WordPressVIPMinimum.Performance.WPQueryParams.PostNotIn_exclude
Post Not In exclude
The plugin uses a query or runtime pattern that can become expensive on larger sites.
Why It Shows Up
Plugin Check found arguments or code paths associated with slow queries, broad exclusions, suppressed filters, or uncached work.
Why It Matters
Performance issues often appear only after a site has enough content, orders, users, or traffic.
How to Fix
- Avoid broad exclusion lists and unbounded queries on front-end requests.
- Cache repeated expensive results.
- Measure the query plan or runtime on a realistically sized dataset before deciding the warning is harmless.
Affected Plugins
| Rank | Plugin | Score | Errors | Warnings | Installs | Added | Updated | Top Issue |
|---|---|---|---|---|---|---|---|---|
| #551 | Essential Classy Addons for Elementor – 150+ Widgets, Templates & Performance Tools | 34 | 278 | 186 | 500 | Output is not escaped | ||
| #552 | Inavii Social Feed – Live Social Proof Gallery | 34 | 532 | 180 | 9k+ | Text Domain Mismatch | ||
| #553 | PushEngage – Web Push Notifications, WooCommerce Automation & Chat Widget | 34 | 46 | 298 | 9k+ | Missing nonce verification | ||
| #554 | QuadLayers Telegram Button | 34 | 149 | 71 | 1k+ | Text Domain Mismatch | ||
| #555 | RTMForm Builder | 34 | 188 | 209 | 30k+ | Text Domain Mismatch | ||
| #556 | Social Integration for BlueSky | 34 | 98 | 147 | 700 | Non-prefixed global variable | ||
| #557 | LightStart – Maintenance Mode, Coming Soon and Landing Page Builder | 34 | 42 | 312 | 400k+ | Request data is not unslashed | ||
| #558 | Air WP Sync – Airtable to WordPress | 35 | 37 | 45 | 1k+ | Non-prefixed hook name | ||
| #559 | Authors Widget | 35 | 170 | 19 | 1k+ | Output is not escaped | ||
| #560 | belingoGeo | 35 | 136 | 133 | 1k+ | Output is not escaped | ||
| #561 | Custom Order Status Manager for WooCommerce | 35 | 630 | 67 | 30k+ | Text Domain Mismatch | ||
| #562 | Registration Options for BuddyPress | 35 | 47 | 132 | 1k+ | Non-prefixed function | ||
| #563 | BSK Forms Blacklist | 35 | 831 | 550 | 1k+ | Output is not escaped | ||
| #564 | Buying Buddy IDX CRM – Real Estate MLS Plugin | 35 | 71 | 240 | 500 | Request data is not unslashed | ||
| #565 | Cache Enabler | 35 | 44 | 75 | 90k+ | Input is not sanitized | ||
| #566 | CiviCRM Admin Utilities | 35 | 19 | 87 | 1k+ | Non-prefixed hook name | ||
| #567 | CompressX — AVIF & WebP Converter, Media Replacement | 35 | 26 | 423 | 40k+ | Missing nonce verification | ||
| #568 | Constant Contact Forms | 35 | 41 | 89 | 20k+ | Missing nonce verification | ||
| #569 | Disable XML-RPC-API | 35 | 444 | 52 | 100k+ | Text Domain Mismatch | ||
| #570 | Product Bundle Builder for WooCommerce | 35 | 152 | 138 | 6k+ | Text Domain Mismatch | ||
| #571 | Elementor Website Builder – more than just a page builder | 35 | 46 | 428 | 10m+ | Non-prefixed global variable | ||
| #572 | Extra Shortcodes | 35 | 35 | 3 | 1k+ | date date | ||
| #573 | WP2Social Auto Publish | 35 | 643 | 215 | 9k+ | Unsafe printing function | ||
| #574 | Pixel Cat – Conversion Pixel Manager | 35 | 253 | 215 | 40k+ | Output is not escaped | ||
| #575 | Give – Divi Donation Modules | 35 | 286 | 12 | 600 | Text Domain Mismatch | ||
| #576 | Social Feed Gallery | 35 | 104 | 52 | 80k+ | Text Domain Mismatch | ||
| #577 | JS Categories List Widget | 35 | 37 | 18 | 1k+ | Non Singular String Literal Domain | ||
| #578 | KBoard 위젯 – 워드프레스 게시판 | 35 | 53 | 32 | 3k+ | Output is not escaped | ||
| #579 | Magical Addons For Elementor ( Header Footer Builder, Free Elementor Widgets, Elementor Templates Library ) | 35 | 266 | 127 | 5k+ | Output is not escaped | ||
| #580 | MainWP Child Reports | 35 | 49 | 116 | 100k+ | Non-prefixed hook name | ||
| #581 | Restaurant Menu – Food Ordering System – Table Reservation | 35 | 317 | 186 | 8k+ | Unsafe printing function | ||
| #582 | Image Refresh | 35 | 4 | 6 | 1k+ | Dynamic hook name | ||
| #583 | NewsPlugin | 35 | 84 | 53 | 400 | Text Domain Mismatch | ||
| #584 | Orderable – Restaurant & Food Ordering System | 35 | 12 | 324 | 5k+ | Non-prefixed global variable | ||
| #585 | Post Content Shortcodes | 35 | 205 | 56 | 2k+ | Output is not escaped | ||
| #586 | PowerPack Addons for Elementor (Free Widgets, Extensions and Templates) | 35 | 6 | 56 | 80k+ | Post Not In exclude | ||
| #587 | RPS Image Gallery | 35 | 88 | 16 | 800 | Output is not escaped | ||
| #588 | Internal Links Manager | 35 | 188 | 121 | 10k+ | Output is not escaped | ||
| #589 | Shipping Zones by Drawing for WooCommerce | 35 | 278 | 95 | 600 | Text Domain Mismatch | ||
| #590 | Shopkeeper Extender | 35 | 14 | 26 | 5k+ | Missing Version | ||
| #591 | Simple Yearly Archive | 35 | 102 | 36 | 6k+ | Unsafe printing function | ||
| #592 | Sitekit | 35 | 122 | 8 | 3k+ | Output is not escaped | ||
| #593 | Slick Slider | 35 | 36 | 9 | 2k+ | Output is not escaped | ||
| #594 | Void Elementor Post Grid Addon for Elementor Page builder | 35 | 189 | 93 | 3k+ | Text Domain Mismatch | ||
| #595 | ShipStation Live Rates for WooCommerce | 35 | 402 | 73 | 900 | Non Singular String Literal Domain | ||
| #596 | All-in-One Addons for Elementor – WidgetKit | 35 | 60 | 311 | 8k+ | Non-prefixed global variable | ||
| #597 | Pixel Manager for WooCommerce – Conversion Tracking, Google Ads, GA4, TikTok, Dynamic Remarketing | 35 | 49 | 230 | 50k+ | Non-prefixed hook name | ||
| #598 | Access Areas for WordPress | 35 | 17 | 95 | 400 | Direct Query | ||
| #599 | Category Dropdown by GCS Design | 35 | 93 | 52 | 1k+ | Output is not escaped | ||
| #600 | WP Flexslider | 35 | 15 | 7 | 600 | Unsafe printing function |
