SELECT *\r\n FROM {$this->table_name}\r\n WHERE {$where_clause}\r\n ORDER BY timestamp DESC\r\n LIMIT %d OFFSET %d\r\n "\n$where_clause assigned unsafely at line 220:\n $where_clause = implode( ' AND ', $where_conditions )\n$where_conditions assigned unsafely at line 213:\n $where_conditions[] = '( user_name LIKE %s OR object_name LIKE %s OR details LIKE %s )'\n$like assigned unsafely at line 210:\n $like = '%' . $wpdb->esc_like( $raw_search ) . '%' | 242:23 | Security |
| WARNING | PluginCheck.Security.DirectDB.UnescapedDBParameter | Unescaped parameter $where_clause used in $wpdb->get_var($this->wpdb->prepare(\r\n "SELECT COUNT(*) FROM {$this->table_name} WHERE {$where_clause}",\r\n $where_values\r\n ))\n$where_clause assigned unsafely at line 291:\n $where_clause = implode(' AND ', $where_conditions)\n$where_conditions assigned unsafely at line 285:\n $where_conditions[] = '(user_name LIKE %s OR object_name LIKE %s OR details LIKE %s)'\n$search_term assigned unsafely at line 284:\n $search_term = '%' . $this->wpdb->esc_like(sanitize_text_field($filters['search'])) . '%'\nNote: sanitize_text_field() is not a safe escaping function.\n$filters['search'] used without escaping. | 294:26 | Security |
| WARNING | WordPress.DB.PreparedSQL.InterpolatedNotPrepared | Use placeholders and $wpdb->prepare(); found interpolated variable {$table_name} at FROM {$table_name}\r\n | 335:1 | Security |
| WARNING | WordPress.DB.PreparedSQL.InterpolatedNotPrepared | Use placeholders and $wpdb->prepare(); found interpolated variable {$table_name} at FROM {$table_name}\r\n | 351:1 | Security |
| 17.11.2025, 11:28:57 | 11s | 98 | 0 | 5 |
| Source | Host | URL | Plugin File / Stack | Captured |
|---|---|---|---|---|
| Static | github.com | https://github.com/fazlebarisn/fbs-secure-optimize | fbs-activity-tracker.php:4 | 11/17/2025, 11:28:58 AM |
| Static | github.com | https://github.com/fazlebarisn | fbs-activity-tracker.php:8 | 11/17/2025, 11:28:58 AM |