PluginScore

PluginCheck.CodeAnalysis.Heredoc.NotAllowed

Not Allowed

Plugin Check reported a maintainability issue that can make the plugin harder to review, run, or update.

medium weight

Why It Shows Up

The finding matches a WordPress coding-standard or Plugin Check rule for code clarity, compatibility, packaging, or API usage.

Why It Matters

Maintainability findings reduce confidence that the plugin will behave consistently across hosts, WordPress versions, and other plugins.

How to Fix

  • Find the exact file and line in the raw scan output.
  • Prefer WordPress APIs and standard coding patterns over custom or legacy behavior.
  • If the warning is from bundled third-party code, document that separately and avoid modifying vendor files unless necessary.

References

WordPress Coding Standards

Affected Plugins

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#1Intercom060716k+Non-prefixed function
#2Live Shopping & Shoppable Videos For WooCommerce079174400Non-prefixed global variable
#3JetBackup – Backup, Restore & Migrate101,563149200k+Exception output is not escaped
#4Easy WP SMTP – WordPress SMTP and Email Logs: Gmail SMTP, Office 365, Outlook, Custom SMTP, and more1545166500k+Database parameter is not escaped
#5Visual Composer Website Builder168232040k+Non-prefixed global variable
#6AnyComment174454495k+Output is not escaped
#7Podlove Podcast Publisher182,3541,4333k+Output is not escaped
#8Shopping Cart & eCommerce Store185,37317,4663k+Non-prefixed global variable
#9Advanced File Manager – Ultimate File Manager for WordPress And Document Library Solution191,218901100k+Exception output is not escaped
#10Go Fetch Jobs (for WP Job Manager)191,4101,741700Non-prefixed global variable
#11Matomo Analytics – Powerful, Privacy-First Insights for WordPress191,900877100k+Exception output is not escaped
#12Razorpay Payment Button Plugin19486982k+Exception output is not escaped
#13Really Simple Security – Simple and Performant Security (formerly Really Simple SSL)195363793m+Missing Translators Comment
#14SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments195331,14980k+Non-prefixed global variable
#15WPJAM Basic193253464k+Output is not escaped
#16WPOSS阿里云对象存储19269315900Non-prefixed namespace
#17Brizy – Page Builder2058672670k+Output is not escaped
#18Broadstreet20434273700Output is not escaped
#19Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC)207362,112900Non-prefixed global variable
#20Event Espresso – Event Registration & Ticketing Sales2012,6982,135600Text Domain Mismatch
#21GiveWP – Donation Plugin and Fundraising Platform203,4113,559100k+Output is not escaped
#22Brevo – Email, SMS, Web Push, Chat, and more.20460646100k+Request data is not unslashed
#23Shipping for Nova Poshta20598923400Output is not escaped
#24Razorpay Payment Button Elementor Plugin20479621k+Exception output is not escaped
#25Razorpay for WooCommerce20975859100k+Non-prefixed function
#26Premium Packages – Sell Digital Products Securely202,0322,1902k+Non-prefixed global variable
#27Kadence Security – Password, Two Factor Authentication, and Brute Force Protection211,060957700k+Missing Translators Comment
#28Pinpoint Booking System – Version 2216343283k+Missing direct file access protection
#29Captcha Them All213003235k+Output is not escaped
#30Duplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More212,5721,2771m+Output is not escaped
#31EventPrime – Events Calendar, Bookings and Tickets218734,3087k+Non-prefixed global variable
#32Filter Everything — WordPress & WooCommerce Filters2164393350k+Non-prefixed global variable
#33Formidable Forms – WordPress Form Builder for Contact Forms, Calculators, Quizzes & More21522,063300k+Non-prefixed global variable
#34Front End Users217192,759400Non-prefixed global variable
#35Modular DS: Monitor, update, and backup multiple websites211598240k+Exception output is not escaped
#36OneLogin SAML SSO215073307k+wp function not compatible with requires wp
#37Razorpay for Gravity Forms2141147600Exception output is not escaped
#38Razorpay Quick Payments21399632k+Exception output is not escaped
#39Five Star Restaurant Reservations – WordPress Booking Plugin211,1011,15910k+Output is not escaped
#40Professional Social Sharing Buttons, Icons & Related Posts – Shareaholic2132718110k+Output is not escaped
#41Smart Forms – when you need more than just a contact form217765745k+Output is not escaped
#42Revive Social – Social Media Auto Post and Scheduling Automation Plugin2125643120k+Non-prefixed hook name
#43Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin211,0642,97540k+Direct Query
#44URL Shortify – Simple and Easy URL Shortener211,5112,66910k+Non-prefixed global variable
#45WebP Express21160427300k+Non-prefixed global variable
#46Paysera Payment Gateway for WooCommerce211,8681967k+Exception output is not escaped
#47WooCommerce211,3436,2127m+Non-prefixed global variable
#48Booster for WooCommerce – PDF Invoices, Abandoned Cart, Variation Swatches & 100+ Tools217863,39330k+Non-prefixed global variable
#49Wordfence Security – Firewall, Malware Scan, and Login Security211,5922,9735m+Output is not escaped
#50WP Compress – Instant Performance & Speed Optimization213,3673,25310k+Non Singular String Literal Domain