WordPress.DB.DirectDatabaseQuery.SchemaChange
Schema Change
The plugin runs a direct database query instead of using a higher-level WordPress API or cache-aware pattern.
Why It Shows Up
Plugin Check found `$wpdb` access that queries the database directly, changes schema, or bypasses normal caching expectations.
Why It Matters
Direct queries can be correct, but they are easier to make unsafe, slower at scale, and harder for WordPress to cache or filter.
How to Fix
- Use WordPress APIs such as post, term, metadata, option, or user functions when they fit the task.
- If direct SQL is necessary, prepare dynamic values and add a clear caching strategy for repeated reads.
- Keep schema changes in activation or upgrade routines and make them idempotent.
References
Affected Plugins
| Rank | Plugin | Score | Errors | Warnings | Installs | Added | Updated | Top Issue |
|---|---|---|---|---|---|---|---|---|
| #351 | Democracy Poll | 24 | 387 | 436 | 7k+ | Short PHP open tag found | ||
| #352 | Deployer for Git | 24 | 541 | 1,336 | 500 | Non-prefixed global variable | ||
| #353 | Digital License Manager | 24 | 295 | 670 | 700 | Non-prefixed hook name | ||
| #354 | Drop Shadow Boxes | 24 | 642 | 1,290 | 4k+ | Non-prefixed global variable | ||
| #355 | Easy Form Builder by WhiteStudio — Drag & Drop Form Builder | 24 | 194 | 383 | 1k+ | Nonce verification recommended | ||
| #356 | Easy Modal | 24 | 564 | 299 | 7k+ | Unsafe printing function | ||
| #357 | ELEX WooCommerce Request a Quote | 24 | 398 | 266 | 2k+ | Request data is not unslashed | ||
| #358 | Email Subscribers & Newsletters – Email Marketing, Post Notifications & Newsletter Plugin for WordPress | 24 | 652 | 1,495 | 60k+ | Non-prefixed hook name | ||
| #359 | EmbedPress – PDF Embedder, Embed PDF viewer, YouTube Videos, 3D FlipBook, Social feeds & more | 24 | 669 | 1,550 | 100k+ | Output is not escaped | ||
| #360 | Conversios: Google Analytics (GA4), Google Ads, Conversion and Analytics Tracking for Multi-Channels | 24 | 107 | 1,461 | 10k+ | Non-prefixed global variable | ||
| #361 | Event Tickets and Registration | 24 | 3,411 | 4,217 | 90k+ | Non-prefixed global variable | ||
| #362 | Etsy Integration For WooCommerce | 24 | 1,246 | 4,643 | 900 | Non-prefixed global variable | ||
| #363 | F12 Profiler | 24 | 282 | 451 | 500 | Direct Query | ||
| #364 | Fast Velocity Minify | 24 | 282 | 256 | 40k+ | Unsafe printing function | ||
| #365 | Fattura24 | 24 | 312 | 333 | 400 | Output is not escaped | ||
| #366 | FeedWordPress | 24 | 496 | 319 | 9k+ | Missing Arg Domain | ||
| #367 | FileBird – WordPress Media Library Folders & File Manager | 24 | 239 | 377 | 200k+ | wp function not compatible with requires wp | ||
| #368 | Fix Alt Text | 24 | 544 | 346 | 1k+ | Non Singular String Literal Domain | ||
| #369 | FluentCRM – Email Newsletter, Automation, Email Marketing, Email Campaigns, Optins, Leads, and CRM Solution | 24 | 193 | 753 | 80k+ | Direct Query | ||
| #370 | Food Store – Online Food Delivery & Pickup | 24 | 862 | 1,941 | 1k+ | Non-prefixed global variable | ||
| #371 | Football Pool | 24 | 1,085 | 733 | 1k+ | Output is not escaped | ||
| #372 | Formidable PRO2PDF | 24 | 218 | 477 | 1k+ | Non-prefixed global variable | ||
