* fixed CVE-2024-12276;

* reviewed using $wpdb and WPCS;
* set minimum required version to 6.2 due to using %i for $wpdb->prepare;

includes/admin/core/packages/2.1.0-beta1/metadata.php

@@ -1,18 +1,22 @@
-<?php if ( ! defined( 'ABSPATH' ) ) exit;
+<?php
+if ( ! defined( 'ABSPATH' ) ) {
+	exit;
+}
 
 global $wpdb;
 
-$wpdb->update( "{$wpdb->usermeta}",
+$wpdb->update(
+	$wpdb->usermeta,
 	array(
-		'meta_value'    => serialize( array() ),
+		'meta_value' => serialize( array() ),
 	),
 	array(
-		'meta_key'      => 'um_account_secure_fields',
+		'meta_key' => 'um_account_secure_fields',
 	),
 	array(
-		'%s'
+		'%s',
 	),
 	array(
-		'%s'
+		'%s',
 	)
-);
+);