LinkMyDeals

Use placeholders and $wpdb->prepare(); found microtime

Unescaped parameter microtime(true) . ",'debug','Adding New Coupon ({$coupon->lmd_id})')") used in $wpdb->query("INSERT INTO {$wp_prefix}linkmydeals_logs (microtime,msg_type,message) VALUES (" . microtime(true) . ",'debug','Adding New Coupon ({$coupon->lmd_id})')")

Use placeholders and $wpdb->prepare(); found true

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fclose().

Unescaped parameter $coupon->lmd_id used in $wpdb->get_var("SELECT post_id FROM {$wp_prefix}postmeta WHERE meta_key = 'lmd_id' AND meta_value = '{$coupon->lmd_id}' LIMIT 0,1")\n$coupon->lmd_id used without escaping.

Use placeholders and $wpdb->prepare(); found microtime

Use placeholders and $wpdb->prepare(); found true

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$taxonomy'.

Unescaped parameter $post_id used in $wpdb->query($wpdb->prepare("INSERT INTO {$wp_prefix}couponis_coupon_data (post_id,expire,ctype,exclusive,used,positive,negative,success) VALUES ($post_id,'%s','%s',%s,'0','0','0','0')", empty($coupon->end_date) ? '99999999999' : strtotime("{$coupon->end_date} + 1 day"), $coupon->type == 'Code' ? '1' : '3', $coupon->featured == 'Yes' ? '1' : '0'))\n$post_id assigned unsafely at line 1663:\n $post_id = wp_insert_post($post_data)\n$post_data assigned unsafely at line 1654:\n $post_data = array(\n\t\t\t\t'ID' => '',\n\t\t\t\t'post_title' => $coupon->title,\n\t\t\t\t'post_content' => $coupon->description,\n\t\t\t\t'post_status' => 'publish',\n\t\t\t\t'post_type' => 'coupon',\n\t\t\t\t'post_author' => get_current_user_id()\n\t\t\t)\n$coupon->title used without escaping.

Unescaped parameter microtime(true) . ",'debug','" . esc_sql($result['error_msg']) . "'), (" . microtime(true) . ",'error','Error uploading feed to local database')") used in $wpdb->query("INSERT INTO {$wp_prefix}linkmydeals_logs (microtime,msg_type,message) VALUES (" . microtime(true) . ",'debug','" . esc_sql($result['error_msg']) . "'), (" . microtime(true) . ",'error','Error uploading feed to local database')")