PluginScore

WordPress.DB.DirectDatabaseQuery.NoCaching

No Caching

The plugin runs a direct database query instead of using a higher-level WordPress API or cache-aware pattern.

medium weight

Why It Shows Up

Plugin Check found `$wpdb` access that queries the database directly, changes schema, or bypasses normal caching expectations.

Why It Matters

Direct queries can be correct, but they are easier to make unsafe, slower at scale, and harder for WordPress to cache or filter.

How to Fix

  • Use WordPress APIs such as post, term, metadata, option, or user functions when they fit the task.
  • If direct SQL is necessary, prepare dynamic values and add a clear caching strategy for repeated reads.
  • Keep schema changes in activation or upgrade routines and make them idempotent.

References

WordPress database access

Affected Plugins

RankPluginScoreErrorsWarningsInstallsUpdatedTop Issue
#101Code Profiler – WordPress Performance Profiling and Debugging Made Easy222654008k+Non Prefixed Variable Found
#102Passster – Password Protect Pages and Content225391,41910k+Non Prefixed Variable Found
#103Cozy Blocks – Page Builder for Gutenberg Editor & FSE with 500+ Patterns, 57 Blocks & Templates222,1674,1757k+Non Prefixed Variable Found
#104RegistrationMagic – User Registration Forms Plugin223,6545,0628k+Non Prefixed Variable Found
#105WP Customer Area223,30894110k+Text Domain Mismatch
#106SysBasics Customize My Account for WooCommerce – Dashboard, Endpoints, Avatar & Menu Manager227038418k+Non Prefixed Variable Found
#107Directorist: AI-Powered Business Directory, Listings & Classified Ads224432,12920k+Non Prefixed Variable Found
#108Download Manager222,2901,301100k+Output Not Escaped
#109Dynamic QR Code – generator222382086k+missing direct file access protection
#110E2Pdf – Export Pdf Tool for WordPress221,07583610k+Unsafe Printing Function
#111Easy Social Feed – Social Photos Gallery and Post Feed for WordPress221,5671,27730k+Non Prefixed Variable Found
#112EleSpare – News, Magazine and Blog Addons for Elementor227331,42310k+Non Prefixed Variable Found
#113Estatik Real Estate Plugin223,04932510k+Text Domain Mismatch
#114Events Manager – Calendar, Bookings, Tickets, and more!224,7225,62170k+Output Not Escaped
#115Finale Lite – Sales Countdown Timer & Discount for WooCommerce221,0314514k+Output Not Escaped
#116FireBox Popups – Increase Sales and Grow Your Email List221538127k+Non Prefixed Variable Found
#117Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder22409236700k+Text Domain Mismatch
#118Notification Bar, Announcement and Cookie Notice WordPress Plugin – FooBar221,3211,3713k+Non Prefixed Variable Found
#119Five Star Restaurant Menu and Food Ordering227526095k+Output Not Escaped
#120FunnelKit Payment Gateway for Stripe WooCommerce2224432120k+Input Not Sanitized
#121GeoDirectory – WP Business Directory Plugin and Classified Listings Directory224,4623,97210k+Output Not Escaped
#122Anti-Malware Security and Brute-Force Firewall22544965100k+Output Not Escaped
#123Gutenberg22628342300k+missing direct file access protection
#124Happyforms – Form Builder for WordPress: Drag & Drop Contact Forms, Surveys, Payments & Multipurpose Forms221,03772220k+Unsafe Printing Function
#125HeadSpace2 SEO229403603k+Text Domain Mismatch
#126Csomagpontok és Címkék WooCommerce-hez222,0017697k+Text Domain Mismatch
#127IMPress for IDX Broker221,0856367k+Text Domain Mismatch
#128Számlázz.hu integráció WooCommerce-hez221,1694607k+Text Domain Mismatch
#129InfiniteWP Client222,2861,812200k+Exception Not Escaped
#130Import WP – Export and Import CSV and XML files to WordPress225803304k+Exception Not Escaped
#131LearnPress – WordPress LMS Plugin for Create and Sell Online Courses222,3613,38470k+Non Prefixed Variable Found
#132Custom Login Page Customizer – Login Designer225881,45530k+Non Prefixed Variable Found
#133MailOptin – Popup, Optin Forms & Email Newsletters for Mailchimp, HubSpot, AWeber Etc.222,6192,45310k+Output Not Escaped
#134Slider, Gallery, and Carousel by MetaSlider – Image Slider, Video Slider22207323500k+Non Prefixed Variable Found
#135Modula Image Gallery – Photo Grid & Video Gallery22474436100k+Text Domain Mismatch
#136Molongui Authorship – Author Boxes, Guest Authors & Co-Authors for WordPress229191,23010k+Output Not Escaped
#137Motors – Car Dealership & Classified Listings Plugin225,3405,9589k+Text Domain Mismatch
#138NinjaFirewall (WP Edition) – Advanced Security Plugin and Firewall221,2652,065100k+Non Prefixed Variable Found
#139NinjaScanner – Virus & Malware scan2259655130k+Non Prefixed Variable Found
#140WP OAuth Server (OAuth Authentication)221893473k+Non Prefixed Function Found
#141PagBank / PagSeguro Connect para WooCommerce225047434k+Non Prefixed Variable Found
#142Smart Popup by Supsystic223,17250310k+Non Singular String Literal Domain
#143Post SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App221,5812,326300k+Non Prefixed Variable Found
#144Prime Mover – Migrate WordPress Website & Backups221,3261,60010k+Non Prefixed Variable Found
#145Product Catalog Feed by PixelYourSite225813578k+Output Not Escaped
#146PageSpeed Ninja – Cache, Minify, Defer CSS JavaScript, Critical CSS, Optimize Images, Convert WebP229844075k+Unsafe Printing Function
#147Restrict User Access – Ultimate Membership & Content Protection229771,84010k+Non Prefixed Variable Found
#148Salon Booking System – Free Version226506193k+missing direct file access protection
#149Social Sharing Plugin – Sassy Social Share221,689233100k+wp function not compatible with requires wp
#150Secure Custom Fields222411,36980k+Non Prefixed Function Found