WordPress.DB.SlowDBQuery.slow_db_query_meta_query
slow db query meta query
A query pattern is likely to be slow on larger WordPress sites.
Why It Shows Up
The scan found query arguments such as broad meta queries, tax queries, or unindexed lookups that commonly become expensive as content grows.
Why It Matters
A query that feels fine on a small test site can become a production bottleneck on large stores, membership sites, or publishers.
How to Fix
- Avoid broad `meta_query`, `tax_query`, and unindexed searches on front-end requests when possible.
- Cache expensive results with transients, object cache, or precomputed data.
- Add narrower constraints, pagination, and indexes when custom tables are appropriate.
References
Affected Plugins
| Rank | Plugin | Score | Errors | Warnings | Installs | Added | Updated | Top Issue |
|---|---|---|---|---|---|---|---|---|
| #1 | Live Shopping & Shoppable Videos For WooCommerce | 0 | 79 | 174 | 400 | Non-prefixed global variable | ||
| #2 | Themify Builder | 9 | 5,334 | 2,171 | 5k+ | Text Domain Mismatch | ||
| #3 | MDTF – Meta Data and Taxonomies Filter | 16 | 1,550 | 1,956 | 1k+ | Non-prefixed global variable | ||
| #4 | RestroPress – Online Food Ordering System | 17 | 535 | 3,234 | 1k+ | Non-prefixed global variable | ||
| #5 | Shopping Cart & eCommerce Store | 17 | 7,492 | 17,554 | 3k+ | Non-prefixed global variable | ||
| #6 | WPtouch – Make your WordPress Website Mobile-Friendly | 17 | 1,466 | 325 | 50k+ | Text Domain Mismatch | ||
| #7 | Administrator Z | 18 | 2,061 | 799 | 400 | Output is not escaped | ||
| #8 | JetFormBuilder — Dynamic Blocks Form Builder | 18 | 2,131 | 1,623 | 80k+ | Text Domain Mismatch | ||
| #9 | Pagopar – WooCommerce Gateway | 18 | 530 | 1,215 | 400 | Non-prefixed global variable | ||
| #10 | WPPizza – A Restaurant Plugin | 18 | 4,689 | 2,703 | 1k+ | Text Domain Mismatch | ||
| #11 | Block Slider – Responsive Image Slider, Video Slider & Post Slider | 19 | 555 | 1,291 | 3k+ | Non-prefixed global variable | ||
| #12 | GiveWP – Donation Plugin and Fundraising Platform | 19 | 3,402 | 3,555 | 100k+ | Output is not escaped | ||
| #13 | Go Fetch Jobs (for WP Job Manager) | 19 | 1,410 | 1,741 | 600 | Non-prefixed global variable | ||
| #14 | Netgsm | 19 | 352 | 348 | 1k+ | Non-prefixed global variable | ||
| #15 | Verified Reviews (Avis Vérifiés) | 19 | 671 | 1,136 | 700 | Non-prefixed global variable | ||
| #16 | Really Simple Security – Simple and Performant Security (formerly Really Simple SSL) | 19 | 530 | 375 | 3m+ | Missing Translators Comment | ||
| #17 | Scrollsequence – Cinematic Scroll Image Animation Plugin | 19 | 878 | 1,528 | 3k+ | Non-prefixed global variable | ||
| #18 | SendPress Newsletters | 19 | 2,293 | 1,422 | 1k+ | Output is not escaped | ||
| #19 | SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments | 19 | 541 | 1,146 | 80k+ | Non-prefixed global variable | ||
| #20 | AweBooking – Hotel Booking System | 20 | 309 | 514 | 1k+ | Non-prefixed global variable | ||
| #21 | Brizy – Page Builder | 20 | 585 | 726 | 60k+ | Output is not escaped | ||
