| ERROR | WordPress.DB.PreparedSQL.NotPrepared | Use placeholders and $wpdb->prepare(); found $response | upgrade/class-wpsc-upgrade-db-v1.php:1483:81 | Security |
| ERROR | PluginCheck.Security.DirectDB.UnescapedDBParameter | Unescaped parameter $response['slug'] used in $wpdb->query("ALTER TABLE {$wpdb->prefix}psmsc_tickets ADD " . $response['slug'] . ' TINYTEXT NULL')\n$response['slug'] used without escaping. | upgrade/class-wpsc-upgrade-db-v1.php:1501:15 | Security |
| ERROR | WordPress.DB.PreparedSQL.NotPrepared | Use placeholders and $wpdb->prepare(); found id | includes/admin/settings/class-wpsc-ticket-categories.php:553:68 | Security |
| ERROR | WordPress.DB.PreparedSQL.NotPrepared | Use placeholders and $wpdb->prepare(); found $id | includes/models/class-wpsc-archive-ticket.php:114:99 | Security |
| ERROR | WordPress.DB.PreparedSQL.NotPrepared | Use placeholders and $wpdb->prepare(); found $sql | includes/models/class-wpsc-option.php:369:35 | Security |
| ERROR | WordPress.DB.PreparedSQL.NotPrepared | Use placeholders and $wpdb->prepare(); found $response | upgrade/class-wpsc-upgrade-db-v1.php:1501:72 | Security |
| ERROR | PluginCheck.Security.DirectDB.UnescapedDBParameter | Unescaped parameter $response['slug'] used in $wpdb->query("ALTER TABLE {$wpdb->prefix}psmsc_archived_tickets ADD " . $response['slug'] . ' TINYTEXT NULL')\n$response['slug'] used without escaping. | upgrade/class-wpsc-upgrade-db-v1.php:1502:15 | Security |
| ERROR | WordPress.DB.PreparedSQL.NotPrepared | Use placeholders and $wpdb->prepare(); found $response | upgrade/class-wpsc-upgrade-db-v2.php:1884:73 | Security |
| ERROR | PluginCheck.Security.DirectDB.UnescapedDBParameter | Unescaped parameter $response['slug'] used in $wpdb->query("ALTER TABLE {$wpdb->prefix}psmsc_archived_tickets ADD " . $response['slug'] . ' BIGINT NULL DEFAULT 0')\n$response['slug'] used without escaping. | upgrade/class-wpsc-upgrade-db-v2.php:1885:16 | Security |
| ERROR | PluginCheck.Security.DirectDB.UnescapedDBParameter | Unescaped parameter $sql used in $wpdb->get_var($sql . $where)\n$sql assigned unsafely at line 372:\n $sql = 'SELECT count(id) FROM ' . $wpdb->prefix . 'psmsc_options '\n$sql assigned unsafely at line 368:\n $sql = $sql . $where . $order\n$sql assigned unsafely at line 358:\n $sql = 'SELECT * FROM ' . $wpdb->prefix . 'psmsc_options '\n$total_items assigned unsafely at line 373:\n $total_items = $wpdb->get_var( $sql . $where )\n$where assigned unsafely at line 359:\n $where = self::get_where( $filter )\n$filter used without escaping. | includes/models/class-wpsc-option.php:373:26 | Security |