PluginScore

Generic.PHP.ForbiddenFunctions.Found

PHP Forbidden Functions Found

The plugin uses a PHP or WordPress pattern that coding standards discourage.

medium weight

Why It Shows Up

Plugin Check found a discouraged function, forbidden function, goto, backtick operator, or similar construct.

Why It Matters

Discouraged patterns are often harder to review, less portable across hosts, or easier to misuse securely.

How to Fix

  • Identify why the construct is used and whether WordPress provides a safer API.
  • Replace shell execution, dynamic execution, or broad forbidden functions with constrained WordPress APIs.
  • If a third-party library triggers the warning, isolate and document it.

References

WordPress Coding Standards

Affected Plugins

RankPluginScoreErrorsWarningsInstallsUpdatedTop Issue
#301WOW Slider331761013k+Output Not Escaped
#302WP Edit3333713740k+Unsafe Printing Function
#303All In One Favicon342146260k+Output Not Escaped
#304Cornerstone3416117430k+Recommended
#305Edit Flow341032274k+Non Prefixed Hookname Found
#306Enhanced Text Widget341015830k+Output Not Escaped
#307FastPixel Cache – Optimize Page Speed: Compress Images, Minify, Clean Database & CDN34493244k+Missing Unslash
#308HTML Import 234273265k+Unsafe Printing Function
#309WP Custom Admin Interface3426311830k+Unsafe Printing Function
#310ACF Content Analysis for Yoast SEO35917100k+Non Prefixed Constant Found
#311AnsPress – Question and answer35227783k+Non Prefixed Function Found
#312Gutenberg Block Editor Toolkit – EditorsKit35612530k+Text Domain Mismatch
#313Wbcom Designs – Custom Font Uploader353401233k+Text Domain Mismatch
#314Image Slider35192954k+Output Not Escaped
#315ImageMagick Engine35632960k+Unsafe Printing Function
#316User Import with meta – WP Ultimate CSV Importer Add-on35271405k+Interpolated Not Prepared
#317Woody Code Snippets – Insert PHP, CSS, JS, and Header/Footer Scripts35649160k+Output Not Escaped
#318MainWP Child Reports3549116100k+Non Prefixed Hookname Found
#319One Page Express Companion351326510k+Output Not Escaped
#320Simple History – Track, Log, and Audit WordPress Changes3532122300k+Non Prefixed Variable Found
#321SiteOrigin CSS356184100k+Not In Footer
#322User Photo35112683k+Output Not Escaped
#323Custom Payment Gateways for WooCommerce35202313k+Non Singular String Literal Domain
#324WPGraphQL35118630k+Non Prefixed Hookname Found
#325WP Mailto Links – Protect Email Addresses3595698k+Output Not Escaped
#326WPFront User Role Editor3533357830k+Output Not Escaped
#327Code Snippets36342031m+Recommended
#328Drag and Drop Multiple File Upload for Contact Form 736823660k+wp function not compatible with requires wp
#329M Chart36291554k+Non Prefixed Variable Found
#330Materialis Companion36129676k+Unsafe Printing Function
#331WowStore – Store Builder & Product Blocks for WooCommerce36664294k+Non Prefixed Variable Found
#332Search Everything361657710k+Text Domain Mismatch
#333Debug Log Manager Tool37331083k+Recommended
#334HT Menu – WordPress Mega Menu Builder for Elementor37300603k+Text Domain Mismatch
#335JVM Rich Text Icons3786343k+Output Not Escaped
#336Maintenance Page3762333k+Output Not Escaped
#337Max Mega Menu37249174300k+Output Not Escaped
#338Page scroll to id3738120100k+Missing
#339Ultimate Tag Cloud Widget37715164k+Output Not Escaped
#340Category Posts Widget381532640k+Output Not Escaped
#341Checkout Files Upload for WooCommerce38571207k+Input Not Sanitized
#342Custom Menu Wizard Widget38326303k+Output Not Escaped
#343EU Cookie Law Compliance38151222k+Non Singular String Literal Domain
#344Insert PHP Code Snippet3816422790k+Output Not Escaped
#345MultiLine Files for Contact Form 73898409k+Text Domain Mismatch
#346Restrict Widgets38135404k+Non Singular String Literal Domain
#347Shapely Companion38493910k+Output Not Escaped
#348Bulk Auto Image Alt Text (Alt tag, Alt attribute) optimizer (image SEO)39175010k+Missing Unslash
#349Content Visibility for Divi Builder39184592k+Non Singular String Literal Domain
#350Cookies for Comments39222920k+Input Not Validated