PluginScore

WordPress.DB.DirectDatabaseQuery.NoCaching

No Caching

The plugin runs a direct database query instead of using a higher-level WordPress API or cache-aware pattern.

medium weight

Why It Shows Up

Plugin Check found `$wpdb` access that queries the database directly, changes schema, or bypasses normal caching expectations.

Why It Matters

Direct queries can be correct, but they are easier to make unsafe, slower at scale, and harder for WordPress to cache or filter.

How to Fix

  • Use WordPress APIs such as post, term, metadata, option, or user functions when they fit the task.
  • If direct SQL is necessary, prepare dynamic values and add a clear caching strategy for repeated reads.
  • Keep schema changes in activation or upgrade routines and make them idempotent.

References

WordPress database access

Affected Plugins

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#151Accept PayPal Payments using Contact Form 722359127600Text Domain Mismatch
#152Passster – Password Protect Pages and Content225391,42210k+Non-prefixed global variable
#153Cozy Blocks – Page Builder for Gutenberg Editor & FSE with 700+ Patterns, 58 Blocks & Templates222,3924,2906k+Non-prefixed global variable
#154RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login223,6525,1458k+Non-prefixed global variable
#155Directorist: AI-Powered Business Directory, Listings & Classified Ads225602,20220k+Non-prefixed global variable
#156DirectoryPress – Business Directory And Classified Ad Listing224,7872,795700Text Domain Mismatch
#157Download Manager222,5131,459100k+Output is not escaped
#158Diverse Solutions IDX Real Estate Listings & MLS Search227456051k+Heredoc Output Not Escaped
#159Dynamic QR Code – generator222382085k+Missing direct file access protection
#160E2Pdf – Export Pdf Tool for WordPress221,08184710k+Unsafe printing function
#161easyReservations225,3072,480800Text Domain Mismatch
#162Ebook Store224101,054700Non-prefixed global variable
#163EleSpare – News, Magazine and Blog Addons for Elementor227331,42310k+Non-prefixed global variable
#164Employee Spotlight – Team Member Showcase & Meet the Team Plugin22247689400Non-prefixed hook name
#165Estatik Real Estate Plugin223,08432510k+Text Domain Mismatch
#166Events Maker by dFactory225888191k+Output is not escaped
#167Events Manager – Calendar, Bookings, Tickets, and more!224,7165,69070k+Output is not escaped
#168FACTO – Facturación Electrónica22244423400Request data is not unslashed
#169Falang multilanguage for WordPress227167691k+Output is not escaped
#170Finale Lite – Sales Countdown Timer & Discount for WooCommerce221,0314514k+Output is not escaped
#171FireBox Popups – Increase Sales and Grow Your Email List221578267k+Non-prefixed global variable
#172Notification Bar, Announcement and Cookie Notice WordPress Plugin – FooBar221,3211,3713k+Non-prefixed global variable
#173Five Star Restaurant Menu and Food Ordering227546105k+Output is not escaped
#174Frontend Dashboard22375941500Non-prefixed function
#175FunnelKit Payment Gateway for Stripe WooCommerce2224432120k+Input is not sanitized
#176GeoDirectory – WP Business Directory Plugin and Classified Listings Directory224,4653,98510k+Output is not escaped
#177Happy Addons for Elementor22652446400k+Output is not escaped
#178Happyforms – Form Builder for WordPress: Drag & Drop Contact Forms, Surveys, Payments & Multipurpose Forms221,03172220k+Unsafe printing function
#179HeadSpace2 SEO229403603k+Text Domain Mismatch
#180Hesabfa Accounting22467718500Text Domain Mismatch
#181History Log by click5226751,290400Direct Query
#182Csomagpontok és Címkék WooCommerce-hez222,0027697k+Text Domain Mismatch
#183If-So Dynamic Content – Elementor & All Page Builders Personalization229668397k+Output is not escaped
#184Insert or Embed Articulate Content into WordPress226591,4372k+Non-prefixed global variable
#185Számlázz.hu integráció WooCommerce-hez221,1694607k+Text Domain Mismatch
#186The Innovative Form Builder – IvyForms22750309800Exception output is not escaped
#187Jetpack – WP Security, Backup, Speed, & Growth223,2921,4383m+Text Domain Mismatch
#188LearnPress – WordPress LMS Plugin for Create and Sell Online Courses222,4333,59470k+Non-prefixed global variable
#189Custom Login Page Customizer – Login Designer225881,45530k+Non-prefixed global variable
#190Mail Baby SMTP22385699600SQL query is not prepared
#191Mailchimp for WooCommerce22524658200k+Non-prefixed global variable
#192MailChimp Subscribe Form, Optin Builder, PopUp Builder, Form Builder221,1203,0122k+Non-prefixed global variable
#193MailOptin – Popup, Optin Forms & Email Newsletters for Mailchimp, HubSpot, AWeber Etc.222,6252,45810k+Output is not escaped
#194MapSVG – Vector maps, Image maps, Google Maps22179931k+Missing direct file access protection
#195MarketKing — Ultimate WooCommerce Multivendor Marketplace Solution221,1311,846700Non-prefixed global variable
#196Search Atlas SEO – Premier SEO Plugin for One-Click WP Publishing & Integrated AI Optimization221,3062,8188k+Output is not escaped
#197Modula Image Gallery – Photo Grid & Video Gallery22474437100k+Text Domain Mismatch
#198Molongui Authorship – Author Boxes, Guest Authors & Co-Authors for WordPress229191,23010k+Output is not escaped
#199Motors – Car Dealership & Classified Listings Plugin225,3435,9559k+Text Domain Mismatch
#200MStore API – Create Native Android & iOS Apps On The Cloud226358563k+SQL query is not prepared