Please improve plugin security

Hei,
I just tested the plugin through WordPress standards and it seems that there are issues that needs to be fixed.
There are unescaped values in the plugin which can pose a threat to the site security, even when the plugin is only used in admin interface.
For example:
$where[] .= ‘`object_type = \'' . $type . '\'';

Combined with _roles values, which can also have allot of various data, it could potentially lead to escalated privileges.