PluginScore

PluginCheck.CodeAnalysis.Heredoc.NotAllowed

Not Allowed

Plugin Check reported a maintainability issue that can make the plugin harder to review, run, or update.

medium weight

Why It Shows Up

The finding matches a WordPress coding-standard or Plugin Check rule for code clarity, compatibility, packaging, or API usage.

Why It Matters

Maintainability findings reduce confidence that the plugin will behave consistently across hosts, WordPress versions, and other plugins.

How to Fix

  • Find the exact file and line in the raw scan output.
  • Prefer WordPress APIs and standard coding patterns over custom or legacy behavior.
  • If the warning is from bundled third-party code, document that separately and avoid modifying vendor files unless necessary.

References

WordPress Coding Standards

Affected Plugins

RankPluginScoreErrorsWarningsInstallsUpdatedTop Issue
#1Intercom060716k+Non-prefixed function
#2JetBackup – Backup, Restore & Migrate101,559145100k+Exception output is not escaped
#3Visual Composer Website Builder168232040k+Non-prefixed global variable
#4AnyComment174454495k+Output is not escaped
#5Podlove Podcast Publisher182,3261,4293k+Output is not escaped
#6Shopping Cart & eCommerce Store185,45917,2984k+Non-prefixed global variable
#7Element Pack – Widgets, Templates & Addons for Elementor199,448517100k+Text Domain Mismatch
#8Advanced File Manager – Ultimate File Manager for WordPress And Document Library Solution191,218901100k+Exception output is not escaped
#9Matomo Analytics – Powerful, Privacy-First Insights for WordPress191,909878100k+Exception output is not escaped
#10Razorpay Payment Button Plugin19486982k+Exception output is not escaped
#11Really Simple Security – Simple and Performant Security (formerly Really Simple SSL)195413853m+Missing Translators Comment
#12SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments195261,11990k+Non-prefixed global variable
#13BetterDocs – AI Documentation, Knowledge Base, Docs, Wikis, FAQ with Chatbot205081,40630k+Non-prefixed global variable
#14Brizy – Page Builder2058972070k+Output is not escaped
#15DMCA Protection Badge204,4252171k+Output is not escaped
#16Filter Everything — WordPress & WooCommerce Filters2056873050k+Output is not escaped
#17GiveWP – Donation Plugin and Fundraising Platform203,4353,580100k+Output is not escaped
#18Brevo – Email, SMS, Web Push, Chat, and more.20460646100k+Request data is not unslashed
#19Razorpay for WooCommerce20974855100k+Non-prefixed function
#20WPJAM Basic203283564k+Output is not escaped
#21Pinpoint Booking System – Version 2216343283k+Missing direct file access protection
#22Captcha Them All213003236k+Output is not escaped
#23Smart Grid-Layout Design for Contact Form 7211,12673410k+Output is not escaped
#24Duplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More212,5721,2771m+Output is not escaped
#25ERP: Complete HR, Accounting & CRM Suite with Recruitment and WooCommerce CRM Support218295,9665k+Direct Query
#26EventPrime – Events Calendar, Bookings and Tickets218724,2977k+Non-prefixed global variable
#27Formidable Forms – WordPress Form Builder for Contact Forms, Calculators, Quizzes & More21521,959300k+Non-prefixed global variable
#28If-So Dynamic Content – Elementor & All Page Builders Personalization218897257k+Unsafe printing function
#29JCH Optimize219531334k+Output is not escaped
#30Modular DS: Monitor, update, and backup multiple websites211618140k+Exception output is not escaped
#31OneLogin SAML SSO215083307k+wp function not compatible with requires wp
#32Packeta218023338k+Exception output is not escaped
#33Razorpay Quick Payments21399633k+Exception output is not escaped
#34Five Star Restaurant Reservations – WordPress Booking Plugin211,0991,14710k+Output is not escaped
#35Professional Social Sharing Buttons, Icons & Related Posts – Shareaholic2132718110k+Output is not escaped
#36Smart Forms – when you need more than just a contact form217765745k+Output is not escaped
#37Revive Social – Social Media Auto Post and Scheduling Automation Plugin2125542520k+Non-prefixed hook name
#38WebP Express21160427300k+Non-prefixed global variable
#39Paysera Payment Gateway for WooCommerce211,8661957k+Exception output is not escaped
#40Booster for WooCommerce – PDF Invoices, Abandoned Cart, Variation Swatches & 100+ Tools217863,39530k+Non-prefixed global variable
#41Wordfence Security – Firewall, Malware Scan, and Login Security211,5922,9735m+Output is not escaped
#42WP phpMyAdmin214,5286,43550k+Missing Arg Domain
#43Premium Packages – Sell Digital Products Securely212,7652,4443k+Output is not escaped
#44Frontend Admin by DynamiApps225,9223,20810k+Text Domain Mismatch
#45Booking for Appointments and Events Calendar – Amelia221,48948090k+Exception output is not escaped
#46BuddyPress225839,008100k+Non-prefixed function
#47RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login223,6545,0618k+Non-prefixed global variable
#48Directorist: AI-Powered Business Directory, Listings & Classified Ads224432,12920k+Non-prefixed global variable
#49Dynamic QR Code – generator222382086k+Missing direct file access protection
#50EleSpare – News, Magazine and Blog Addons for Elementor227331,42310k+Non-prefixed global variable