PluginScore

WordPress.DB.DirectDatabaseQuery.NoCaching

No Caching

The plugin runs a direct database query instead of using a higher-level WordPress API or cache-aware pattern.

medium weight

Why It Shows Up

Plugin Check found `$wpdb` access that queries the database directly, changes schema, or bypasses normal caching expectations.

Why It Matters

Direct queries can be correct, but they are easier to make unsafe, slower at scale, and harder for WordPress to cache or filter.

How to Fix

  • Use WordPress APIs such as post, term, metadata, option, or user functions when they fit the task.
  • If direct SQL is necessary, prepare dynamic values and add a clear caching strategy for repeated reads.
  • Keep schema changes in activation or upgrade routines and make them idempotent.

References

WordPress database access

Affected Plugins

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#1001TrueBooker – Appointment Booking and Scheduler System255292,743600Non-prefixed global variable
#1002Spectra Gutenberg Blocks – Website Builder for the Block Editor252533,2271m+Non-prefixed global variable
#1003Ultimate Blocks – 25+ Gutenberg Blocks for Block Editor256901,58150k+Non-prefixed global variable
#1004Ultimate Post Kit Addons for Elementor2518241230k+Missing nonce verification
#1005Vayu Blocks – Website Builder for the Gutenberg Block Editor251742331k+Text Domain Mismatch
#1006Broadcast Live Video – Live Streaming : WebRTC, HLS, RTSP, RTMP252981,010500Request data is not unslashed
#10073D viewer by Visody258321,3221k+Non-prefixed global variable
#1008WC Disable Zoom / Lightbox features255291,297700Non-prefixed global variable
#1009Product Customer List for WooCommerce256101,3349k+Non-prefixed global variable
#1010weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot252795184k+Non-prefixed global variable
#1011weForms – Easy Drag & Drop Contact Form Builder For WordPress2591645010k+Output is not escaped
#1012Secure Gateway for Authorize.net and WooCommerce by Pledged Plugins259071,41810k+Non-prefixed global variable
#1013Digital Goods (Checkout Field Editor) for WooCommerce Checkout255391,4793k+Non-prefixed global variable
#1014Dynamic Pricing and Discount Rules for WooCommerce255311,569600Non-prefixed global variable
#1015PDF Builder for WooCommerce. Create invoices,packing slips and more253725032k+Non-prefixed global variable
#1016Product Table for WooCommerce251838965k+Non-prefixed global variable
#1017Payment Plugins for Stripe WooCommerce25348772100k+Non-prefixed global variable
#1018Pay with Vipps and MobilePay for WooCommerce258465145k+Output is not escaped
#1019HUSKY – Products Filter Professional for WooCommerce251,89590k+Non-prefixed global variable
#1020Wordfence Login Security2524841870k+Output is not escaped
#1021WordPress Importer252381102m+Output is not escaped
#1022WP Airbnb Review Slider253256461k+Non-prefixed global variable
#1023Super Page Cache – Cloudflare Cache, Page Speed & Core Web Vitals2513735360k+Input is not sanitized
#1024WP Coupons and Deals – WordPress Coupon Plugin259141,4601k+Non-prefixed global variable
#1025WP Data Access – App Builder for Tables, Forms, Charts, Maps & Dashboards251,4311,27010k+Output is not escaped
#1026WP-DownloadManager256075083k+Unsafe printing function
#1027WP Review Slider251,1862,2796k+Non-prefixed global variable
#1028WP Go Maps – Google Map, OpenStreetMap, Leaflet Map254,9961,008300k+Unsafe printing function
#1029WP Google Review Slider251,3672,58230k+Non-prefixed global variable
#1030WP Encryption – One Click Free SSL Certificate & SSL / HTTPS Redirect, Security & SSL Scan257271,55450k+Non-prefixed global variable
#1031Nested Pages2567456090k+Non-prefixed global variable
#1032WP Photo Album Plus2531,79910k+Direct Query
#1033WP-Polls2561863940k+Unsafe printing function
#1034WP Popups – WordPress Popup builder2544034230k+Output is not escaped
#1035Perfect Images: Regenerate Thumbnails, Image Sizes, WebP & AVIF2515411860k+Non-prefixed global variable
#1036SlimStat Analytics251,17787070k+Exception output is not escaped
#1037Smush – Image Optimization, Compression, Lazy Load, WebP & CDN252525661m+Non-prefixed hook name
#1038Wp Social Login and Register Social Counter258073890k+Non-prefixed global variable
#1039WP Spell Check2564,3902k+Direct Query
#1040WP Statistics – Simple, privacy-friendly Google Analytics alternative256102,465600k+Non-prefixed global variable
#1041WP Super Cache258009891m+Output is not escaped
#1042WP Time Slots Booking Form254391,1371k+Non-prefixed global variable
#1043WP TripAdvisor Review Slider259582,0588k+Non-prefixed global variable
#1044WP Yelp Review Slider254296451k+Non-prefixed global variable
#1045WPCargo Track & Trace2523955710k+Non-prefixed global variable
#1046Team Members Showcase255911,4944k+Non-prefixed global variable
#1047WPvivid Backup for MainWP258181,79410k+Missing nonce verification
#1048WPvivid — Backup, Migration & Staging258991,461900k+Non-prefixed namespace
#1049Backup, Restore and Migrate your sites with XCloner2523886410k+Input is not sanitized
#1050YeeMail — Email Template Builder & Customizer25606222600wp function not compatible with requires wp