PluginScore

WordPress.DB.RestrictedFunctions.mysql_mysqli_get_server_info

mysql mysqli get server info

The plugin uses a raw MySQL extension or class instead of WordPress database APIs.

medium weight

Why It Shows Up

The scan found `mysql_*`, `mysqli_*`, PDO MySQL, or related database functions in plugin code.

Why It Matters

Bypassing `$wpdb` can ignore WordPress database configuration, escaping conventions, character sets, and compatibility layers.

How to Fix

  • Replace raw MySQL calls with `$wpdb` methods or higher-level WordPress APIs.
  • Use `$wpdb->prepare()` for dynamic values.
  • If a third-party library requires a database connection, isolate it and document why WordPress APIs cannot be used.

References

WordPress database access

Affected Plugins

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#1WPPizza – A Restaurant Plugin184,6892,7031k+Text Domain Mismatch
#2Event Organiser201,10454420k+Text Domain Mismatch
#3GiveWP – Donation Plugin and Fundraising Platform203,4373,577100k+Output is not escaped
#4Backup Migration219811,09380k+Non-prefixed global variable
#5Duplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More212,5721,2771m+Output is not escaped
#6Data Tables Generator by Supsystic2215715010k+Exception output is not escaped
#7GeoDirectory – WP Business Directory Plugin and Classified Listings Directory224,4663,97210k+Output is not escaped
#8File Manager227405201m+Unsafe printing function
#9Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe239,31026,642900Non-prefixed global variable
#10MediaPress239045834k+Output is not escaped
#11Redirection23523457100k+Non-prefixed global variable
#12Softaculous231164910k+file system operations fread
#13UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP236952,43420k+Non-prefixed hook name
#14Clone2324426240k+Output is not escaped
#15WP-CRM System – Manage Clients and Projects232971,094800Non-prefixed global variable
#16WP Migrate Lite – Migration Made Easy23368254200k+Exception output is not escaped
#17WP STAGING – WordPress Backup, Migration, Clone & Duplicate231,4891,549100k+Non-prefixed global variable
#18404 Solution244861,33810k+Non-prefixed class
#19CM Pop-Up – Create engaging popups to capture attention and boost interaction244664088k+Output is not escaped
#20Simple Calendar – Google Calendar Plugin242,05359250k+Missing direct file access protection
#21Hummingbird Performance – Cache & Page Speed Optimization for Core Web Vitals | Critical CSS | Minify CSS | Defer CSS Javascript | CDN243,41086670k+Text Domain Mismatch
#22Simple Social Media Share Buttons – Social Sharing for Everyone2446810120k+Output is not escaped
#23Hardcore Google Fonts Localizer25331261900Text Domain Mismatch
#24Index WP MySQL For Speed2525025550k+Output is not escaped
#25Social Media Share Buttons & Social Sharing Icons252,4331,383100k+Unsafe printing function
#26Social Share Icons & Social Share Buttons252,3651,35710k+Output is not escaped
#27Analytify – Google Analytics Dashboard For WordPress (GA4 analytics tracking)2516929520k+Non-prefixed global variable
#28WPvivid — Backup, Migration & Staging258991,461900k+Non-prefixed namespace
#29RSS Redirect & Feedburner Alternative262772721k+Output is not escaped
#30Related Posts Thumbnails Plugin for WordPress2638219820k+Output is not escaped
#31Duplicate Post27447274300k+Unsafe printing function
#32Custom Scrollbar271841912k+Output is not escaped
#33CM Tooltip Glossary276111888k+Output is not escaped
#34Under Construction, Coming Soon & Maintenance Mode2740114810k+Output is not escaped
#35Email Marketing Plugin – WP Email Capture273832621k+Output is not escaped
#36Void Contact Form 7 Widget For Elementor Page Builder282796610k+Text Domain Mismatch
#37Pop-up311039110k+Output is not escaped
#38Ultimate Posts Widget313098610k+Output is not escaped
#39Website Monetization by MageNet33608720k+Output is not escaped
#40CM Search And Replace – Optimize content edits with a powerful search and replace tool342861112k+Output is not escaped
#41Enhanced Text Widget341015830k+Output is not escaped
#42SSL Mixed Content Fix3453658k+Output is not escaped
#43Multi Step Form342771369k+Output is not escaped
#44Insert Headers And Footers3483113300k+Non-prefixed global variable
#45CM E-Mail Blacklist – Simple email filtering for safer registration35269205800Output is not escaped
#46NewsPlugin358453400Text Domain Mismatch
#47WP System Information3523730700Text Domain Mismatch
#48CM Header and Footer – Add custom scripts and styles to your header and footer with ease362301981k+Output is not escaped
#49Adaptive Images for WordPress3751753k+Output is not escaped
#50WP PHP Version Display90643k+trademarked term