PluginScore

Generic.PHP.ForbiddenFunctions.Found

Forbidden PHP function found

The plugin uses a PHP or WordPress pattern that coding standards discourage.

medium weight

Why It Shows Up

Plugin Check found a discouraged function, forbidden function, goto, backtick operator, or similar construct.

Why It Matters

Discouraged patterns are often harder to review, less portable across hosts, or easier to misuse securely.

How to Fix

  • Identify why the construct is used and whether WordPress provides a safer API.
  • Replace shell execution, dynamic execution, or broad forbidden functions with constrained WordPress APIs.
  • If a third-party library triggers the warning, isolate and document it.

References

WordPress Coding Standards

Affected Plugins

RankPluginScoreErrorsWarningsInstallsUpdatedTop Issue
#51File Manager Pro – Filester22565391100k+Request data is not unslashed
#52Five Star Restaurant Menu and Food Ordering227526095k+Output is not escaped
#53FunnelKit Payment Gateway for Stripe WooCommerce2224432120k+Input is not sanitized
#54GeoDirectory – WP Business Directory Plugin and Classified Listings Directory224,4623,97210k+Output is not escaped
#55Anti-Malware Security and Brute-Force Firewall22544965100k+Output is not escaped
#56Happyforms – Form Builder for WordPress: Drag & Drop Contact Forms, Surveys, Payments & Multipurpose Forms221,03772220k+Unsafe printing function
#57IMPress for IDX Broker221,0856367k+Text Domain Mismatch
#58InfiniteWP Client222,2861,812200k+Exception output is not escaped
#59Import WP – Export and Import CSV and XML files to WordPress225803304k+Exception output is not escaped
#60LearnPress – WordPress LMS Plugin for Create and Sell Online Courses222,3613,38470k+Non-prefixed global variable
#61Leyka222533,4452k+Request data is not unslashed
#62MailOptin – Popup, Optin Forms & Email Newsletters for Mailchimp, HubSpot, AWeber Etc.222,6192,45310k+Output is not escaped
#63Slider, Gallery, and Carousel by MetaSlider – Image Slider, Video Slider22207323500k+Non-prefixed global variable
#64Newsletters222,9682,2482k+Text Domain Mismatch
#65Smart Popup by Supsystic223,17250310k+Non Singular String Literal Domain
#66Post SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App221,5812,326300k+Non-prefixed global variable
#67Product Catalog Feed by PixelYourSite225813578k+Output is not escaped
#68Seraphinite Accelerator2259425550k+Output is not escaped
#69Simple Job Board226341,35510k+Non-prefixed global variable
#70Slim Jetpack222,5861,9472k+Text Domain Mismatch
#71NextScripts: Social Networks Auto-Poster222,4081,13330k+Output is not escaped
#72SportsPress – Sports Club & League Manager224602,24210k+Non-prefixed global variable
#73Theme Editor2279868550k+Output is not escaped
#74ThemeHunk Customizer223,9695827k+Text Domain Mismatch
#75Welcart e-Commerce2210,37710,89610k+Text Domain Mismatch
#76WCFM Marketplace – Multivendor Marketplace for WooCommerce221,9371,96910k+Non-prefixed global variable
#77WCFM Membership – WooCommerce Memberships for Multivendor Marketplace2255967510k+Non-prefixed global variable
#78WooCommerce221,3556,1297m+Non-prefixed global variable
#79Advanced AJAX Product Filters222,6831,20550k+Text Domain Mismatch
#80ManageWP Worker225075651m+Non-prefixed class
#81File Manager227405201m+Unsafe printing function
#82WP Umbrella: Update Backup Restore & Monitoring2291590570k+Exception output is not escaped
#83WP-WebAuthn229573962k+Exception output is not escaped
#84School Management System – WPSchoolPress223145,2201k+Non-prefixed global variable
#85YaySMTP – WP Mail SMTP with Email Logs, Tracking & Reports2265443510k+Exception output is not escaped
#86YITH WooCommerce Ajax Search224081,65930k+Non-prefixed global variable
#87Autoptimize23288191800k+Output is not escaped
#88Booking calendar, Appointment Booking System231,0791,1254k+Output is not escaped
#89BSK PDF Manager231,5766257k+Text Domain Mismatch
#90Business Directory Plugin – Easy Listing Directories for WordPress236111,05810k+Non-prefixed global variable
#91CleanTalk Anti-Spam. Spam Firewall & Bot protection238261,078200k+Missing nonce verification
#92Content Aware Sidebars – Fastest Widget Area Plugin239931,73830k+Non-prefixed global variable
#93DK PDF – WordPress PDF Generator237443353k+Exception output is not escaped
#94Easy Digital Downloads – eCommerce Payments and Subscriptions made easy233,72310,28340k+Non-prefixed namespace
#95Ecwid by Lightspeed Ecommerce Shopping Cart2333930720k+Missing direct file access protection
#96Essential Real Estate235295,0608k+Non-prefixed global variable
#97Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI233951,34290k+Non-prefixed global variable
#98Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder234,7461,27930k+Non Singular String Literal Domain
#99Fuse Social Floating Sidebar231,8401,57310k+Non-prefixed global variable
#100Gmedia Photo Gallery233501,1217k+Non-prefixed global variable