| #22 | Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC) | 20 | 736 | 2,112 | 900 | Non-prefixed global variable | ||
| #23 | Download Monitor | 20 | 423 | 1,367 | 80k+ | Non-prefixed hook name | ||
| #24 | Event Organiser | 20 | 1,104 | 544 | 20k+ | Text Domain Mismatch | ||
| #25 | EventPrime – Events Calendar, Bookings, Tickets & AI | 20 | 846 | 4,224 | 7k+ | Non-prefixed global variable | ||
| #26 | MBE eShip | 20 | 527 | 740 | 1k+ | Non-prefixed global variable | ||
| #27 | MAS Videos | 20 | 519 | 1,693 | 1k+ | Non-prefixed global variable | ||
| #28 | Nimble Page Builder | 20 | 1,591 | 1,684 | 30k+ | Missing Arg Domain | ||
| #29 | پلاگین پرداخت دلخواه | 20 | 584 | 446 | 900 | Text Domain Mismatch | ||
| #30 | Pronamic Pay | 20 | 266 | 1,078 | 2k+ | Non-prefixed global variable | ||
| #31 | Membership Plugin – Kadence Memberships | 20 | 5,089 | 3,005 | 9k+ | Text Domain Mismatch | ||
| #32 | Restrict User Access – Ultimate Membership & Content Protection | 20 | 977 | 1,848 | 10k+ | Non-prefixed global variable | ||
| #33 | Robin Image Optimizer – Unlimited Image Optimization, WebP & AVIF | 20 | 556 | 543 | 100k+ | Output is not escaped | ||
| #34 | WP Compress – Instant Performance & Speed Optimization | 20 | 4,292 | 3,691 | 10k+ | Non Singular String Literal Domain | ||
| #35 | Premium Packages – Sell Digital Products Securely | 20 | 2,043 | 2,299 | 2k+ | Non-prefixed global variable | ||
| #36 | Forumax – AI Powered Advanced Community Forum Plugin | 21 | 4,931 | 4,352 | 600 | Text Domain Mismatch | ||
| #37 | Kadence Security – Password, Two Factor Authentication, and Brute Force Protection | 21 | 1,060 | 959 | 700k+ | Missing Translators Comment | ||
| #38 | Pinpoint Booking System – Version 2 | 21 | 634 | 328 | 3k+ | Missing direct file access protection | ||
| #39 | Booking Ultra Pro Appointments Booking Calendar Plugin | 21 | 761 | 2,083 | 400 | Request data is not unslashed | ||
| #40 | Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots | 21 | 1,673 | 2,180 | 10k+ | Direct Query | ||
| #41 | Spam protection, Honeypot, Anti-Spam by CleanTalk | 21 | 835 | 1,146 | 200k+ | Missing nonce verification | ||
| #42 | DELUCKS SEO | 21 | 362 | 1,171 | 300 | Missing nonce verification | ||
| #43 | eRoom – Webinar & Meeting Plugin for Zoom, Google Meet, Microsoft Teams | 21 | 186 | 437 | 8k+ | Non-prefixed global variable | ||
| #44 | Feeds for YouTube (YouTube video, channel, and gallery plugin) | 21 | 503 | 995 | 100k+ | Output is not escaped | ||
| #45 | Ibtana – Ecommerce Product Addons | 21 | 1,548 | 1,718 | 6k+ | Non Singular String Literal Domain | ||
| #46 | AI Infographic Maker | 21 | 1,311 | 456 | 600 | Output is not escaped | ||
| #47 | LA-Studio Element Kit for Elementor | 21 | 8,403 | 1,882 | 10k+ | Text Domain Mismatch | ||
| #48 | Leyka | 21 | 257 | 3,446 | 2k+ | Request data is not unslashed | ||
| #49 | Mapster WP Maps | 21 | 3,594 | 3,020 | 3k+ | Text Domain Mismatch | ||
| #50 | Mergado Pack | 21 | 2,323 | 588 | 700 | Output is not escaped |