User Import with meta

Unescaped parameter $post_id used in $wpdb->get_results("SELECT * FROM {$wpdb->prefix}ultimate_csv_importer_shortcode_manager WHERE post_id='{$post_id}' AND media_id = '{$attach_id}'")\n$post_id used without escaping.\n$attach_id assigned unsafely at line 91:\n $attach_id = $attachment_id[0]['ID']\n$attachment_id[0]['ID'] used without escaping.

Mismatched text domain. Expected 'import-users' but got 'wp-ultimate-csv-importer'.

unlink() is discouraged. Use wp_delete_file() to delete a file.

Unescaped parameter $data_array['user_pass'] used in $wpdb->get_results("UPDATE {$wpdb->prefix}users SET user_pass = '{$data_array['user_pass']}' WHERE ID = $retID")\n$data_array['user_pass'] assigned unsafely at line 85:\n $data_array['user_pass']=wp_hash_password($data_array['user_pass'])\n$data_array['user_pass'] assigned unsafely at line 74:\n $data_array['user_pass'] = wp_generate_password( 12, false )\n$retID assigned unsafely at line 95:\n $retID = wp_insert_user($data_array)\n$data_array assigned unsafely at line 69:\n $data_array = apply_filters('smack_csv_modify_userdata_filter', $data_array)

parse_url() is discouraged because of inconsistency in the output across PHP versions; use wp_parse_url() instead.

Unescaped parameter $image_title used in $wpdb->get_results("SELECT ID FROM {$wpdb->prefix}posts WHERE post_type = 'attachment' AND guid LIKE '%$image_title%'")\n$image_title assigned unsafely at line 71:\n $image_title=preg_replace('/\\\\.[^.\\\\s]{3,4}$/', '', $img_url)\n$img_url assigned unsafely at line 62:\n $img_url = urldecode($encodedurl)\n$encodedurl assigned unsafely at line 61:\n $encodedurl = urlencode($img_url)

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "uci_init".

Unescaped parameter $post_id used in $wpdb->get_var("SELECT post_title FROM {$wpdb->prefix}posts WHERE ID = '{$post_id}' AND post_status != 'trash'")\n$post_id used without escaping.

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$userimp_class".

Unescaped parameter $attach_id used in $wpdb->get_results("SELECT ID FROM {$wpdb->prefix}posts WHERE ID ='{$attach_id}' AND post_title ='image-failed' AND post_type = 'attachment' AND guid LIKE '%$image_title%'")\n$attach_id assigned unsafely at line 91:\n $attach_id = $attachment_id[0]['ID']\n$image_title assigned unsafely at line 71:\n $image_title=preg_replace('/\\\\.[^.\\\\s]{3,4}$/', '', $img_url)\n$attachment_id[0]['ID'] used without escaping.\n$img_url assigned unsafely at line 62:\n $img_url = urldecode($encodedurl)\n$encodedurl assigned unsafely at line 61:\n $encodedurl = urlencode($img_url)