WordPress.DB.RestrictedClasses.mysql__mysqli
mysql mysqli
The plugin uses a raw MySQL extension or class instead of WordPress database APIs.
Why It Shows Up
The scan found `mysql_*`, `mysqli_*`, PDO MySQL, or related database functions in plugin code.
Why It Matters
Bypassing `$wpdb` can ignore WordPress database configuration, escaping conventions, character sets, and compatibility layers.
How to Fix
- Replace raw MySQL calls with `$wpdb` methods or higher-level WordPress APIs.
- Use `$wpdb->prepare()` for dynamic values.
- If a third-party library requires a database connection, isolate it and document why WordPress APIs cannot be used.
References
Affected Plugins
| Rank | Plugin | Score | Errors | Warnings | Installs | Updated | Top Issue |
|---|---|---|---|---|---|---|---|
| #1 | Advanced File Manager – Ultimate File Manager for WordPress And Document Library Solution | 19 | 1,218 | 901 | 100k+ | Exception Not Escaped | |
| #2 | Backup Migration | 21 | 981 | 1,093 | 80k+ | Non Prefixed Variable Found | |
| #3 | rtMedia for WordPress, BuddyPress and bbPress | 21 | 363 | 633 | 8k+ | Non Prefixed Constant Found | |
| #4 | FileOrganizer – WordPress File Manager | 21 | 536 | 241 | 200k+ | unlink unlink | |
| #5 | Modular DS: Monitor, update, and backup multiple websites | 21 | 161 | 81 | 40k+ | Exception Not Escaped | |
| #6 | Wise Chat | 21 | 470 | 506 | 5k+ | Output Not Escaped | |
| #7 | File Manager Pro – Filester | 22 | 565 | 391 | 100k+ | Missing Unslash | |
| #8 | ManageWP Worker | 22 | 507 | 565 | 1m+ | Non Prefixed Class Found | |
| #9 | File Manager | 22 | 740 | 520 | 1m+ | Unsafe Printing Function | |
| #10 | WP BackItUp Community Edition | 23 | 257 | 989 | 6k+ | Non Prefixed Variable Found | |
| #11 | InstaWP Connect – 1-click WP Staging & Migration | 24 | 253 | 811 | 40k+ | Non Prefixed Variable Found | |
| #12 | WP RSS Aggregator – RSS Import, Feed to Post, Autoblogging, AI Content | 24 | 1,775 | 393 | 40k+ | Text Domain Mismatch | |
| #13 | Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin | 27 | 122 | 135 | 3k+ | Non Prefixed Variable Found | |
| #14 | Search & Replace | 36 | 50 | 53 | 100k+ | Missing |
