Generic.PHP.ForbiddenFunctions.Found
Forbidden PHP function found
The plugin uses a PHP or WordPress pattern that coding standards discourage.
Why It Shows Up
Plugin Check found a discouraged function, forbidden function, goto, backtick operator, or similar construct.
Why It Matters
Discouraged patterns are often harder to review, less portable across hosts, or easier to misuse securely.
How to Fix
- Identify why the construct is used and whether WordPress provides a safer API.
- Replace shell execution, dynamic execution, or broad forbidden functions with constrained WordPress APIs.
- If a third-party library triggers the warning, isolate and document it.
References
Affected Plugins
| Rank | Plugin | Score | Errors | Warnings | Installs | Added | Updated | Top Issue |
|---|---|---|---|---|---|---|---|---|
| #151 | ThemeHunk Customizer | 23 | 3,968 | 582 | 6k+ | Text Domain Mismatch | ||
| #152 | Travelpayouts | 23 | 769 | 110 | 6k+ | Output is not escaped | ||
| #153 | Directory Listings WordPress plugin – uListing | 23 | 947 | 1,573 | 1k+ | Non-prefixed global variable | ||
| #154 | Product Options and Price Calculation Formulas for WooCommerce – Uni CPO | 23 | 2,514 | 1,929 | 1k+ | Output is not escaped | ||
| #155 | UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP | 23 | 694 | 2,439 | 20k+ | Non-prefixed hook name | ||
| #156 | WHMCS Bridge | 23 | 247 | 472 | 4k+ | Nonce verification recommended | ||
| #157 | WP All Import – Product Import for WooCommerce | 23 | 1,475 | 209 | 20k+ | Non Singular String Literal Domain | ||
| #158 | Worth The Read | 23 | 873 | 138 | 3k+ | Text Domain Mismatch | ||
| #159 | WP Editor | 23 | 502 | 335 | 20k+ | Unsafe printing function | ||
| #160 | Lead Form Data Collection to CRM | 23 | 211 | 1,698 | 400 | Non-prefixed global variable | ||
| #161 | WP-Lister Lite for Amazon | 23 | 3,061 | 4,177 | 800 | Output is not escaped | ||
| #162 | FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce | 23 | 941 | 2,179 | 20k+ | SQL query is not prepared | ||
| #163 | WP Mega Menu | 23 | 992 | 792 | 8k+ | Non-prefixed global variable | ||
| #164 | WP Migrate Lite – Migration Made Easy | 23 | 369 | 255 | 200k+ | Exception output is not escaped | ||
| #165 | WP STAGING – WordPress Backup, Restore, Migration & Clone | 23 | 1,504 | 1,567 | 100k+ | Non-prefixed global variable | ||
| #166 | Track, Analyze & Optimize by WP Tao | 23 | 895 | 756 | 600 | Output is not escaped | ||
| #167 | WP Ultimate CSV Importer – WordPress Import & Export for CSV, XML & Excel | 23 | 1,158 | 3,642 | 20k+ | Interpolated SQL is not prepared | ||
| #168 | Comments – wpDiscuz | 23 | 620 | 1,180 | 70k+ | Non-prefixed global variable | ||
| #169 | Photo Engine (Media Organizer & Lightroom) | 23 | 252 | 650 | 2k+ | Direct Query | ||
| #170 | XT Ajax Add To Cart for WooCommerce | 23 | 1,003 | 1,690 | 1k+ | Non-prefixed global variable | ||
| #171 | XT Quick View for WooCommerce | 23 | 1,079 | 1,829 | 400 | Non-prefixed global variable | ||
| #172 | XT Variation Swatches for WooCommerce | 23 | 1,051 | 1,834 | 500 | Non-prefixed global variable | ||
| #173 | Yatra – Travel Booking & Tour Operator Software | 23 | 2,226 | 3,997 | 600 | Non-prefixed global variable | ||
| #174 | YITH Essential Kit for WooCommerce #1 | 23 | 397 | 1,481 | 5k+ | Non-prefixed global variable | ||
| #175 | YITH PayPal Express Checkout for WooCommerce | 23 | 387 | 1,443 | 1k+ | Non-prefixed global variable | ||
| #176 | YITH WooCommerce Affiliates | 23 | 549 | 1,527 | 6k+ | Non-prefixed global variable | ||
| #177 | YITH WooCommerce Ajax Product Filter | 23 | 463 | 1,527 | 80k+ | Non-prefixed global variable | ||
| #178 | 1 Click Migration & Backup: Free WordPress Migration Plugin with Zero Downtime & Easy Clone | 24 | 140 | 193 | 400 | Direct Query | ||
| #179 | AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress | 24 | 5,234 | 1,464 | 7k+ | Output is not escaped | ||
| #180 | Ad Inserter – Ad Manager & AdSense Ads | 24 | 4,260 | 812 | 300k+ | Output is not escaped | ||
| #181 | Atarim – Visual Feedback, Review & AI Collaboration | 24 | 765 | 442 | 1k+ | wp function not compatible with requires wp | ||
| #182 | Barcode Scanner (+Mobile App) – Inventory manager, Order fulfillment system, POS (Point of Sale) | 24 | 1,865 | 1,089 | 1k+ | Text Domain Mismatch | ||
| #183 | Product Feed Manager For WooCommerce – Sell on 200+ Online Marketplaces | 24 | 2,317 | 3,374 | 10k+ | slow db query meta key | ||
| #184 | Arigato Autoresponder and Newsletter | 24 | 1,318 | 769 | 500 | Text Domain Mismatch | ||
| #185 | Kognetiks Chatbot for WordPress | 24 | 651 | 1,486 | 600 | Non-prefixed global variable | ||
| #186 | Church Admin | 24 | 1,554 | 4,207 | 900 | Direct Query | ||
| #187 | CleanTalk Anti-Spam. Spam Firewall & Bot protection | 24 | 825 | 1,079 | 200k+ | Missing nonce verification | ||
| #188 | Contact Form by Supsystic | 24 | 1,913 | 633 | 6k+ | Non Singular String Literal Domain | ||
| #189 | WPBot – ChatBot Conversational Forms | 24 | 1,254 | 1,226 | 2k+ | Text Domain Mismatch | ||
| #190 | CRM Perks Forms – WordPress Form Builder | 24 | 819 | 577 | 1k+ | Output is not escaped | ||
| #191 | Custom CSS | 24 | 703 | 657 | 1k+ | Output is not escaped | ||
| #192 | Digital License Manager | 24 | 295 | 670 | 700 | Non-prefixed hook name | ||
| #193 | Doubly – Cross Domain Copy Paste for WordPress | 24 | 252 | 55 | 10k+ | Output is not escaped | ||
| #194 | DSGVO All in one for WP | 24 | 75 | 1,637 | 20k+ | Non-prefixed global variable | ||
| #195 | Dynamic Widgets | 24 | 631 | 812 | 10k+ | Non-prefixed global variable | ||
| #196 | Easy Invoice – Invoice Generator, PDF Quotes & Payments | 24 | 1,366 | 2,013 | 500 | Non-prefixed global variable | ||
| #197 | Login & Register Forms – Popup | Slider | Inline | WooCommerce | 24 | 321 | 677 | 40k+ | Non-prefixed global variable | ||
| #198 | Easy Modal | 24 | 564 | 299 | 7k+ | Unsafe printing function | ||
| #199 | E-cab Taxi Booking Manager for Woocommerce | 24 | 356 | 1,462 | 2k+ | Non-prefixed global variable | ||
| #200 | eCommerce Product Catalog Plugin for WordPress | 24 | 621 | 3,177 | 7k+ | Non-prefixed function |
