Send emails from WordPress through SendGrid using SMTP by YayCommerce
| Code | Message | Location | Category | |
|---|---|---|---|---|
| ERROR | WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedVariableFound | Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$yayStatusNotsendChecked". | 25:5 | Plugin Repo |
| ERROR | WordPress.WP.I18n.NonSingularStringLiteralText | The $text parameter must be a single text string literal. Found: $disPlayText | 40:35 | General |
| ERROR | WordPress.DB.PreparedSQL.NotPrepared | Use placeholders and $wpdb->prepare(); found sanitize_sql_orderby | 195:153 | Security |
| ERROR | WordPress.DB.PreparedSQL.NotPrepared | Use placeholders and $wpdb->prepare(); found $sortField | 195:174 | Security |
| ERROR | WordPress.DB.PreparedSQL.NotPrepared | Use placeholders and $wpdb->prepare(); found $sortVal | 195:193 | Security |
| ERROR | WordPress.DB.PreparedSQL.NotPrepared | Use placeholders and $wpdb->prepare(); found sanitize_sql_orderby | 203:154 | Security |
| ERROR | WordPress.DB.PreparedSQL.NotPrepared | Use placeholders and $wpdb->prepare(); found $sortField | 203:175 | Security |
| ERROR | WordPress.DB.PreparedSQL.NotPrepared | Use placeholders and $wpdb->prepare(); found $sortVal | 203:194 | Security |
| ERROR | PluginCheck.Security.DirectDB.UnescapedDBParameter | Unescaped parameter $sqlRepare used in $wpdb->get_results($sqlRepare)\n$sqlRepare assigned unsafely at line 202:\n $sqlRepare = $wpdb->prepare(\n\t\t\t\t\t\t"SELECT l.id, l.subject, l.email_from, l.email_to, l.mailer, l.date_time, l.status FROM {$wpdb->prefix}$table AS l WHERE $statusWhere ORDER BY " . sanitize_sql_orderby($sortField . ' ' . $sortVal) . " LIMIT %d OFFSET %d",\n\t\t\t\t\t\t$limit,\n\t\t\t\t\t\t$offset\n\t\t\t\t\t)\n$table assigned unsafely at line 186:\n $table = YAY_SMTP_SENDGRID_PREFIX . '_email_logs'\n$statusWhere assigned unsafely at line 179:\n $statusWhere = 'status <> 1 AND status <> 0 and status <> 2'\n$statusWhere assigned unsafely at line 177:\n $statusWhere = 'status = 0 OR status =2'\n$statusWhere assigned unsafely at line 175:\n $statusWhere = 'status = 1'\n$sortField assigned unsafely at line 167:\n $sortField = ! empty( $params['sortField'] ) ? $params['sortField'] : 'date_time'\n$sortVal assigned unsafely at line 170:\n $sortVal = 'ASC'\n$valSearch assigned unsafely at line 166:\n $valSearch = ! empty( $params['valSearch'] ) ? $params['valSearch'] : ''\n$status assigned unsafely at line 173:\n $status = ! empty( $params['status'] ) ? $params['status'] : $showStatus\n$params['sortField'] used without escaping.\n$params['status'] used without escaping.\n$params['valSearch'] used without escaping. | 210:23 | Security |
| ERROR | WordPress.DB.PreparedSQL.NotPrepared | Use placeholders and $wpdb->prepare(); found $sqlRepare | 210:36 | Security |
| 15.11.2025, 05:39:30 | 11s | 77 | 61 | 59 |