WordPress.DB.DirectDatabaseQuery.NoCaching

No Caching

The plugin runs a direct database query instead of using a higher-level WordPress API or cache-aware pattern.

medium weight

Why It Shows Up

Plugin Check found `$wpdb` access that queries the database directly, changes schema, or bypasses normal caching expectations.

Why It Matters

Direct queries can be correct, but they are easier to make unsafe, slower at scale, and harder for WordPress to cache or filter.

How to Fix

  • Use WordPress APIs such as post, term, metadata, option, or user functions when they fit the task.
  • If direct SQL is necessary, prepare dynamic values and add a clear caching strategy for repeated reads.
  • Keep schema changes in activation or upgrade routines and make them idempotent.

Affected Plugins

RankPluginScoreErrorsWarningsInstallsUpdatedTop Issue
#1351Equivalent Mobile Redirect3529172k+Text Domain Mismatch
#1352EWWW Image Optimizer352257291m+Direct Query
#1353Expire User Passwords353153k+Nonce verification recommended
#1354Export Featured Images35176671k+Output is not escaped
#1355Extendify35117168500k+Non-prefixed global variable
#1356WP2Social Auto Publish356432159k+Unsafe printing function
#1357Force Regenerate Thumbnails351217200k+unlink unlink
#1358Full Width Banner Slider Wp352391402k+Output is not escaped
#1359Video Gallery – YouTube Gallery, Vimeo, Video Portfolio, Image Portfolio and Image Gallery355019910k+Non-prefixed global variable
#1360GD bbPress Attachments352106k+wp redirect wp redirect
#1361GDPR Compliance & Cookie Consent35251614k+Output is not escaped
#1362GeoTargeting Lite – WordPress Geolocation3566791k+Output is not escaped
#1363Glossary35169932k+Non Singular String Literal Domain
#1364Google Analytics Opt-Out353475k+Output is not escaped
#1365Gravitec.net – Web Push Notifications3547521k+wp function not compatible with requires wp
#1366Ultimate Addons for Elementor35702262m+Non-prefixed hook name
#1367Health Check & Troubleshooting35264238300k+Missing Arg Domain
#1368HivePress – Business Directory, Listings & Classified Ads Plugin353818010k+Direct Query
#1369HookMeUp for WooCommerce35592910k+Output is not escaped
#1370Hyve Lite – AI Chatbot, ChatGPT-Powered Conversational Support351407k+Direct Query
#1371ImageMagick Engine35632960k+Unsafe printing function
#1372User Import with meta – WP Ultimate CSV Importer Add-on35271405k+Interpolated SQL is not prepared
#1373Imsanity353229200k+Direct Query
#1374InPost PL35292510k+Non-prefixed global variable
#1375Woody Code Snippets – Insert PHP, CSS, JS, and Header/Footer Scripts35649160k+Output is not escaped
#1376Social Feed Gallery351045280k+Text Domain Mismatch
#1377Instapage Plugin35220455k+Output is not escaped
#1378iPages – FlipBook Image & PDF Viewer354671772k+Text Domain Mismatch
#1379JWT Auth – WordPress JSON Web Token Authentication3514186k+Output is not escaped
#1380KBoard 위젯 – 워드프레스 게시판3553323k+Output is not escaped
#1381Kirki – Freeform Page Builder, Website Builder & Customizer35775500k+Nonce verification recommended
#1382Lead Form Builder & Contact Form354003459k+Output is not escaped
#1383LiteSpeed Cache352868937m+Non-prefixed global variable
#1384Log HTTP Requests357182k+Interpolated SQL is not prepared
#1385Login Page Styler – Custom WordPress Login Page Customizer & Security351251682k+Missing Arg Domain
#1386MapSVG – Vector maps, Image maps, Google Maps3574471k+Missing direct file access protection
#1387Mark Posts3530341k+Output is not escaped
#1388Mechanic Visitor Counter35240668k+Output is not escaped
#1389Restaurant Menu – Food Ordering System – Table Reservation353171868k+Unsafe printing function
#1390MetaSlider Gallery – Image Gallery, Lightbox Galleries, Modal Windows351574910k+Output is not escaped
#1391Hide from Search35583k+Missing direct file access protection
#1392NS Cloner – Site Copier3529167k+Missing direct file access protection
#1393Fonts Plugin | Google Fonts, Adobe Fonts & Upload Fonts35418200k+Missing direct file access protection
#1394One Page Express Companion351326510k+Output is not escaped
#1395ONet Regenerate Thumbnails35190641k+Text Domain Mismatch
#1396OPcache Manager35155751k+Output is not escaped
#1397Orderable – Restaurant & Food Ordering System35123245k+Non-prefixed global variable
#1398Paytm Payment Gateway35921043k+Missing Arg Domain
#1399Perfecty Push Notifications352042134k+SQL query is not prepared
#1400Post Content Shortcodes35205562k+Output is not escaped