| ERROR | PluginCheck.Security.DirectDB.UnescapedDBParameter | Unescaped parameter $id used in $wpdb->get_var("SELECT meta_value FROM {$wpdb->prefix}postmeta WHERE post_id = $id and meta_key='lesson_video_width' ")\n$id used without escaping. | exportExtensions/WooComExport.php:1996:32 | Security |
| ERROR | PluginCheck.Security.DirectDB.UnescapedDBParameter | Unescaped parameter $ids used in $wpdb->get_var("SELECT post_type FROM {$wpdb->prefix}posts where id=$ids")\n$ids used without escaping. | exportExtensions/ExportExtension.php:304:23 | Security |
| ERROR | PluginCheck.Security.DirectDB.UnescapedDBParameter | Unescaped parameter $metabox_metakey used in $wpdb->get_results("SELECT meta_value FROM {$wpdb->prefix}usermeta WHERE meta_key = '$metabox_metakey' AND user_id = $id ")\n$metabox_metakey assigned unsafely at line 1843:\n $metabox_metakey = $value->meta_key\n$id used without escaping.\n$value->meta_key assigned unsafely at line 1747:\n $value->meta_key = preg_replace('/wpcf-/','', $value->meta_key )\n$value->meta_key assigned unsafely at line 1300:\n $value->meta_key = 'featured_image'\n$export_instance->data[$id][$value->meta_key] assigned unsafely at line 1810:\n $export_instance->data[$id][$value->meta_key] = rtrim($pods_value , ',')\n$id[$value->meta_key] used without escaping.\n$pods_value assigned unsafely at line 1806:\n $pods_value .= $pods_file_value . ','\n$pods_value assigned unsafely at line 1802:\n $pods_value .= $podstaxval. ','\n$pods_value assigned unsafely at line 1797:\n $pods_value .= $pods_title_value . ','\n$pods_title_value assigned unsafely at line 1796:\n $pods_title_value=$pods_title->post_title | exportExtensions/PostExport.php:1845:36 | Security |
| ERROR | PluginCheck.Security.DirectDB.UnescapedDBParameter | Unescaped parameter $id used in $wpdb->get_col("SELECT term_taxonomy_id FROM {$wpdb->prefix}term_relationships WHERE object_id = {$id}")\n$id used without escaping. | exportExtensions/ExportExtension.php:1570:26 | Security |
| ERROR | PluginCheck.Security.DirectDB.UnescapedDBParameter | Unescaped parameter $id used in $wpdb->get_var("SELECT meta_value FROM {$wpdb->prefix}postmeta WHERE post_id = $id and meta_key='lesson_shortcode' ")\n$id used without escaping. | exportExtensions/WooComExport.php:1997:30 | Security |
| ERROR | PluginCheck.Security.DirectDB.UnescapedDBParameter | Unescaped parameter $question_id used in $wpdb->get_var("SELECT meta_value FROM {$wpdb->prefix}postmeta WHERE post_id = $question_id AND meta_key = '_lp_type' ")\n$question_id assigned unsafely at line 1693:\n $question_id = $question_ids['question_id']\n$question_ids['question_id'] used without escaping. | exportExtensions/WooComExport.php:1700:33 | Security |
| ERROR | PluginCheck.Security.DirectDB.UnescapedDBParameter | Unescaped parameter $termids used in $wpdb->get_var("select description from $wpdb->term_taxonomy where term_taxonomy_id ='{$termids}'")\n$termids assigned unsafely at line 1815:\n $termids = $termvalue['term_taxonomy_id']\n$termvalue['term_taxonomy_id'] used without escaping. | exportExtensions/ExportExtension.php:1844:29 | Security |
| ERROR | WordPress.DateTime.RestrictedFunctions.date_date | date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead. | exportExtensions/ExportExtension.php:911:58 | — |
| ERROR | PluginCheck.Security.DirectDB.UnescapedDBParameter | Unescaped parameter $id used in $wpdb->get_var("SELECT meta_value FROM {$wpdb->prefix}postmeta WHERE post_id = $id and meta_key='lesson_embed_ctx' ")\n$id used without escaping. | exportExtensions/WooComExport.php:1998:30 | Security |
| ERROR | WordPress.DateTime.RestrictedFunctions.date_date | date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead. | exportExtensions/ExportExtension.php:922:56 | — |