| #373 | FV Player 8 | 24 | 323 | 1,383 | 1k+ | Non-prefixed function | ||
| #374 | GD Mail Queue | 24 | 502 | 582 | 700 | Output is not escaped | ||
| #375 | Cookie Banner for GDPR / CCPA – WPLP Cookie Consent | 24 | 1,209 | 1,931 | 9k+ | Non-prefixed global variable | ||
| #376 | Genealogical Tree – Family Tree & Ancestry for WordPress | 24 | 560 | 1,641 | 600 | Non-prefixed global variable | ||
| #377 | GEO my WP | 24 | 554 | 2,089 | 3k+ | Non-prefixed hook name | ||
| #378 | Connector Wizard (formerly LC Wizard) | 24 | 248 | 464 | 1k+ | Non-prefixed function | ||
| #379 | ExactMetrics – Google Analytics Dashboard for WordPress (Website Stats Plugin) | 24 | 118 | 442 | 300k+ | Nonce verification recommended | ||
| #380 | Easy Google Maps | 24 | 1,764 | 389 | 20k+ | Non Singular String Literal Domain | ||
| #381 | GS Behance Portfolio – Display Projects, Gallery & Slider | 24 | 855 | 1,617 | 400 | Non-prefixed global variable | ||
| #382 | Hide Shipping Method For WooCommerce | 24 | 946 | 1,447 | 10k+ | Non-prefixed global variable | ||
| #383 | InstaWP Connect – 1-click WP Staging & Migration | 24 | 253 | 811 | 40k+ | Non-prefixed global variable | ||
| #384 | Joli Table Of Contents | 24 | 653 | 1,755 | 7k+ | Non-prefixed global variable | ||
| #385 | Kenta Blocks – Responsive Blocks and block templates library | 24 | 564 | 1,405 | 2k+ | Non-prefixed global variable | ||
| #386 | Koko Analytics – Privacy-Friendly WordPress Analytics | 24 | 161 | 280 | 60k+ | Short PHP open tag found | ||
| #387 | LatePoint – Calendar Booking Plugin for Appointments and Events | 24 | 1,841 | 937 | 100k+ | Output is not escaped | ||
| #388 | LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes | 24 | 414 | 1,176 | 10k+ | Non-prefixed global variable | ||
| #389 | Limit Attempts by BestWebSoft – WordPress Anti-Bot and Security Plugin for Login and Forms | 24 | 563 | 548 | 4k+ | Text Domain Mismatch | ||
| #390 | Local Delivery Drivers for WooCommerce | 24 | 1,832 | 1,483 | 900 | Non-prefixed global variable | ||
| #391 | Local Pickup for WooCommerce | 24 | 550 | 1,388 | 1k+ | Non-prefixed global variable | ||
| #392 | Generate Images (AI) – Magic Post Thumbnail | 24 | 1,940 | 1,761 | 6k+ | Non-prefixed global variable | ||
| #393 | Mailchimp for WooCommerce | 24 | 523 | 663 | 200k+ | Non-prefixed global variable | ||
| #394 | MailerPress – Email Marketing, Newsletter, Email Automation & WooCommerce Emails | 24 | 772 | 3,853 | 1k+ | Direct Query | ||
| #395 | Mang Board WP | 24 | 1,249 | 4,720 | 9k+ | Non-prefixed global variable | ||
| #396 | Mass Pages/Posts Creator | 24 | 736 | 1,364 | 1k+ | Non-prefixed global variable | ||
| #397 | miniOrange Social Login and Register (Discord, Google, Twitter, LinkedIn) | 24 | 3,702 | 902 | 10k+ | wp function not compatible with requires wp | ||
| #398 | Receive customer payments on Woocommerce | 24 | 549 | 1,419 | 1k+ | Non-prefixed global variable | ||
| #399 | MT Addons for Elementor | 24 | 3,073 | 1,442 | 2k+ | Text Domain Mismatch | ||
| #400 | Music Player for Elementor – Audio Player & Podcast Player | 24 | 608 | 1,302 | 10k+ | Non-prefixed global variable |
