PluginScore

WordPress.DB.PreparedSQLPlaceholders.UnfinishedPrepare

Unfinished Prepare

A SQL query is built in a way that Plugin Check cannot verify as safely prepared.

critical weight

Why It Shows Up

The scan found missing, incorrect, quoted, unsupported, or mismatched SQL placeholders around `$wpdb->prepare()` usage.

Why It Matters

Broken preparation can leave dynamic SQL values unsafe or make queries behave differently than intended.

How to Fix

  • Keep placeholders in the SQL string and pass dynamic values as separate arguments.
  • Use the placeholder that matches the value type.
  • Do not quote placeholders manually, and use allowlists for identifiers or SQL fragments.

References

WordPress database access

Affected Plugins

RankPluginScoreErrorsWarningsInstallsUpdatedTop Issue
#1AnyComment174454495k+Output Not Escaped
#2wpForo Forum174,0332,92220k+Unsafe Printing Function
#3Shopping Cart & eCommerce Store185,45917,2984k+Non Prefixed Variable Found
#4Advanced File Manager – Ultimate File Manager for WordPress And Document Library Solution191,218901100k+Exception Not Escaped
#5Search Atlas SEO – Premier SEO Plugin for One-Click WP Publishing & Integrated AI Optimization191,2952,6799k+Output Not Escaped
#6Membership Plugin – Kadence Memberships195,0822,9829k+Text Domain Mismatch
#7SendPress Newsletters192,2931,4222k+Output Not Escaped
#8BetterDocs – AI Documentation, Knowledge Base, Docs, Wikis, FAQ with Chatbot205081,40630k+Non Prefixed Variable Found
#9Brizy – Page Builder2058972070k+Output Not Escaped
#10GiveWP – Donation Plugin and Fundraising Platform203,4353,580100k+Output Not Escaped
#11Microthemer Lite – Visual Editor to Customize CSS201,0041,69910k+Non Prefixed Variable Found
#12Store Locator WordPress212,3721,57210k+Text Domain Mismatch
#13bbPress219293,672100k+Non Prefixed Function Found
#14Pinpoint Booking System – Version 2216343283k+missing direct file access protection
#15CartFlows – Funnel Builder & Checkout Plugin for WooCommerce21461614200k+Text Domain Mismatch
#16Free Downloads WooCommerce214303594k+Output Not Escaped
#17ERP: Complete HR, Accounting & CRM Suite with Recruitment and WooCommerce CRM Support218295,9665k+Direct Query
#18Formidable Forms – WordPress Form Builder for Contact Forms, Calculators, Quizzes & More21521,959300k+Non Prefixed Variable Found
#19Imagify: Optimize Images for Top Speed (Compress & Convert to WebP/AVIF)214188511m+Non Prefixed Variable Found
#20MotoPress Hotel Booking213,0611,03710k+Text Domain Mismatch
#21Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program – myCred211,4693,33310k+Non Prefixed Variable Found
#22Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction211,9185,06510k+Non Prefixed Hookname Found
#23WCFM – Frontend Manager for WooCommerce214,7215,06720k+Non Prefixed Variable Found
#24Wise Chat214705065k+Output Not Escaped
#25Wordfence Security – Firewall, Malware Scan, and Login Security211,5922,9735m+Output Not Escaped
#26wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin211,3541,14070k+Output Not Escaped
#27WPScan – WordPress Security Scanner215272658k+Text Domain Mismatch
#28Advanced Form Integration — Connect Forms to 200+ Apps225,7714,67810k+wp function not compatible with requires wp
#29Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots221,6042,01910k+Direct Query
#30BuddyPress225839,008100k+Non Prefixed Function Found
#31Clearfy Cache – WordPress optimization plugin, Minify HTML, CSS & JS, Defer222,8581,27050k+Text Domain Mismatch
#32RegistrationMagic – User Registration Forms Plugin223,6545,0628k+Non Prefixed Variable Found
#33Directorist: AI-Powered Business Directory, Listings & Classified Ads224432,12920k+Non Prefixed Variable Found
#34E2Pdf – Export Pdf Tool for WordPress221,07583610k+Unsafe Printing Function
#35Events Manager – Calendar, Bookings, Tickets, and more!224,7225,62170k+Output Not Escaped
#36Finale Lite – Sales Countdown Timer & Discount for WooCommerce221,0314514k+Output Not Escaped
#37GeoDirectory – WP Business Directory Plugin and Classified Listings Directory224,4623,97210k+Output Not Escaped
#38LearnPress – WordPress LMS Plugin for Create and Sell Online Courses222,3613,38470k+Non Prefixed Variable Found
#39Modula Image Gallery – Photo Grid & Video Gallery22474436100k+Text Domain Mismatch
#40Molongui Authorship – Author Boxes, Guest Authors & Co-Authors for WordPress229191,23010k+Output Not Escaped
#41PagBank / PagSeguro Connect para WooCommerce225047434k+Non Prefixed Variable Found
#42NextScripts: Social Networks Auto-Poster222,4081,13330k+Output Not Escaped
#43Swift Performance Lite222,3461,3257k+Text Domain Mismatch
#44Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin225302,33440k+Direct Query
#45Welcart e-Commerce2210,37710,89610k+Text Domain Mismatch
#46UserFeedback – Create Interactive Feedback Form, User Surveys, and Polls in Seconds22444243200k+Text Domain Mismatch
#47WCFM Marketplace – Multivendor Marketplace for WooCommerce221,9371,96910k+Non Prefixed Variable Found
#48WooCommerce221,3556,1297m+Non Prefixed Variable Found
#49Advanced AJAX Product Filters222,6831,20550k+Text Domain Mismatch
#50WP Fusion Lite – Marketing Automation and CRM Integration for WordPress222766835k+Recommended