Index WP MySQL For Speed

Speed up your WordPress site by adding high-performance keys (database indexes) to your MariaDB / MySQL database tables.

v1.5.7OllieJonesUpdated 2026-05-07Added Jun 13, 202150k+ installs96% rating100% support resolved
25
Score
250
Errors
255
Warnings
+0
Change

Category Scores

Security0
Repo100
Performance98
Maintainability0

Top Issues by Category

security256
maintainability186
i18n7

Issues Details

505 issues found in latest scan

ERROR75
WordPress.Security.EscapeOutput.OutputNotEscaped

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"<!--[if IE]><style type='text/css' id='internal-style-ie-{$_sID}' class='index-wp-mysql-for-speed-form-ie-style'>"'.

ERROR50
PluginCheck.CodeAnalysis.Heredoc.NotAllowed

Use of heredoc syntax (<<<) is not allowed; use standard strings or inline HTML instead

ERROR38
WordPress.DB.PreparedSQL.NotPrepared

Use placeholders and $wpdb->prepare(); found $explainq

WARNING26
WordPress.Security.ValidatedSanitizedInput.MissingUnslash

$_GET[&#039;page&#039;] not unslashed before sanitization. Use wp_unslash() or similar

WARNING25
WordPress.Security.NonceVerification.Missing

Processing form data without nonce verification.

WARNING25
WordPress.Security.ValidatedSanitizedInput.InputNotSanitized

Detected usage of a non-sanitized input variable: $_FILES[&#039;__import&#039;]

WARNING24
WordPress.Security.NonceVerification.Recommended

Processing form data without nonce verification.

WARNING23
WordPress.DB.SlowDBQuery.slow_db_query_meta_key

Detected usage of meta_key, possible slow query.

WARNING20
WordPress.Security.ValidatedSanitizedInput.InputNotValidated

Detected usage of a possibly undefined superglobal array index: $_FILES[&#039;__import&#039;]. Check that the array index exists before using it.

WARNING19
WordPress.DB.DirectDatabaseQuery.DirectQuery

Use of a direct database call is discouraged.

WARNING17
WordPress.DB.DirectDatabaseQuery.NoCaching

Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().

WARNING13
WordPress.DB.SlowDBQuery.slow_db_query_meta_value

Detected usage of meta_value, possible slow query.

WARNING12
WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedVariableFound

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: &quot;$_apf_sub_menus_to_sort&quot;.

ERROR11
missing_direct_file_access_protection

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

WARNING8
PluginCheck.Security.DirectDB.UnescapedDBParameter

Unescaped parameter $this used in $wpdb-&gt;get_results()

WARNING8
WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedHooknameFound

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: &quot;add_meta_boxes_{$_sCurrentScreenID}&quot;.

ERROR8
WordPress.Security.EscapeOutput.ExceptionNotEscaped

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"Table $name invalid state $hasFastIndexes $hasStandardIndexes $hasOldIndexes"'.

ERROR8
WordPress.WP.AlternativeFunctions.unlink_unlink

unlink() is discouraged. Use wp_delete_file() to delete a file.

ERROR7
PluginCheck.Security.DirectDB.UnescapedDBParameter

Unescaped parameter $q used in $wpdb->get_results()\n$q assigned unsafely at line 11.

ERROR7
WordPress.DateTime.RestrictedFunctions.date_date

date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.

ERROR7
WordPress.WP.I18n.MissingArgDomain

Missing $domain parameter in function call to __().

WARNING5
WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedClassFound

Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: &quot;Health&quot;.

WARNING5
WordPress.PHP.DevelopmentFunctions.error_log_print_r

print_r() found. Debug code should not normally be used in production.

WARNING4
WordPress.NamingConventions.PrefixAllGlobals.DynamicHooknameFound

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: &quot;get_class($this) . &#039;-&#039; . $_sScreenID&quot;.

WARNING4
WordPress.PHP.DevelopmentFunctions.error_log_trigger_error

trigger_error() found. Debug code should not normally be used in production.

Latest Snapshot

Findings

505

Errors

250

Warnings

255

Score History

First score snapshot

First scan completed Jun 20, 2026

v1.5.7 · Plugin Check 2.0.0 · Model 2026.06-mvp-static-v2

Jun 20, 2026

v1.5.7

25

Latest

Findings
505
Errors
250
Warnings
255
Plugin Check
2.0.0
Model
2026.06-mvp-static-v2

Related Plugins