WordPress.DB.DirectDatabaseQuery.DirectQuery

Direct Query

The plugin runs a direct database query instead of using a higher-level WordPress API or cache-aware pattern.

medium weight

Why It Shows Up

Plugin Check found `$wpdb` access that queries the database directly, changes schema, or bypasses normal caching expectations.

Why It Matters

Direct queries can be correct, but they are easier to make unsafe, slower at scale, and harder for WordPress to cache or filter.

How to Fix

  • Use WordPress APIs such as post, term, metadata, option, or user functions when they fit the task.
  • If direct SQL is necessary, prepare dynamic values and add a clear caching strategy for repeated reads.
  • Keep schema changes in activation or upgrade routines and make them idempotent.

Affected Plugins

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#601FeedWordPress244963199k+Missing Arg Domain
#602FileBird – WordPress Media Library Folders & File Manager24239377200k+wp function not compatible with requires wp
#603Fix Alt Text245443461k+Non Singular String Literal Domain
#604FluentCRM – Email Newsletter, Automation, Email Marketing, Email Campaigns, Optins, Leads, and CRM Solution2419375380k+Direct Query
#605Food Store – Online Food Delivery & Pickup248621,9411k+Non-prefixed global variable
#606Football Pool241,0857331k+Output is not escaped
#607Force Sell for WooCommerce24697455600Text Domain Mismatch
#608Formidable PRO2PDF242184771k+Non-prefixed global variable
#609Forminator Forms – Contact Form, Payment Form & Custom Form Builder248261,314600k+Non-prefixed global variable
#610Fuse Social Floating Sidebar241,8381,57810k+Non-prefixed global variable
#611FV Simpler SEO247663082k+Text Domain Mismatch
#612FV Player 8243231,3831k+Non-prefixed function
#613Photo Gallery – Responsive Image Galleries by Supsystic242409120k+Text Domain Mismatch
#614Gallery by BestWebSoft – Customizable Image and Photo Galleries for WordPress2453632410k+Text Domain Mismatch
#615GD Mail Queue24502582700Output is not escaped
#616Cookie Banner for GDPR / CCPA – WPLP Cookie Consent241,2141,9249k+Non-prefixed global variable
#617Genealogical Tree – Family Tree & Ancestry for WordPress245601,641600Non-prefixed global variable
#618GEO my WP245542,0893k+Non-prefixed hook name
#619GG Woo Feed for WooCommerce Shopping Feed on Google and Other Channels244695921k+Non-prefixed global variable
#620Connector Wizard (formerly LC Wizard)242494481k+Non-prefixed function
#621Assets manager, dequeue scripts, dequeue styles for WordPress245922552k+Output is not escaped
#622ExactMetrics – Google Analytics Dashboard for WordPress (Website Stats Plugin)24158436300k+Nonce verification recommended
#623Simple Calendar – Google Calendar Plugin242,05359250k+Missing direct file access protection
#624Easy Google Maps241,76438920k+Non Singular String Literal Domain
#625GS Behance Portfolio – Display Projects, Gallery & Slider248551,617400Non-prefixed global variable
#626Hide Shipping Method For WooCommerce249461,44710k+Non-prefixed global variable
#627HT Mega Addons for Elementor – Elementor Widgets & Template Builder2412,3521,47470k+Text Domain Mismatch
#628Hummingbird Performance – Cache & Page Speed Optimization for Core Web Vitals | Critical CSS | Minify CSS | Defer CSS Javascript | CDN243,41086670k+Text Domain Mismatch
#629Import and export users and customers241,04035770k+Unsafe printing function
#630Infinite Uploads – Offload Media and Video to Cloud Storage24586722800Direct Query
#631Keap Official Opt-in Forms248291,0461k+Non-prefixed global variable
#632Social Slider Feed – Social Media Feed & Gallery Widgets2492970720k+Non-prefixed global variable
#633InstaWP Connect – 1-click WP Staging & Migration2425381140k+Non-prefixed global variable
#634Joli Table Of Contents246531,7557k+Non-prefixed global variable
#635Kenta Blocks – Responsive Blocks and block templates library245641,4052k+Non-prefixed global variable
#636KiviCare – Clinic & Patient Management System (EHR)242238802k+Direct Query
#637Koko Analytics – Privacy-Friendly WordPress Analytics2416639560k+Short PHP open tag found
#638Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress241,855953100k+Output is not escaped
#639LearnPress – Backup & Migration Tool243854695k+Output is not escaped
#640LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes244141,17610k+Non-prefixed global variable
#641Limit Attempts by BestWebSoft – WordPress Anti-Bot and Security Plugin for Login and Forms245635484k+Text Domain Mismatch
#642Load More Products for WooCommerce2473145920k+Text Domain Mismatch
#643Local Delivery Drivers for WooCommerce241,8321,483900Non-prefixed global variable
#644Event Booking Manager for WooCommerce – Registration, RSVP, Calendar & Tickets249692,1407k+Non-prefixed global variable
#645Generate Images (AI) – Magic Post Thumbnail241,9401,7616k+Non-prefixed global variable
#646Mail Mint – Email Marketing, Newsletter, Email Automation & WooCommerce Emails244,6961,4805k+Text Domain Mismatch
#647Mailchimp for WooCommerce24523663200k+Non-prefixed global variable
#648MailerPress – Newsletter, email marketing & AI automation248053,9311k+Direct Query
#649Mailjet Email Marketing2443520610k+Unsafe printing function
#650Mang Board WP241,2134,7209k+Non-prefixed global variable