PluginScore

WordPress.DB.DirectDatabaseQuery.DirectQuery

Direct Query

The plugin runs a direct database query instead of using a higher-level WordPress API or cache-aware pattern.

medium weight

Why It Shows Up

Plugin Check found `$wpdb` access that queries the database directly, changes schema, or bypasses normal caching expectations.

Why It Matters

Direct queries can be correct, but they are easier to make unsafe, slower at scale, and harder for WordPress to cache or filter.

How to Fix

  • Use WordPress APIs such as post, term, metadata, option, or user functions when they fit the task.
  • If direct SQL is necessary, prepare dynamic values and add a clear caching strategy for repeated reads.
  • Keep schema changes in activation or upgrade routines and make them idempotent.

References

WordPress database access

Affected Plugins

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#1251Rating by BestWebSoft28509218500Text Domain Mismatch
#1252ReDi Restaurant Reservation – Instant Availability & Confirmation281,013239800Unsafe printing function
#1253Redis Object Cache28151103400k+Exception output is not escaped
#1254Responsive Lightbox & Gallery28139513100k+Non-prefixed hook name
#1255Secure Downloads28616406600Output is not escaped
#1256Praison AI SEO286433061k+Text Domain Mismatch
#1257Transliterator – Multilingual and Multi-script Text Conversion283053203k+Output is not escaped
#1258Slider Pro285835274k+Unsafe printing function
#1259Sparkle Demo Importer283071666k+Text Domain Mismatch
#1260Tab – Accordion, FAQ281045421k+Non-prefixed global variable
#1261Temporary Login Without Password28128131100k+wp function not compatible with requires wp
#1262Terms descriptions282224231k+Non-prefixed function
#1263Themesflat Addons For Elementor2871422740k+Output is not escaped
#1264Ultimate FAQ Accordion Plugin2838622730k+Unsafe printing function
#1265Jetpack VaultPress287136210k+Missing nonce verification
#1266VG WORT METIS28150317900Nonce verification recommended
#1267WC Fields Factory281943697k+Nonce verification recommended
#126810WebSocial2858418510k+Unsafe printing function
#1269PayZen for WooCommerce28258214600Output is not escaped
#1270Product Gallery Slider, Additional Variation Images for WooCommerce2855231620k+Output is not escaped
#1271Dynamic Product Gallery for WooCommerce284143031k+Output is not escaped
#1272Email Inquiry & Cart Options for WooCommerce28194291800Output is not escaped
#1273Product Sort and Display for WooCommerce281992352k+Output is not escaped
#1274WP ADA Compliance Check Basic287851773k+Text Domain Mismatch
#1275WP GoToWebinar28207207700Non-prefixed function
#1276WhyDonate – FREE Donate button – Crowdfunding – Fundraising28216328800Non-prefixed global variable
#1277WPS Bidouille2847221510k+Output is not escaped
#1278WP Synchro – The Ultimate WordPress Migration Tool282432442k+Missing Translators Comment
#1279WxSync-标准云微信公众号文章免费采集-任意公众号自动采集付费购买2857138500Request data is not unslashed
#1280YITH WooCommerce Product Bundles284041,4803k+Non-prefixed global variable
#1281Accordion Slider293914442k+Unsafe printing function
#1282Accordion Slider Gallery293791421k+Text Domain Mismatch
#1283Advance coupon for WooCommerce29472241900Text Domain Mismatch
#1284Adminimize29296691200k+Non-prefixed global variable
#1285AI Copilot – Content Generator291661611k+wp function not compatible with requires wp
#1286AL Pack29138162k+Non-prefixed global variable
#1287Alt Text AI – Automatically generate image alt text for SEO and accessibility297228020k+Non-prefixed global variable
#1288AppPresser – Mobile App Framework292622141k+Text Domain Mismatch
#1289aThemeArt Theme Helper292061512k+Non-prefixed global variable
#1290Attribute Stock for WooCommerce – Shared Stock & Variable Quantities (Lite Version)294813132k+Text Domain Mismatch
#1291Better Google Analytics293768692k+Non-prefixed global variable
#1292Bitcoin Payments – Blockonomics292082273k+Output is not escaped
#1293Plugin BlueX for WooCommerce294312162k+Text Domain Mismatch
#1294Branded Social Images – Open Graph Images with logo and extra text layer2925492900Non Singular String Literal Domain
#1295Businessx Extensions293375291k+Non-prefixed function
#1296Integration for Salesforce and Contact Form 7, WPForms, Elementor, Formidable, Ninja Forms292363692k+Non-prefixed global variable
#1297Chained Quiz291,1327211k+Text Domain Mismatch
#1298CloudSecure WP Security2974350100k+Request data is not unslashed
#1299Countdown, Coming Soon, Maintenance – Countdown & Clock291,73514310k+Non Singular String Literal Domain
#1300Database Cleaner2913529710k+Direct Query