RSVP and Event Management

Unescaped parameter $sql used in $wpdb->get_results($wpdb->prepare( $sql, absint( $attendee_id ), absint( $attendee_id ), absint( $attendee_id ), absint( $attendee_id ) ))\n$sql assigned unsafely at line 1142:\n $sql = 'SELECT id, firstName FROM ' . ATTENDEES_TABLE .\r\n\t\t\t\t\t\t' WHERE (id IN (SELECT attendeeID FROM ' . ASSOCIATED_ATTENDEES_TABLE . ' WHERE associatedAttendeeID = %d)\r\n\t\t\tOR id in (SELECT associatedAttendeeID FROM ' . ASSOCIATED_ATTENDEES_TABLE . ' WHERE attendeeID = %d) OR\r\n \t\tid IN (SELECT waa1.attendeeID FROM ' . ASSOCIATED_ATTENDEES_TABLE . ' waa1\r\n \t\t\tINNER JOIN ' . ASSOCIATED_ATTENDEES_TABLE . ' waa2 ON waa2.attendeeID = waa1.attendeeID OR\r\n waa1.associatedAttendeeID = waa2.attendeeID\r\n \t\t\t\tWHERE waa2.associatedAttendeeID = %d AND waa1.attendeeID <> %d))'\n$associations assigned unsafely at line 1149:\n $associations = $wpdb->get_results( $wpdb->prepare( $sql, absint( $attendee_id ), absint( $attendee_id ), absint( $attendee_id ), absint( $attendee_id ) ) )

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"Could not open file $filePath for reading."'.

Use placeholders and $wpdb->prepare(); found $sql

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$readerType'.

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"Could not open $filePath for reading! Stream wrapper used is not supported for this type of file."'.

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"Could not open $filePath for reading! File does not exist."'.

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"Could not open $filePath for reading! File is not readable."'.

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"Could not open $filePath for reading! ({$exception->getMessage()})"'.

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"Could not open $filePath for reading."'.

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"Could not open \"{$contentXmlFilePath}\"."'.