← Back to Leaderboard
Top Issues by Category
Issues organized by category, type, and rule family
Issues Details
4 issues found in latest scan
| Code | Message | Location | Category | |
|---|---|---|---|---|
| WARNING | PluginCheck.Security.DirectDB.UnescapedDBParameter | Unescaped parameter $table_quoted used in $wpdb->get_row("SHOW CREATE TABLE {$table_quoted}")\n$table_quoted assigned unsafely at line 133:\n $table_quoted = '`' . str_replace( '`', '``', (string) $table ) . '`' | 141:21 | Security |
| WARNING | PluginCheck.Security.DirectDB.UnescapedDBParameter | Unescaped parameter $table_quoted used in $wpdb->get_col("SHOW COLUMNS FROM {$table_quoted}")\n$table_quoted assigned unsafely at line 133:\n $table_quoted = '`' . str_replace( '`', '``', (string) $table ) . '`' | 153:22 | Security |
| WARNING | PluginCheck.Security.DirectDB.UnescapedDBParameter | Unescaped parameter $table_quoted used in $wpdb->get_var("SELECT COUNT(*) FROM {$table_quoted}")\n$table_quoted assigned unsafely at line 133:\n $table_quoted = '`' . str_replace( '`', '``', (string) $table ) . '`' | 162:29 | Security |
| WARNING | PluginCheck.Security.DirectDB.UnescapedDBParameter | Unescaped parameter $sql_rows used in $wpdb->get_results($sql_rows)\n$sql_rows assigned unsafely at line 167:\n $sql_rows = $wpdb->prepare( "SELECT * FROM {$table_quoted} LIMIT %d OFFSET %d", $batch_size, $offset )\n$table_quoted assigned unsafely at line 133:\n $table_quoted = '`' . str_replace( '`', '``', (string) $table ) . '`' | 169:20 | Security |
4 total row(s)