WP Notification Bell

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$installed_addons_ids".

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$toggle'.

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found 'stripslashes'.

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found 'apply_filters'.

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$box_class'.

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$box_id'.

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$style'.

Unescaped parameter $query used in $wpdb->get_results($query)\n$query assigned unsafely at line 88:\n $query = apply_filters( "wnbell_select_notifications_visitor", $query, $options )\n$query assigned unsafely at line 87:\n $query = "SELECT posts.ID FROM {$wpdb->prefix}posts AS posts\\r\\nLEFT JOIN {$wpdb->prefix}wnbell_recipients_role AS prole ON (posts.ID=prole.notification_id)\\r\\nLEFT JOIN {$wpdb->prefix}wnbell_recipients AS pname ON (posts.ID=pname.notification_id)\\r\\n WHERE posts.post_type = 'wnbell_notifications'\\r\\n AND posts.post_status = 'publish'\\r\\n AND (prole.user_role IS NULL OR prole.user_role LIKE 'all' OR prole.user_role LIKE 'wnbell_guest')\\r\\n AND (pname.usernames IS NULL)\\r\\n GROUP BY posts.ID ORDER BY posts.post_date DESC LIMIT {$limit};"\n$options assigned unsafely at line 81:\n $options = get_option( 'wnbell_options' )\n$limit assigned unsafely at line 85:\n $limit = filter_var( apply_filters( 'wnbell_notifications_display_count', 5 ), FILTER_SANITIZE_NUMBER_INT )

Use placeholders and $wpdb->prepare(); found $query

Use placeholders and $wpdb->prepare(); found $query