PluginScore

WordPress.DB.DirectDatabaseQuery.DirectQuery

Direct Query

The plugin runs a direct database query instead of using a higher-level WordPress API or cache-aware pattern.

medium weight

Why It Shows Up

Plugin Check found `$wpdb` access that queries the database directly, changes schema, or bypasses normal caching expectations.

Why It Matters

Direct queries can be correct, but they are easier to make unsafe, slower at scale, and harder for WordPress to cache or filter.

How to Fix

  • Use WordPress APIs such as post, term, metadata, option, or user functions when they fit the task.
  • If direct SQL is necessary, prepare dynamic values and add a clear caching strategy for repeated reads.
  • Keep schema changes in activation or upgrade routines and make them idempotent.

References

WordPress database access

Affected Plugins

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#1651Image Source Control Lite – Show Image Credits and Captions331402213k+Non-prefixed hook name
#1652ImageLinks – Interactive Image Builder with Hotspots33517901k+Text Domain Mismatch
#1653Inactive User Deleter33453170800Output is not escaped
#1654InPost Gallery33105245700Non-prefixed global variable
#1655WPZOOM Social Feed Widget & Block3331027860k+Unsafe printing function
#1656Intagrate Lite33941524k+date date
#1657IssueM3356173600Request data is not unslashed
#1658ITRO Popup Plugin335911356k+Output is not escaped
#1659Logo Showcase Ultimate – Logo Carousel, Logo Slider & Logo Grid332741063k+Text Domain Mismatch
#1660LWSCache33471046k+Non-prefixed global variable
#1661Forms for Mailchimp by Optin Cat – Grow Your MailChimp List33711332k+Missing direct file access protection
#1662MWB HubSpot for WooCommerce – CRM, Abandoned Cart, Email Marketing, Marketing Automation & Analytics33262797k+Non-prefixed global variable
#1663MAS Companies For WP Job Manager33623081k+Non-prefixed hook name
#1664MaxiBlocks Builder | 17,000+ Design Assets, Patterns, Icons & Starter Sites332503700Non-prefixed function
#1665Membership For WooCommerce3340659900Non-prefixed global variable
#1666Mollie Payments for WooCommerce3370123100k+Dynamic hook name
#1667Molongui Post Contributors: Multi-Role Contributor Attribution33240162400Output is not escaped
#1668News Announcement Scroll332372592k+Non-prefixed global variable
#1669Nomad World Map33424191700Text Domain Mismatch
#1670Notification Master – Real-Time WordPress Notifications With Email, SMS, Webhooks & More332932151k+Text Domain Mismatch
#1671Pastacode337766400Non-prefixed global variable
#1672پینوا | Pinova3317175500Output is not escaped
#1673Post Lists View Custom334621502k+Missing Arg Domain
#1674PublishPress Checklists: Pre-Publishing Approval Checklist – Validate Post Requirements331401823k+Missing Translators Comment
#1675PW WooCommerce Gift Cards3323818620k+Output is not escaped
#1676Quick Restaurant Reservations33654179500Text Domain Mismatch
#1677Frisbii Pay33912921k+Non-prefixed global variable
#1678Rename wp-login.php to anything you want33251117500Output is not escaped
#1679Review Slider for WooCommerce33160422400Non-prefixed global variable
#1680Reviews Plus332233781k+Non-prefixed function
#1681RTMKit331138850k+Non-prefixed global variable
#1682Live Sales Notification (Recent Sales Popups)33114120400SQL query is not prepared
#1683Schema & Structured Data for WP & AMP3363246100k+Non-prefixed global variable
#1684Sessions33196103900Output is not escaped
#1685TaxCloud for WooCommerce3323261500Non-prefixed function
#1686SMTP2GO for WordPress – Email Made Easy3318611130k+Output is not escaped
#1687Social Rocket – Social Sharing Plugin331,0162551k+Unsafe printing function
#1688Spiffy Calendar334732433k+Output is not escaped
#1689Spin Wheel – Interactive spinning wheel that offers coupons33680313500Unsafe printing function
#1690Simple Sticky Add To Cart For WooCommerce3340170900Text Domain Mismatch
#1691Sublanguage33266287700Output is not escaped
#1692WP Twitter Auto Publish334421714k+Output is not escaped
#1693Uix Shortcodes33246444400Non-prefixed global variable
#1694Display Posts As List, Grid, Thumbs33442241900Output is not escaped
#1695Variation Swatches for WooCommerce3346911650k+Text Domain Mismatch
#1696Webmention336489900Output is not escaped
#1697Website Monetization by MageNet33608720k+Output is not escaped
#1698Textmetrics33324163400Output is not escaped
#1699White Label CMS33412202200k+Unsafe printing function
#1700Rich Showcase for Google Reviews33213278100k+Output is not escaped