WPCal.io – Easy Meeting Scheduler

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$response'.

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$wpdb'.

Use placeholders and $wpdb->prepare(); found $query

Unescaped parameter $query used in $wpdb->get_row($query)\n$query assigned unsafely at line 3847:\n $query = $wpdb->prepare($query, $admin_user_id, $provider)\n$query assigned unsafely at line 3845:\n $query .= " AND `status` = 1"\n$query assigned unsafely at line 3842:\n $query = "SELECT * FROM `$table_tp_accounts` WHERE `admin_user_id` = %s AND `provider` = %s"\n$admin_user_id used without escaping.\n$provider used without escaping.\n$table_tp_accounts assigned unsafely at line 3841:\n $table_tp_accounts = $wpdb->prefix . 'wpcal_tp_accounts'

Use placeholders and $wpdb->prepare(); found $query

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$wpdb'.

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$wpdb'.

The $text parameter must be a single text string literal. Found: $location['form']['password_data']['label']

Unescaped parameter $query used in $wpdb->get_var($query)\n$query assigned unsafely at line 4109:\n $query = "SELECT `id` FROM `$table_admins` WHERE `status` = 1 ORDER BY `id` ASC LIMIT 1"\n$table_admins assigned unsafely at line 4107:\n $table_admins = $wpdb->prefix . 'wpcal_admins'

Use placeholders and $wpdb->prepare(); found $query