Findings
Unescaped SQL is executed, though it appears not to be user input.
Plugin inspection:
WP-PageNavi
No issues found
Last revised:
Confidence: Medium
This plugin has been given a short, targeted code review.
We didn't find anything worrying in this plugin. It's probably safe. Read more about this recommendation.
Warnings
This recommendation applies to version 2.83 of this plugin, but the most recent version is 2.94.2. These findings may no longer be correct.
Failure criteria
- Execution of unprepared SQL statements
Read more about our failure criteria.