Generic.PHP.DisallowShortOpenTag.PossibleFound
Short PHP open tag found
The plugin contains PHP syntax or file formatting that can cause compatibility problems.
Why It Shows Up
Plugin Check found short tags, alternative PHP tags, byte order marks, mixed line endings, or similar formatting issues.
Why It Matters
Formatting issues can break parsing, cause unexpected output, or behave differently across PHP configurations and hosts.
How to Fix
- Use full `<?php` opening tags.
- Save files as UTF-8 without a byte order mark.
- Normalize line endings and run formatting checks before release.
Affected Plugins
| Rank | Plugin | Score | Errors | Warnings | Installs | Added | Updated | Top Issue |
|---|---|---|---|---|---|---|---|---|
| #1 | wpForo Forum | 17 | 4,048 | 2,922 | 20k+ | Unsafe printing function | ||
| #2 | Front End Users | 21 | 719 | 2,759 | 400 | Non-prefixed global variable | ||
| #3 | Mergado Pack | 21 | 2,323 | 588 | 700 | Output is not escaped | ||
| #4 | Download Manager | 22 | 2,513 | 1,459 | 100k+ | Output is not escaped | ||
| #5 | Easy Appointment Booking & Scheduling System – Webba Booking Calendar | 22 | 1,617 | 3,380 | 2k+ | Non-prefixed global variable | ||
| #6 | Issues and Series for Newspapers, Magazines, Publishers, Writers | 23 | 346 | 710 | 2k+ | Nonce verification recommended | ||
| #7 | Print Anywhere & Create PDFs of Order Receipts, Invoices, Labels & More. | 23 | 1,485 | 444 | 1k+ | Text Domain Mismatch | ||
| #8 | Radio Station by netmix® – Manage and play your Show Schedule in WordPress! | 23 | 934 | 3,619 | 1k+ | Non-prefixed global variable | ||
| #9 | teachPress | 23 | 744 | 1,587 | 2k+ | SQL query is not prepared | ||
| #10 | Directory Listings WordPress plugin – uListing | 23 | 947 | 1,573 | 1k+ | Non-prefixed global variable | ||
| #11 | Product Table & List Builder For WooCommerce | 23 | 1,380 | 2,125 | 10k+ | Non-prefixed global variable | ||
| #12 | FeedWordPress | 24 | 496 | 319 | 9k+ | Missing Arg Domain | ||
| #13 | Import and export users and customers | 24 | 1,046 | 357 | 70k+ | Unsafe printing function | ||
| #14 | Mang Board WP | 24 | 1,213 | 4,720 | 8k+ | Non-prefixed global variable | ||
| #15 | ShortPixel Adaptive Images – WebP, AVIF, CDN, Image Optimization | 24 | 926 | 322 | 10k+ | Output is not escaped | ||
| #16 | Export All Posts, Products, Orders & Users | WP Ultimate Exporter | WordPress CSV Export | 24 | 363 | 1,130 | 6k+ | Direct Query | ||
| #17 | Poll Maker by AYS – Versus Polls, Anonymous Polls, Image Polls | 25 | 489 | 1,413 | 7k+ | Non-prefixed global variable | ||
| #18 | CM Tooltip Glossary | 27 | 611 | 188 | 7k+ | Output is not escaped | ||
| #19 | Robokassa payment gateway for Woocommerce | 27 | 95 | 211 | 3k+ | Non-prefixed global variable | ||
| #20 | Dynamic User Directory | 28 | 403 | 256 | 1k+ | Output is not escaped | ||
| #21 | Photo Gallery – GT3 Image Gallery & Gutenberg Block Gallery | 28 | 384 | 175 | 10k+ | Text Domain Mismatch | ||
| #22 | VG WORT METIS | 28 | 150 | 317 | 900 | Nonce verification recommended | ||
| #23 | Laposta WooCommerce | 29 | 96 | 115 | 500 | Non-prefixed global variable | ||
| #24 | Realbig For WordPress | 30 | 36 | 591 | 1k+ | Non-prefixed global variable | ||
| #25 | ACME Divi Modules | 32 | 573 | 35 | 400 | Text Domain Mismatch | ||
| #26 | Speed Kit | 32 | 296 | 73 | 2k+ | Output is not escaped | ||
| #27 | Muslim Prayer Time-Salah/Iqamah | 32 | 155 | 179 | 400 | date date | ||
| #28 | Chatbot with IBM watsonx Assistant | 33 | 324 | 83 | 400 | Non Singular String Literal Domain | ||
| #29 | Offen | 33 | 313 | 115 | 500 | Output is not escaped | ||
| #30 | WOW Slider | 33 | 176 | 101 | 3k+ | Output is not escaped | ||
| #31 | Herzog Dupont for YOOtheme Pro | 34 | 477 | 233 | 4k+ | Output is not escaped | ||
| #32 | Multi Step Form | 34 | 277 | 139 | 9k+ | Output is not escaped | ||
| #33 | Woopra Analytics Plugin | 34 | 114 | 53 | 900 | Output is not escaped | ||
| #34 | Authors Widget | 35 | 170 | 19 | 1k+ | Output is not escaped | ||
| #35 | Pixel Cat – Conversion Pixel Manager | 35 | 253 | 215 | 40k+ | Output is not escaped | ||
| #36 | Easy Accept Payments via PayPal | 35 | 322 | 128 | 7k+ | Text Domain Mismatch | ||
| #37 | Google SEO Pressor for Rich snippets | 36 | 51 | 160 | 400 | Missing nonce verification | ||
| #38 | HTML5 Maps | 36 | 194 | 160 | 4k+ | Output is not escaped | ||
| #39 | IntelliWidget Per Page Custom Menus and Dynamic Content | 36 | 586 | 162 | 600 | Output is not escaped | ||
| #40 | Call Now Button – The #1 Click to Call Button for WordPress | 37 | 1,273 | 5 | 200k+ | Exception output is not escaped | ||
| #41 | Social Photo Fetcher | 38 | 151 | 43 | 1k+ | Output is not escaped | ||
| #42 | Culqi | 39 | 571 | 88 | 1k+ | Text Domain Mismatch | ||
| #43 | Analytics Cat – Google Analytics Made Easy | 40 | 83 | 27 | 6k+ | Text Domain Mismatch | ||
| #44 | Popup addon for Ninja Forms | 40 | 121 | 25 | 900 | Output is not escaped | ||
| #45 | Category Wise Search | 41 | 58 | 9 | 500 | Output is not escaped | ||
| #46 | ChatBot.com Conversational AI Support | 41 | 72 | 33 | 1k+ | Short PHP open tag found | ||
| #47 | Pro Categories Widget | 43 | 59 | 9 | 800 | Output is not escaped | ||
| #48 | WC Call For Price | 57 | 19 | 55 | 1k+ | Non-prefixed global variable | ||
| #49 | SocketLabs | 65 | 15 | 18 | 900 | Output is not escaped | ||
| #50 | ACF: Rus-To-Lat | 66 | 15 | 11 | 2k+ | Output is not escaped |
