PluginScore

WordPress.DB.RestrictedFunctions.mysql_mysqli_close

mysql mysqli close

The plugin uses a raw MySQL extension or class instead of WordPress database APIs.

medium weight

Why It Shows Up

The scan found `mysql_*`, `mysqli_*`, PDO MySQL, or related database functions in plugin code.

Why It Matters

Bypassing `$wpdb` can ignore WordPress database configuration, escaping conventions, character sets, and compatibility layers.

How to Fix

  • Replace raw MySQL calls with `$wpdb` methods or higher-level WordPress APIs.
  • Use `$wpdb->prepare()` for dynamic values.
  • If a third-party library requires a database connection, isolate it and document why WordPress APIs cannot be used.

References

WordPress database access

Affected Plugins

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#1WPPizza – A Restaurant Plugin184,6892,7031k+Text Domain Mismatch
#2Matomo Analytics – Powerful, Privacy-First Insights for WordPress191,911877100k+Exception output is not escaped
#3Duplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More212,5721,2771m+Output is not escaped
#4WP phpMyAdmin214,5286,43550k+Missing Arg Domain
#5wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin211,8111,43270k+Output is not escaped
#6InfiniteWP Client222,2861,812200k+Exception output is not escaped
#71 Click Migration & Backup: Free WordPress Migration Plugin with Zero Downtime & Easy Clone24140193400Direct Query
#8A2 Optimized WP – Turbocharge and secure your WordPress site2427123160k+Missing Arg Domain
#9Backuply – Backup, Restore, Migrate and Clone24704551700k+Non-prefixed global variable
#10Screen Reader Accessibility – WCAG, Text-to-Speech & AI Accessibility Fixes24235330600Non-prefixed global variable
#11Softaculous241155010k+file system operations fread
#12WEB-Translation – eTranslation Multilingual252171,057400Non-prefixed function
#13TranslatePress – Translate Multilingual sites with AI Translation254991,639400k+Non-prefixed hook name
#14Login Security Solution272161544k+Output is not escaped
#15WPPerformanceTester3594441k+Output is not escaped
#16Search & Replace365053100k+Missing nonce verification