PluginScore

WordPress.DB.SlowDBQuery.slow_db_query_meta_key

slow db query meta key

A query pattern is likely to be slow on larger WordPress sites.

medium weight

Why It Shows Up

The scan found query arguments such as broad meta queries, tax queries, or unindexed lookups that commonly become expensive as content grows.

Why It Matters

A query that feels fine on a small test site can become a production bottleneck on large stores, membership sites, or publishers.

How to Fix

  • Avoid broad `meta_query`, `tax_query`, and unindexed searches on front-end requests when possible.
  • Cache expensive results with transients, object cache, or precomputed data.
  • Add narrower constraints, pagination, and indexes when custom tables are appropriate.

References

WordPress database access

Affected Plugins

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#1BulletProof Security05,0484,94920k+Output is not escaped
#2Themify Builder95,3342,1715k+Text Domain Mismatch
#3404 Solution155821,53210k+Non-prefixed class
#4Visual Composer Website Builder168232040k+Non-prefixed global variable
#5MDTF – Meta Data and Taxonomies Filter161,5501,9561k+Non-prefixed global variable
#6AnyComment174454495k+Output is not escaped
#7RestroPress – Online Food Ordering System175343,2061k+Non-prefixed global variable
#8Efí Bank17886553400Exception output is not escaped
#9wpForo Forum174,3063,02620k+Unsafe printing function
#10Administrator Z182,061799400Output is not escaped
#11JetFormBuilder — Dynamic Blocks Form Builder182,1201,61580k+Text Domain Mismatch
#12Pagopar – WooCommerce Gateway185301,215400Non-prefixed global variable
#13Property Hive181,9576,0273k+Missing nonce verification
#14WPPizza – A Restaurant Plugin184,6892,7031k+Text Domain Mismatch
#15GiveWP – Donation Plugin and Fundraising Platform193,4173,563100k+Output is not escaped
#16Go Fetch Jobs (for WP Job Manager)191,4101,741700Non-prefixed global variable
#17Netgsm193343081k+Setting is missing a sanitization callback
#18Verified Reviews (Avis Vérifiés)196711,136700Non-prefixed global variable
#19Really Simple Security – Simple and Performant Security (formerly Really Simple SSL)195313783m+Missing Translators Comment
#20Membership Plugin – Kadence Memberships195,0853,0039k+Text Domain Mismatch
#21SendPress Newsletters192,2931,4221k+Output is not escaped
#22SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments195341,16180k+Non-prefixed global variable
#23WP Import Export Lite1973797940k+Non-prefixed global variable
#24WP Directory Kit191,5022,6412k+Non-prefixed global variable
#25AweBooking – Hotel Booking System203095141k+Non-prefixed global variable
#26Brizy – Page Builder2058572670k+Output is not escaped
#27Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC)207362,112900Non-prefixed global variable
#28Cost Calculator Builder2032376620k+Non-prefixed global variable
#29Download Monitor204231,36780k+Non-prefixed hook name
#30Ebook Store204051,065700Non-prefixed global variable
#31Event Espresso – Event Registration & Ticketing Sales2012,6982,135600Text Domain Mismatch
#32EventPrime – Events Calendar, Bookings and Tickets208464,2117k+Non-prefixed global variable
#33MBE eShip205277401k+Non-prefixed global variable
#34MAS Videos205191,6931k+Non-prefixed global variable
#35Microthemer Lite – Visual Editor to Customize CSS201,0041,69910k+Non-prefixed global variable
#36Shipping for Nova Poshta20598923400Output is not escaped
#37Pix por Piggly (para Woocommerce)205471954k+Exception output is not escaped
#38Pronamic Pay202661,0782k+Non-prefixed global variable
#39Quill Forms | Conversational Multi Step Forms, Surveys & quizzes204003713k+Text Domain Mismatch
#40Restrict User Access – Ultimate Membership & Content Protection209771,84810k+Non-prefixed global variable
#41Razorpay for WooCommerce20975859100k+Non-prefixed function
#42Premium Packages – Sell Digital Products Securely202,0182,1862k+Non-prefixed global variable
#4312 Step Meeting List21149594900Non-prefixed global variable
#44Forumax – AI Powered Advanced Community Forum Plugin214,9314,352600Text Domain Mismatch
#45bbPress219293,672100k+Non-prefixed function
#46Kadence Security – Password, Two Factor Authentication, and Brute Force Protection211,060957700k+Missing Translators Comment
#47Pinpoint Booking System – Version 2216343283k+Missing direct file access protection
#48Booking Ultra Pro Appointments Booking Calendar Plugin217612,083400Request data is not unslashed
#49Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots211,6242,04810k+Direct Query
#50Spam protection, Honeypot, Anti-Spam by CleanTalk218331,133200k+Missing nonce verification