| ERROR | PluginCheck.Security.DirectDB.UnescapedDBParameter | Unescaped parameter $sql used in $wpdb->get_var($sql)\n$sql assigned unsafely at line 1308:\n $sql = 'SELECT count(*) FROM INFORMATION_SCHEMA.VIEWS WHERE table_schema = "' . DB_NAME . '" AND table_name LIKE "%_wsm%"'\n$exist assigned unsafely at line 1310:\n $exist = $wpdb->get_var($sql) | includes/wsm_init.php:1310:25 | Security |
| ERROR | WordPress.DB.PreparedSQL.NotPrepared | Use placeholders and $wpdb->prepare(); found self | includes/wsm_init.php:1330:56 | Security |
| ERROR | PluginCheck.Security.DirectDB.UnescapedDBParameter | Unescaped parameter self::$tablePrefix . '_visitorInfo') used in $wpdb->query('DROP VIEW IF EXISTS ' . self::$tablePrefix . '_visitorInfo') | includes/wsm_init.php:2576:20 | Security |
| ERROR | WordPress.Security.EscapeOutput.OutputNotEscaped | All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found 'WSM_URL'. | includes/wsm_init.php:1939:37 | Security |
| ERROR | WordPress.DB.PreparedSQL.NotPrepared | Use placeholders and $wpdb->prepare(); found self | includes/wsm_init.php:2576:51 | Security |
| ERROR | WordPress.DB.PreparedSQL.NotPrepared | Use placeholders and $wpdb->prepare(); found $tablePrefix | includes/wsm_init.php:2576:57 | Security |
| ERROR | WordPress.Security.EscapeOutput.OutputNotEscaped | All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$urlReferrer'. | includes/wsm_init.php:1940:58 | Security |
| ERROR | WordPress.Security.EscapeOutput.OutputNotEscaped | All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found 'site_url'. | includes/wsm_init.php:1941:57 | Security |
| ERROR | WordPress.Security.EscapeOutput.OutputNotEscaped | All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found 'get_current_user_id'. | includes/wsm_init.php:1944:55 | Security |
| ERROR | WordPress.DB.PreparedSQL.NotPrepared | Use placeholders and $wpdb->prepare(); found $tablePrefix | includes/wsm_init.php:1330:62 | Security |