prefix plus a hard-coded suffix; it can never // contain user input, and a table name cannot be bound through // $wpdb->prepare(). Dropping the table IS the point of an uninstall // routine — the alternative is leaving it in someone's database forever. $table = $wpdb->prefix . 'adnvaa_issues'; // phpcs:ignore PluginCheck.Security.DirectDB.UnescapedDBParameter, WordPress.DB.DirectDatabaseQuery.DirectQuery, WordPress.DB.DirectDatabaseQuery.NoCaching, WordPress.DB.PreparedSQL.NotPrepared, WordPress.DB.PreparedSQL.InterpolatedNotPrepared, WordPress.DB.DirectDatabaseQuery.SchemaChange $wpdb->query( "DROP TABLE IF EXISTS {$table}" ); } }