WP fail2ban Blocklist

Use placeholders and $wpdb->prepare(); found ??

Unescaped parameter $sql used in $wpdb->get_row($sql)\n$sql assigned unsafely at line 67:\n $sql = self::getReadEventsSQL($key)\n$key used without escaping.

Use placeholders and $wpdb->prepare(); found $sql

Use placeholders and $wpdb->prepare(); found PHP_INT_MAX

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$html'.

The $single parameter must be a single text string literal. Found: $singular

Mismatched text domain. Expected 'wpf2b-addon-blocklist' but got 'wp-fail2ban-addon-blocklist'.

The $plural parameter must be a single text string literal. Found: $plural

Unescaped parameter $sql used in $wpdb->get_var(sprintf($sql, $opt['last']['GET']['id'] ?? PHP_INT_MAX))\n$sql assigned unsafely at line 107:\n $sql = <<< SQL\nSELECT COUNT({$addrField})\n FROM {$wpdb->base_prefix}fail2ban_log\n WHERE 16 > LENGTH({$addrField})\n AND event IN ($events)\n AND ID > %d;\nSQL\n$addrField assigned unsafely at line 100:\n $addrField = (class_exists(WP_FAIL2BAN_NS.'\\IP'))\n ? 'ipv6'\n : 'addr'\n$events assigned unsafely at line 103:\n $events = join(',', RestRoute::$events)

Use placeholders and $wpdb->prepare(); found $sql