PluginScore

WordPress.DB.PreparedSQLPlaceholders.UnnecessaryPrepare

Unnecessary Prepare

A SQL query is built in a way that Plugin Check cannot verify as safely prepared.

critical weight

Why It Shows Up

The scan found missing, incorrect, quoted, unsupported, or mismatched SQL placeholders around `$wpdb->prepare()` usage.

Why It Matters

Broken preparation can leave dynamic SQL values unsafe or make queries behave differently than intended.

How to Fix

  • Keep placeholders in the SQL string and pass dynamic values as separate arguments.
  • Use the placeholder that matches the value type.
  • Do not quote placeholders manually, and use allowlists for identifiers or SQL fragments.

References

WordPress database access

Affected Plugins

RankPluginScoreErrorsWarningsInstallsUpdatedTop Issue
#1Shopping Cart & eCommerce Store185,45917,2984k+Non Prefixed Variable Found
#2Event Organiser191,10654420k+Text Domain Mismatch
#3ERP: Complete HR, Accounting & CRM Suite with Recruitment and WooCommerce CRM Support218295,9665k+Direct Query
#4WP-Lister Lite for eBay216,6975,1292k+Output Not Escaped
#5Advanced Form Integration — Connect Forms to 200+ Apps225,7714,67810k+wp function not compatible with requires wp
#6Directorist: AI-Powered Business Directory, Listings & Classified Ads224432,12920k+Non Prefixed Variable Found
#7Leyka222533,4452k+Missing Unslash
#8WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell225,9962,7905k+Text Domain Mismatch
#9WPBot – AI ChatBot for Live Support, Lead Generation, AI Services232641,0185k+Non Prefixed Variable Found
#10GamiPress – Gamification plugin to reward points, achievements, badges & ranks in WordPress233,6622,97110k+Output Not Escaped
#11Interactive Content – H5P2356538040k+Non Singular String Literal Domain
#12License Manager for WooCommerce231298196k+Missing Unslash
#13teachPress237441,5872k+Not Prepared
#14Advanced Booking & Appointment System – Webba Booking Calendar231,6153,3002k+Non Prefixed Variable Found
#15WP Compress – Instant Performance & Speed Optimization233,0532,38410k+Non Singular String Literal Domain
#16Email Subscribers & Newsletters – Email Marketing, Post Notifications & Newsletter Plugin for WordPress246521,49560k+Non Prefixed Hookname Found
#17Cookie Banner for GDPR / CCPA – WPLP Cookie Consent241,2011,9129k+Non Prefixed Variable Found
#18Product Feed Manager for WooCommerce – CTX Feed – Support 220+ Shopping & Social Channels241,6151,38170k+Text Domain Mismatch
#19WSMS (formerly WP SMS) – SMS & MMS Notifications with OTP and 2FA for WooCommerce24911,7257k+Non Prefixed Hookname Found
#20WP Travel Engine – Tour Booking Plugin – Tour Operator Software242,0105,68820k+Non Prefixed Variable Found
#21Bulk Page Generator – LPagery256701,9263k+Non Prefixed Variable Found
#22LWS Optimize – All-in-One Speed Booster & Cache Tools2543076420k+Non Prefixed Variable Found
#23Video Gallery – YouTube Gallery, Playlist & Video Grid252751,0702k+Non Prefixed Hookname Found
#24Video Gallery – Vimeo and YouTube Gallery265617946k+Non Prefixed Variable Found
#25Post Grid Gutenberg Blocks for News, Magazines, Blog Websites – PostX2913540040k+Non Prefixed Variable Found
#26Dynamic Pricing With Discount Rules for WooCommerce301361315k+Output Not Escaped
#27WPS Cleaner3043049120k+Output Not Escaped
#28Zoho CRM Lead Magnet301011,0253k+Missing Unslash
#29Slider Carousel – Image Slider312241,2333k+Missing Unslash
#30Project Manager – AI Powered Project Management, Task Management, Kanban Board & Time Tracker31639336k+Interpolated Not Prepared
#31Rich Showcase for Google Reviews33230227100k+Output Not Escaped
#32CM Search And Replace – Optimize content edits with a powerful search and replace tool342861112k+Output Not Escaped
#33WP Maps – Google Maps,OpenStreetMap,Mapbox,Store Locator,Listing,Directory & Filters3421945360k+wp function not compatible with requires wp
#34Kirki – Freeform Page Builder, Website Builder & Customizer35775500k+Recommended
#35Phoenix Media Rename3717510450k+Output Not Escaped
#36GoodBarber3838731k+Recommended
#37Social Login4181105k+Input Not Sanitized
#38Responsive Plus – Elementor Templates & Starter Sites414630710k+Non Prefixed Variable Found
#39Web3 Crypto Payments by DePay for WooCommerce7861011k+Direct Query
#40PDF Generator for WordPress83101981k+Non Prefixed Variable Found