This plugin is fundamentally well-written, but contains a very large number of unprepared SQL statements. In all other respects it scored well. This recommendation is therefore marginal.

The plugin contains or is likely to contain a vulnerability which could be exploited by a privileged user to affect the site’s confidentiality, integrity or availability in a manner exceeding their privileges:

Within the limits of an inspection, it was not possible to demonstrate that none of the unprepared SQL statements in this plugin is vulnerable and the large number of potentially vulnerable statements is an issue of concern.

Ideally, this plugin should be more thoroughly reviewed so that its SQL statements can be examined in more detail.