PluginScore

WordPress.DB.DirectDatabaseQuery.NoCaching

No Caching

The plugin runs a direct database query instead of using a higher-level WordPress API or cache-aware pattern.

medium weight

Why It Shows Up

Plugin Check found `$wpdb` access that queries the database directly, changes schema, or bypasses normal caching expectations.

Why It Matters

Direct queries can be correct, but they are easier to make unsafe, slower at scale, and harder for WordPress to cache or filter.

How to Fix

  • Use WordPress APIs such as post, term, metadata, option, or user functions when they fit the task.
  • If direct SQL is necessary, prepare dynamic values and add a clear caching strategy for repeated reads.
  • Keep schema changes in activation or upgrade routines and make them idempotent.

References

WordPress database access

Affected Plugins

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#151Leyka222533,4452k+Request data is not unslashed
#152Custom Login Page Customizer – Login Designer225881,45530k+Non-prefixed global variable
#153MailOptin – Popup, Optin Forms & Email Newsletters for Mailchimp, HubSpot, AWeber Etc.222,6192,45310k+Output is not escaped
#154Slider, Gallery, and Carousel by MetaSlider – Image Slider, Video Slider22207323500k+Non-prefixed global variable
#155Modula Image Gallery – Photo Grid & Video Gallery22474436100k+Text Domain Mismatch
#156Molongui Authorship – Author Boxes, Guest Authors & Co-Authors for WordPress229191,23010k+Output is not escaped
#157Moloni229023562k+Missing Arg Domain
#158Motors – Car Dealership & Classified Listings Plugin225,3405,9589k+Text Domain Mismatch
#159Newsletters222,9682,2482k+Text Domain Mismatch
#160NinjaFirewall (WP Edition) – Advanced Security Plugin and Firewall221,2652,065100k+Non-prefixed global variable
#161NinjaScanner – Virus & Malware scan2259655130k+Non-prefixed global variable
#162WP OAuth Server (OAuth Authentication)221893473k+Non-prefixed function
#163oik224891802k+Non Singular String Literal Domain
#164PagBank / PagSeguro Connect para WooCommerce225047434k+Non-prefixed global variable
#165PAYCOMET for WooCommerce221,2064232k+Text Domain Mismatch
#166Smart Popup by Supsystic223,17250310k+Non Singular String Literal Domain
#167Post SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App221,5812,326300k+Non-prefixed global variable
#168Prime Mover – Migrate WordPress Website & Backups221,3261,60010k+Non-prefixed global variable
#169Product Catalog Feed by PixelYourSite225813578k+Output is not escaped
#170Pronamic Pay222581,0773k+Non-prefixed global variable
#171PageSpeed Ninja – Cache, Minify, Defer CSS JavaScript, Critical CSS, Optimize Images, Convert WebP229844075k+Unsafe printing function
#172Restrict User Access – Ultimate Membership & Content Protection229771,84010k+Non-prefixed global variable
#173Salon Booking System – Free Version226506193k+Missing direct file access protection
#174Social Sharing Plugin – Sassy Social Share221,689233100k+wp function not compatible with requires wp
#175Seraphinite Accelerator2259425550k+Output is not escaped
#176ShortPixel Image Optimizer – Optimize Images, Convert WebP & AVIF221,044799300k+Non-prefixed global variable
#177Simple Job Board226341,35510k+Non-prefixed global variable
#178Slick Popup: Contact Form 7 Popup Plugin222,3223162k+Text Domain Mismatch
#179Slim Jetpack222,5861,9472k+Text Domain Mismatch
#180SNS Count Cache229181208k+Non Singular String Literal Domain
#181NextScripts: Social Networks Auto-Poster222,4081,13330k+Output is not escaped
#182SportsPress – Sports Club & League Manager224602,24210k+Non-prefixed global variable
#183SSL Zen — SSL Certificate Installer & HTTPS Redirects227791,57510k+Non-prefixed global variable
#184Stylish Price List – Price Table Builder & QR Code Restaurant Menu226746783k+Output is not escaped
#185SVG Flags – Beautiful Scalable Flags For All Countries!227551,2512k+Non-prefixed global variable
#186Swift Performance Lite222,3461,3257k+Text Domain Mismatch
#187Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent222255198k+error log error log
#188ThemeHunk Customizer223,9695827k+Text Domain Mismatch
#189Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin225302,33440k+Direct Query
#190Uncanny Toolkit for LearnDash2253999420k+Output is not escaped
#191Search & Replace Everything – Quick and Easy Way to Find and Replace Text, Links221,0441,79720k+Non-prefixed global variable
#192URL Shortify – Simple and Easy URL Shortener221,5202,68910k+Non-prefixed global variable
#193Welcart e-Commerce2210,37710,89610k+Text Domain Mismatch
#194UserFeedback – Create Interactive Feedback Form, User Surveys, and Polls in Seconds22444243200k+Text Domain Mismatch
#195WCFM Marketplace – Multivendor Marketplace for WooCommerce221,9371,96910k+Non-prefixed global variable
#196WCFM Membership – WooCommerce Memberships for Multivendor Marketplace2255967510k+Non-prefixed global variable
#197Fraud Prevention For WooCommerce and EDD225721,3945k+Non-prefixed global variable
#198Advanced AJAX Product Filters222,6831,20550k+Text Domain Mismatch
#199CoDesigner – All in One Elementor WooCommerce Builder224,1317745k+Text Domain Mismatch
#200Simple Shopping Cart2279653610k+Unsafe printing function