Generic.PHP.ForbiddenFunctions.Found

PHP Forbidden Functions Found

The plugin uses a PHP or WordPress pattern that coding standards discourage.

medium weight

Why It Shows Up

Plugin Check found a discouraged function, forbidden function, goto, backtick operator, or similar construct.

Why It Matters

Discouraged patterns are often harder to review, less portable across hosts, or easier to misuse securely.

How to Fix

  • Identify why the construct is used and whether WordPress provides a safer API.
  • Replace shell execution, dynamic execution, or broad forbidden functions with constrained WordPress APIs.
  • If a third-party library triggers the warning, isolate and document it.

Affected Plugins

RankPluginScoreErrorsWarningsInstallsUpdatedTop Issue
#201YITH WooCommerce Subscription244391,5387k+Non Prefixed Variable Found
#202YITH WooCommerce Waitlist244201,5003k+Non Prefixed Variable Found
#203YITH WooCommerce Wishlist244481,486400k+Non Prefixed Variable Found
#204YITH WooCommerce Product Gallery & Image Zoom244181,49020k+Non Prefixed Variable Found
#205Jetpack CRM – Clients, Leads, Invoices, Billing, Email Marketing, & Automation241,2113,15230k+Non Prefixed Variable Found
#206AdRotate Banner Manager251,36584620k+Unsafe Printing Function
#207Advanced WordPress Reset – Debug, Recover & Reset WP2547546420k+Output Not Escaped
#208Total Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid2524385450k+Non Prefixed Variable Found
#209BuddyPress Docs252844217k+Recommended
#210CheckoutWC Lite251,3598503k+Text Domain Mismatch
#211CSS & JavaScript Toolbox2515561710k+Non Prefixed Class Found
#212DecaLog259432361k+Exception Not Escaped
#213Frontend Post Submission Manager Lite – Frontend Posting WordPress Plugin251874932k+Non Prefixed Variable Found
#214Site Kit by Google – Analytics, Search Console, AdSense, Speed251,3042425m+missing direct file access protection
#215Logo Slider – Logo Showcase, Logo Carousel, Logo Gallery and Client Logo Presentation2578931330k+Text Domain Mismatch
#216Team Members – A WordPress Team Plugin with Gallery, Grid, Carousel, Slider, Table, List, and More251,7862,2202k+Non Prefixed Variable Found
#217Solid Testimonials – Testimonial Slider, Video Testimonials & Customer Reviews256451,5851k+Non Prefixed Variable Found
#218HT Contact Form – Drag & Drop Form Builder for WordPress2515859310k+Non Prefixed Variable Found
#219Index WP MySQL For Speed2525025550k+Output Not Escaped
#220IP Location Block2552162410k+Output Not Escaped
#221Knit Pay – Cashfree, Instamojo, Razorpay, PayPal and more254,0101,2622k+Text Domain Mismatch
#222Nexter Extension – Security, Performance, Code Snippets & Site Toolkit2519871010k+Recommended
#223Piotnet Forms251873743k+Output Not Escaped
#224Post Snippets – Custom WordPress Code Snippets Customizer258081,65420k+Non Prefixed Variable Found
#225Quttera ThreatSign – Web Malware Scanner for WordPress2533447110k+Non Prefixed Variable Found
#226Sensei LMS – Online Courses, Quizzes, & Learning255692810k+Recommended
#227SEO Plugin by Squirrly SEO251,13022240k+Missing Translators Comment
#228SupportCandy – Helpdesk & Customer Support Ticket System254341,35710k+Direct Query
#229TablePress – Tables in WordPress made easy258472,174600k+Non Prefixed Variable Found
#230Tamara Checkout256012282k+Exception Not Escaped
#231TemplateSpare – 1000+ WordPress Starter Templates & Full Site Migration Tool | 1-Click Import/Export & No-Code Builder257051,58710k+Non Prefixed Variable Found
#232Tourfic – AI Powered Travel Booking, Hotel Booking & Car Rental WordPress Plugin251192,7062k+Non Prefixed Variable Found
#233Ultimate Bootstrap Elements for Elementor256,3261226k+Text Domain Mismatch
#234Social Media Share Buttons & Social Sharing Icons252,4331,383100k+Unsafe Printing Function
#235VikBooking Hotel Booking Engine & PMS2513,2328,3128k+Output Not Escaped
#236VikRentCar Car Rental Management System255,5375,0484k+Non Prefixed Variable Found
#237W3 Total Cache256171,345900k+Non Prefixed Variable Found
#238PDF Builder for WooCommerce. Create invoices,packing slips and more253725032k+Non Prefixed Variable Found
#239WP-DownloadManager256075083k+Unsafe Printing Function
#240WP Encryption – One Click Free SSL Certificate & SSL / HTTPS Redirect, Security & SSL Scan257271,55450k+Non Prefixed Variable Found
#241ActiveCampaign for WooCommerce265411906k+Exception Not Escaped
#242Database for Contact Form 7, WPforms, Elementor forms2631748960k+Non Prefixed Variable Found
#243Folders – Unlimited Folders to Organize Media Library Folder, Pages, Posts, File Manager2611359790k+Non Prefixed Variable Found
#244Kadence Central – Site Management, Backups, Security, and Reporting2646221330k+Text Domain Mismatch
#245Loco Translate264542421m+Output Not Escaped
#246Open User Map – Interactive Leaflet Maps2689398610k+Non Prefixed Variable Found
#247Organic Builder Widgets – Simple WordPress Page Builder261,0341254k+Output Not Escaped
#248Polylang2636564800k+Non Prefixed Hookname Found
#249Pressidium Cookie Consent262039510k+Exception Not Escaped
#250Send Users Email – Email Subscribers, Email Marketing Newsletter261884155k+Non Prefixed Variable Found