| ERROR | WordPress.DB.PreparedSQL.NotPrepared | Use placeholders and $wpdb->prepare(); found $attr_value | importExtensions/WooCommerceMetaImport.php:1401:189 | Security |
| ERROR | WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedVariableFound | Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$core_instance". | SaveMapping.php:438:9 | Plugin Repo |
| ERROR | PluginCheck.Security.DirectDB.UnescapedDBParameter | Unescaped parameter $q used in $wpdb->get_results($q)\n$q assigned unsafely at line 465:\n $q = "select element_id from {$wpdb->prefix}toolset_connected_elements where id ='{$delconinter}' "\n$delconinter assigned unsafely at line 463:\n $delconinter =$arrval2['intermediary_id']\n$arrval2['intermediary_id'] used without escaping. | importExtensions/ToolsetImportnew.php:467:75 | Security |
| ERROR | PluginCheck.Security.DirectDB.UnescapedDBParameter | Unescaped parameter $query used in $wpdb->get_results($query)\n$query assigned unsafely at line 309:\n $query = "SELECT id FROM {$wpdb->prefix}posts WHERE post_title ='{$jet_posts}' AND post_status='publish'"\n$jet_posts assigned unsafely at line 308:\n $jet_posts = trim($dvalue)\n$dvalue assigned unsafely at line 66:\n $dvalue = trim($dvalue)\n$dvalue assigned unsafely at line 63:\n $dvalue = preg_replace('/\\s+/', ' ', $dvalue) | importExtensions/JetEngineCCTImport.php:310:23 | Security |
| ERROR | WordPress.DB.PreparedSQL.NotPrepared | Use placeholders and $wpdb->prepare(); found $query | importExtensions/JetEngineCCTImport.php:310:35 | Security |
| ERROR | WordPress.DB.PreparedSQL.NotPrepared | Use placeholders and $wpdb->prepare(); found $q | importExtensions/ToolsetImportnew.php:467:87 | Security |
| ERROR | PluginCheck.Security.DirectDB.UnescapedDBParameter | Unescaped parameter $attr_name used in $wpdb->get_results("SELECT attribute_name FROM {$wpdb->prefix}woocommerce_attribute_taxonomies where attribute_label = '$attr_name' ")\n$attr_name used without escaping. | importExtensions/WooCommerceMetaImport.php:1402:27 | Security |
| ERROR | PluginCheck.Security.DirectDB.UnescapedDBParameter | Unescaped parameter $query used in $wpdb->get_results($query)\n$query assigned unsafely at line 329:\n $query = "SELECT id FROM {$wpdb->prefix}posts WHERE post_title ='{$jet_posts_value}' AND post_status='publish' ORDER BY ID DESC"\n$jet_posts_value assigned unsafely at line 322:\n $jet_posts_value = trim($jet_posts_value) | importExtensions/JetEngineCCTImport.php:330:32 | Security |
| ERROR | WordPress.DB.PreparedSQL.NotPrepared | Use placeholders and $wpdb->prepare(); found $query | importExtensions/JetEngineCCTImport.php:330:44 | Security |
| ERROR | WordPress.Security.EscapeOutput.OutputNotEscaped | All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '__'. | uploadModules/DesktopUpload.php:379:20 | Security |