WordPress.DB.SlowDBQuery.slow_db_query_meta_value
slow db query meta value
A query pattern is likely to be slow on larger WordPress sites.
Why It Shows Up
The scan found query arguments such as broad meta queries, tax queries, or unindexed lookups that commonly become expensive as content grows.
Why It Matters
A query that feels fine on a small test site can become a production bottleneck on large stores, membership sites, or publishers.
How to Fix
- Avoid broad `meta_query`, `tax_query`, and unindexed searches on front-end requests when possible.
- Cache expensive results with transients, object cache, or precomputed data.
- Add narrower constraints, pagination, and indexes when custom tables are appropriate.
References
Affected Plugins
| Rank | Plugin | Score | Errors | Warnings | Installs | Added | Updated | Top Issue |
|---|---|---|---|---|---|---|---|---|
| #701 | AxiaChat AI – Free AI Chatbot (Answers Customers Automatically) | 40 | 2 | 135 | 2k+ | Interpolated SQL is not prepared | ||
| #702 | bbPress WP Tweaks | 40 | 147 | 18 | 1k+ | Output is not escaped | ||
| #703 | Bulk Add Terms | 40 | 74 | 27 | 800 | Text Domain Mismatch | ||
| #704 | Flamingo | 40 | 15 | 228 | 800k+ | Nonce verification recommended | ||
| #705 | Invite Anyone | 40 | 32 | 130 | 1k+ | Non-prefixed hook name | ||
| #706 | Listdomer Core | 40 | 45 | 92 | 400 | Non-prefixed global variable | ||
| #707 | Permalink Editor | 40 | 50 | 28 | 1k+ | Output is not escaped | ||
| #708 | Secondary Title | 40 | 117 | 31 | 7k+ | Unsafe printing function | ||
| #709 | Ultimate Dashboard – Custom WordPress Dashboard | 40 | 17 | 144 | 60k+ | Input is not sanitized | ||
| #710 | WooSidebars | 40 | 43 | 37 | 100k+ | Missing Translators Comment | ||
| #711 | WP Help | 40 | 49 | 54 | 10k+ | Unsafe printing function | ||
| #712 | Autocomplete Google Address | 41 | 21 | 67 | 2k+ | Nonce verification recommended | ||
| #713 | Avatar Manager | 41 | 29 | 41 | 5k+ | Unsafe printing function | ||
| #714 | Controlled Admin Access | 41 | 22 | 40 | 10k+ | Nonce verification recommended | ||
| #715 | StifLi Flex MCP – MCP Server with undo for ChatGPT, Claude & Gemini | 41 | 2 | 111 | 1k+ | Interpolated SQL is not prepared | ||
| #716 | Post Grid Master — Post Grids & AJAX Filters | 42 | 44 | 115 | 1k+ | Non-prefixed global variable | ||
| #717 | 多合一搜索自动推送管理插件-支持Baidu/Google/Bing/IndexNow/Yandex/头条 | 42 | 17 | 38 | 2k+ | Input is not sanitized | ||
| #718 | Starter Sites | 42 | 62 | 25 | 1k+ | Output is not escaped | ||
| #719 | Floating Awesome Button (Sticky Button, Popup, Toast) & 200+ Website Custom Interactive Element | 43 | 66 | 109 | 800 | Missing direct file access protection | ||
| #720 | Per User Prompt for Google Authenticator | 43 | 8 | 52 | 400 | Nonce verification recommended | ||
| #721 | Hash Form – Drag & Drop Form Builder | 43 | 9 | 273 | 3k+ | Non-prefixed global variable | ||
| #722 | Post Grid | 44 | 33 | 208 | 30k+ | Non-prefixed global variable | ||
| #723 | WP Club Manager – WordPress Sports Club Plugin | 44 | 171 | 682 | 600 | Non-prefixed global variable | ||
| #724 | Jetpack Search | 45 | 925 | 426 | 5k+ | Text Domain Mismatch | ||
| #725 | Simple Membership MailChimp Integration | 45 | 34 | 27 | 1k+ | curl curl setopt | ||
| #726 | DX Delete Attached Media | 46 | 32 | 8 | 4k+ | Output is not escaped | ||
| #727 | Easy Subscribe | 46 | 132 | 700 | Direct Query | |||
| #728 | Tag Pilot FREE – Google Tag Manager Integration for WooCommerce | 48 | 35 | 19 | 1k+ | Output is not escaped | ||
| #729 | Jetpack Social | 48 | 829 | 254 | 30k+ | Text Domain Mismatch | ||
| #730 | FlexStock – Product Stock Sync with Google Sheets for WooCommerce | 48 | 241 | 700 | Direct Query | |||
| #731 | WP Remote Users Sync | 48 | 355 | 117 | 6k+ | Text Domain Mismatch | ||
| #732 | Easy Property Listings | 49 | 60 | 66 | 5k+ | wp function not compatible with requires wp | ||
| #733 | Import into Easy Property Listings | 49 | 335 | 24 | 1k+ | Text Domain Mismatch | ||
| #734 | Anti-Spam Protection – No API Key, GDPR Friendly | 49 | 2 | 106 | 1k+ | Direct Query | ||
| #735 | Rede Itaú for WooCommerce — Payment PIX, Credit Card and Debit | 49 | 5 | 145 | 1k+ | Missing nonce verification | ||
| #736 | Product Slider, Product Grid, Product Masonry | 49 | 55 | 144 | 10k+ | wp function not compatible with requires wp | ||
| #737 | Block IPs for Gravity Forms | 50 | 8 | 36 | 1k+ | Request data is not unslashed | ||
| #738 | Product Open Pricing (Name Your Price) for WooCommerce | 50 | 105 | 37 | 6k+ | Text Domain Mismatch | ||
| #739 | Simple User Listing | 50 | 27 | 56 | 900 | Non-prefixed global variable | ||
| #740 | Quotes and Tips by BestWebSoft | 51 | 485 | 190 | 1k+ | Text Domain Mismatch | ||
| #741 | REST API Log | 51 | 44 | 95 | 5k+ | Non-prefixed hook name | ||
| #742 | YayMail – WooCommerce Email Customizer | 51 | 163 | 788 | 50k+ | Non-prefixed global variable | ||
| #743 | Price Based on Country for WooCommerce | 52 | 43 | 126 | 20k+ | Non-prefixed hook name | ||
| #744 | Automattic For Agencies Client | 53 | 249 | 184 | 20k+ | Text Domain Mismatch | ||
| #745 | FakerPress | 53 | 66 | 152 | 10k+ | Non-prefixed global variable | ||
| #746 | Widgets Reloaded | 53 | 62 | 20 | 1k+ | Output is not escaped | ||
| #747 | Ultimate Gift Cards for WooCommerce | 53 | 4 | 450 | 7k+ | Non-prefixed global variable | ||
| #748 | aBlocks – Gutenberg Blocks, User Dashboard Builder, Popup Builder, Form Builder & Animation Builder | 54 | 8 | 382 | 2k+ | Non-prefixed global variable | ||
| #749 | Disqus Comment System | 54 | 17 | 33 | 40k+ | Non-prefixed hook name | ||
| #750 | Accordions | 55 | 1 | 101 | 20k+ | slow db query meta query |
