Generic.PHP.BacktickOperator.Found
Backtick operator found
The plugin uses a PHP or WordPress pattern that coding standards discourage.
Why It Shows Up
Plugin Check found a discouraged function, forbidden function, goto, backtick operator, or similar construct.
Why It Matters
Discouraged patterns are often harder to review, less portable across hosts, or easier to misuse securely.
How to Fix
- Identify why the construct is used and whether WordPress provides a safer API.
- Replace shell execution, dynamic execution, or broad forbidden functions with constrained WordPress APIs.
- If a third-party library triggers the warning, isolate and document it.
References
Affected Plugins
| Rank | Plugin | Score | Errors | Warnings | Installs | Added | Updated | Top Issue |
|---|---|---|---|---|---|---|---|---|
| #1 | Matomo Analytics – Powerful, Privacy-First Insights for WordPress | 19 | 1,911 | 877 | 100k+ | Exception output is not escaped | ||
| #2 | Pix por Piggly (para Woocommerce) | 20 | 547 | 195 | 4k+ | Exception output is not escaped | ||
| #3 | rtMedia for WordPress, BuddyPress and bbPress | 21 | 363 | 633 | 8k+ | Non-prefixed constant | ||
| #4 | Captcha Them All | 21 | 300 | 323 | 6k+ | Output is not escaped | ||
| #5 | WP-Lister Lite for eBay | 21 | 6,697 | 5,129 | 2k+ | Output is not escaped | ||
| #6 | Heureka | 22 | 557 | 254 | 400 | Exception output is not escaped | ||
| #7 | InfiniteWP Client | 22 | 2,286 | 1,812 | 200k+ | Exception output is not escaped | ||
| #8 | YaySMTP – WP Mail SMTP with Email Logs, Tracking & Reports | 22 | 654 | 435 | 10k+ | Exception output is not escaped | ||
| #9 | Geo Controller | 23 | 91 | 450 | 1k+ | Non-prefixed global variable | ||
| #10 | AI Popup | 23 | 1,224 | 636 | 400 | Text Domain Mismatch | ||
| #11 | PowerPress Podcasting plugin by Blubrry | 23 | 4,807 | 2,394 | 20k+ | Output is not escaped | ||
| #12 | WP-Lister Lite for Amazon | 23 | 3,061 | 4,177 | 800 | Output is not escaped | ||
| #13 | Product Feed Manager For WooCommerce – Sell on 200+ Online Marketplaces | 24 | 2,248 | 3,338 | 10k+ | slow db query meta key | ||
| #14 | Featured Post with thumbnail | 24 | 158 | 122 | 400 | Output is not escaped | ||
| #15 | FeedWordPress | 24 | 496 | 319 | 9k+ | Missing Arg Domain | ||
| #16 | EU VAT Assistant for WooCommerce | 24 | 1,742 | 495 | 5k+ | Non Singular String Literal Domain | ||
| #17 | DecaLog | 25 | 943 | 236 | 1k+ | Exception output is not escaped | ||
| #18 | PDF Importer for WPForms | 25 | 332 | 329 | 400 | Non-prefixed global variable | ||
| #19 | User Avatar | 26 | 104 | 173 | 4k+ | Non-prefixed constant | ||
| #20 | Thrive Automator | 32 | 84 | 84 | 10k+ | SQL query is not prepared | ||
| #21 | AFS Analytics | 34 | 194 | 98 | 600 | Text Domain Mismatch | ||
| #22 | Enhanced AJAX Add to Cart for WooCommerce | 46 | 90 | 78 | 700 | Missing Arg Domain |
