PluginScore

WordPress.DB.DirectDatabaseQuery.DirectQuery

Direct Query

The plugin runs a direct database query instead of using a higher-level WordPress API or cache-aware pattern.

medium weight

Why It Shows Up

Plugin Check found `$wpdb` access that queries the database directly, changes schema, or bypasses normal caching expectations.

Why It Matters

Direct queries can be correct, but they are easier to make unsafe, slower at scale, and harder for WordPress to cache or filter.

How to Fix

  • Use WordPress APIs such as post, term, metadata, option, or user functions when they fit the task.
  • If direct SQL is necessary, prepare dynamic values and add a clear caching strategy for repeated reads.
  • Keep schema changes in activation or upgrade routines and make them idempotent.

References

WordPress database access

Affected Plugins

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#1301Businessx Extensions293375291k+Non-prefixed function
#1302Integration for Salesforce and Contact Form 7, WPForms, Elementor, Formidable, Ninja Forms292363692k+Non-prefixed global variable
#1303Chained Quiz291,1327211k+Text Domain Mismatch
#1304CloudSecure WP Security2974350100k+Request data is not unslashed
#1305Countdown, Coming Soon, Maintenance – Countdown & Clock291,73514310k+Non Singular String Literal Domain
#1306Custom Field Template2956853030k+wp function not compatible with requires wp
#1307Di Themes Demo Site Importer293431831k+Text Domain Mismatch
#1308Display Tweets29135135900Non-prefixed global variable
#1309Document Gallery29183988k+Output is not escaped
#1310DoLogin Security293123057k+Output is not escaped
#1311Interactive Image Map Plugin – Draw Attention2962022720k+Output is not escaped
#1312Everest Toolkit291451411k+Missing Translators Comment
#1313Advanced Shipping Rates for WooCommerce: Flexible Table Rate Shipping Rules291855042k+Non-prefixed global variable
#1314FluentSMTP – WP SMTP Plugin with Amazon SES, SendGrid, MailGun, Postmark, Google and Any SMTP Provider297478600k+Missing Translators Comment
#1315Getwid – Gutenberg Blocks2913917350k+Non-prefixed global variable
#1316Gianism29395154700Text Domain Mismatch
#1317reCaptcha by BestWebSoft29474272100k+Text Domain Mismatch
#1318Image Hover Effects Ultimate ( Image Gallery, Effects, Lightbox, Comparison & Magnifier )292082520k+Non-prefixed namespace
#1319Jetpack Boost – Website Speed, Performance and Critical CSS29659247200k+Text Domain Mismatch
#1320Wishlist for WooCommerce29610296600Output is not escaped
#1321Kits, Templates and Patterns29380915k+Text Domain Mismatch
#1322Login Me Now – Passwordless, Magic Link, OTP & Social Login for WordPress2986233500Nonce verification recommended
#1323Meow Gallery2911318210k+Direct Query
#1324Music Player for WooCommerce291061551k+Non-prefixed global variable
#1325MyWorks Sync for WooCommerce & Xero2911,080800Non-prefixed global variable
#1326Offload Media – Cloud Storage29126801k+unlink unlink
#1327Optimole – Optimize Images | Convert WebP & AVIF | CDN & Lazy Load | Image Optimization2980162200k+Nonce verification recommended
#1328Page Restrict for WooCommerce29579374700Text Domain Mismatch
#1329Page View Count2910824710k+Dynamic hook name
#1330pCloud WP Backup29120731k+Exception output is not escaped
#1331Post Timeline2991200800Missing nonce verification
#1332Post Views Counter29179398200k+Non-prefixed hook name
#1333Recipe Card Blocks Lite2915140810k+Non-prefixed global variable
#1334Relevant – Related, Featured, Latest, and Popular Posts by BestWebSoft29487262800Text Domain Mismatch
#1335SamedayCourier Shipping293362694k+Non Singular String Literal Domain
#1336Security Ninja – WordPress Security & Firewall291493477k+Direct Query
#1337Sender – Newsletter, SMS and Email Marketing Automation for WooCommerce291482465k+Unsafe printing function
#1338Shiptastic for WooCommerce2915466210k+Non-prefixed global variable
#1339Slider by BestWebSoft29478336400Text Domain Mismatch
#1340Social Engine2913390600Exception output is not escaped
#1341SQLite Database Integration29161893k+Exception output is not escaped
#1342SureForms – Drag & Drop Contact Form & Form Builder, Payment Form, Survey, Quiz & Calculator29336198500k+Text Domain Mismatch
#1343ووسلام – همگام سازی ووکامرس و باسلام291926114k+Non-prefixed global variable
#1344Themify – WooCommerce Product Filter2964314520k+Output is not escaped
#1345Post Grid Gutenberg Blocks for News, Magazines, Blog Websites – PostX2913540040k+Non-prefixed global variable
#1346Ultimate Auction for WooCommerce – Excellent WP Auction Plugin29525232k+Non-prefixed global variable
#1347User Verification by PickPlugins29413145k+Request data is not unslashed
#1348Visualizer – Tables & Charts Manager with Built-in AI Generator2934833120k+Output is not escaped
#1349Custom Post Types and Custom Fields creator – WCK291,30014310k+Text Domain Mismatch
#1350weMail – Email Marketing, Newsletter Builder & Email Automations for WooCommerce292766810k+Missing direct file access protection