Advanced Database Cleaner – Optimize & Clean Database to Speed Up Site Performance

Use placeholders and $wpdb->prepare(); found interpolated variable $col at "SELECT $col FROM $tbl WHERE $idCol IN ($ids_placeholder)"

Use of a direct database call is discouraged.

Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().

Use placeholders and $wpdb->prepare(); found $check_sql

Unescaped parameter $postmeta used in $wpdb->get_var()\n$postmeta assigned unsafely at line 582.

Unescaped parameter $quoted used in $wpdb->get_results()\n$quoted assigned unsafely at line 394.

Incorrect number of replacements passed to $wpdb->prepare(). Found 1 replacement parameters, expected 2.

Replacement variables found, but no valid placeholders found in the query.

date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fclose().

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fwrite().

Detected usage of meta_key, possible slow query.

Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "FS_CHMOD_DIR".

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$phrase1'.

Attempting a database schema change is discouraged.

Function "wp_autoload_values_to_autoload()" requires WordPress 6.6.0, but your plugin minimum supported version is WordPress 5.0.0.

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "plugin_locale".

Processing form data without nonce verification.

$_SERVER['REQUEST_URI'] not unslashed before sanitization. Use wp_unslash() or similar

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fopen().

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: rmdir().

rename() is discouraged. Use WP_Filesystem::move() to rename a file.

unlink() is discouraged. Use wp_delete_file() to delete a file.

Missing $domain parameter in function call to __().

Plugin Updater detected. Detected code which may be altering WordPress update routines. Detected: _site_transient_update_core