PluginScore

WordPress.DB.DirectDatabaseQuery.DirectQuery

Direct Query

The plugin runs a direct database query instead of using a higher-level WordPress API or cache-aware pattern.

medium weight

Why It Shows Up

Plugin Check found `$wpdb` access that queries the database directly, changes schema, or bypasses normal caching expectations.

Why It Matters

Direct queries can be correct, but they are easier to make unsafe, slower at scale, and harder for WordPress to cache or filter.

How to Fix

  • Use WordPress APIs such as post, term, metadata, option, or user functions when they fit the task.
  • If direct SQL is necessary, prepare dynamic values and add a clear caching strategy for repeated reads.
  • Keep schema changes in activation or upgrade routines and make them idempotent.

References

WordPress database access

Affected Plugins

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#801WP Meta and Date Remover246651,31490k+Non-prefixed global variable
#802WP Notification Bell247361,591700Non-prefixed global variable
#803پارسی دیت – Parsi Date24106291100k+Non-prefixed hook name
#804WP Post Author – Author Box, Multiple Authors, Guest Authors & Custom Avatars248611,57310k+Non-prefixed global variable
#805WP Recipe Maker2449294150k+Non-prefixed global variable
#806WP RSS Aggregator – RSS Import, Feed to Post, Autoblogging, AI Content241,77539340k+Text Domain Mismatch
#807WP School Calendar241,3611,720400Non-prefixed global variable
#808Bulk Edit Posts and Products in Spreadsheet249189128k+Text Domain Mismatch
#809WSMS (formerly WP SMS) – SMS & MMS Notifications with OTP and 2FA for WooCommerce24911,7257k+Non-prefixed hook name
#810WP-Stateless – Google Cloud Storage241,0364824k+Non Singular String Literal Domain
#811WP Travel – Ultimate Travel Booking System, Tour Management Engine242271,9624k+Non-prefixed hook name
#812WP Travel Engine – Tour Booking Plugin – Tour Operator Software242,0105,68820k+Non-prefixed global variable
#813Export All Posts, Products, Orders & Users | WP Ultimate Exporter | WordPress CSV Export243631,1306k+Direct Query
#814Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress242,5762,103100k+Output is not escaped
#815WP User Manager – User Profile Builder & Membership2478753910k+Exception output is not escaped
#816WP Voting Contest Lite24259258400Text Domain Mismatch
#817WPAdverts – Classifieds Plugin241,3084964k+Output is not escaped
#818WPeMatico RSS Feed Fetcher241,37858710k+Output is not escaped
#819WPGSI: Spreadsheet Integration247841,5872k+Non-prefixed global variable
#820WPIDE – File Manager & Code Editor246101,38640k+Non-prefixed global variable
#821WP Travel Engine – Elementor Widgets | Create Travel Booking Website Using WordPress and Elementor245,9072,13610k+Text Domain Mismatch
#822xili-language241,501523600Output is not escaped
#823YayCurrency – WooCommerce Multi-Currency Switcher243736238k+Text Domain Mismatch
#824YITH WooCommerce Gift Cards244361,53410k+Non-prefixed global variable
#825YITH WooCommerce Product Add-Ons244602,06920k+Non-prefixed global variable
#826YITH WooCommerce Subscription244391,5387k+Non-prefixed global variable
#827YITH WooCommerce Waitlist244201,5003k+Non-prefixed global variable
#828YITH WooCommerce Wishlist244481,486400k+Non-prefixed global variable
#829YITH WooCommerce Product Gallery & Image Zoom244181,49020k+Non-prefixed global variable
#830Jetpack CRM – Clients, Leads, Invoices, Billing, Email Marketing, & Automation241,2113,15230k+Non-prefixed global variable
#8313DPrint Lite251751,029700Non-prefixed global variable
#832Adminify – White Label, Admin Menu Editor, Login Customizer255461,3707k+Non-prefixed global variable
#833AdRotate Banner Manager251,36384620k+Unsafe printing function
#834Advanced WordPress Reset – Debug, Recover & Reset WP2547546420k+Output is not escaped
#835AF Companion – Starter Sites, Speed Booster & Growth Suite for Professional Publishing256651,48610k+Non-prefixed global variable
#836Affiliates256891,4832k+Output is not escaped
#837FiboSearch – Ajax Search for WooCommerce25603302100k+Output is not escaped
#838AliExpress Dropshipping Plugin for WooCommerce Stores255507285k+Text Domain Mismatch
#839All 404 Redirect to Homepage25140301200k+date date
#840AIO Forms – Craft Complex Forms Easily25189418700Mixed line endings
#841Animated Number Counters254081,9492k+Non-prefixed global variable
#842Appointment Booking Calendar253271,0551k+Non-prefixed global variable
#843Appointment Hour Booking – Booking Calendar252621,25310k+Non-prefixed global variable
#844ATUM WooCommerce Inventory Management and Stock Tracking252,6381,30410k+Non Singular String Literal Domain
#845bbp style pack251,4191,7926k+Output is not escaped
#846Beaver Builder Page Builder – Drag and Drop Website Builder254,4631,819100k+Text Domain Mismatch
#847BlockSpare – Gutenberg Post Grid Blocks for News, Magazine & Blog Websites251,3271,71410k+Non-prefixed global variable
#848Total Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid2524385450k+Non-prefixed global variable
#849Booking Activities251,0361,4693k+Output is not escaped
#850Booking and Rental Manager for Bike | Car | Resort | Appointment | Dress | Equipment252601,5611k+Non-prefixed global variable