PluginScore

PluginCheck.CodeAnalysis.Heredoc.NotAllowed

Not Allowed

Plugin Check reported a maintainability issue that can make the plugin harder to review, run, or update.

medium weight

Why It Shows Up

The finding matches a WordPress coding-standard or Plugin Check rule for code clarity, compatibility, packaging, or API usage.

Why It Matters

Maintainability findings reduce confidence that the plugin will behave consistently across hosts, WordPress versions, and other plugins.

How to Fix

  • Find the exact file and line in the raw scan output.
  • Prefer WordPress APIs and standard coding patterns over custom or legacy behavior.
  • If the warning is from bundled third-party code, document that separately and avoid modifying vendor files unless necessary.

References

WordPress Coding Standards

Affected Plugins

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#1Intercom060716k+Non-prefixed function
#2Live Shopping & Shoppable Videos For WooCommerce079174400Non-prefixed global variable
#3JetBackup – Backup, Restore & Migrate101,567156200k+Exception output is not escaped
#4Easy WP SMTP – WordPress SMTP and Email Logs: Gmail SMTP, Office 365, Outlook, Custom SMTP, and more1545166500k+Database parameter is not escaped
#5AnyComment174454495k+Output is not escaped
#6Shopping Cart & eCommerce Store177,49217,5543k+Non-prefixed global variable
#7Administrator Z182,061799400Output is not escaped
#8Advanced File Manager – Ultimate File Manager for WordPress And Document Library Solution181,229923100k+Exception output is not escaped
#9GiveWP – Donation Plugin and Fundraising Platform193,4223,570100k+Output is not escaped
#10Go Fetch Jobs (for WP Job Manager)191,4101,741600Non-prefixed global variable
#11Matomo Analytics – Powerful, Privacy-First Insights for WordPress191,993892100k+Exception output is not escaped
#12Really Simple Security – Simple and Performant Security (formerly Really Simple SSL)195303753m+Missing Translators Comment
#13SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments195431,15080k+Non-prefixed global variable
#14WPOSS阿里云对象存储19269315900Non-prefixed namespace
#15Brizy – Page Builder2058572660k+Output is not escaped
#16Broadstreet20434273800Output is not escaped
#17Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC)207362,112900Non-prefixed global variable
#18Duplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More202,8781,9881m+Non-prefixed global variable
#19EventPrime – Events Calendar, Bookings, Tickets & AI208464,2247k+Non-prefixed global variable
#20Brevo – Email, SMS, Web Push, Chat, and more.20460646100k+Request data is not unslashed
#21Shipping for Nova Poshta20598923400Output is not escaped
#22Razorpay Payment Button Plugin20486942k+Exception output is not escaped
#23Razorpay Payment Button Elementor Plugin20479621k+Exception output is not escaped
#24Restrict User Access – Ultimate Membership & Content Protection209771,84810k+Non-prefixed global variable
#25Booster for WooCommerce – PDF Invoices, Abandoned Cart, Variation Swatches & 100+ Tools207873,41630k+Non-prefixed global variable
#26WP Compress – Instant Performance & Speed Optimization204,2923,69110k+Non Singular String Literal Domain
#27Premium Packages – Sell Digital Products Securely202,0412,2992k+Non-prefixed global variable
#28Kadence Security – Password, Two Factor Authentication, and Brute Force Protection211,060959700k+Missing Translators Comment
#29Pinpoint Booking System – Version 2216343283k+Missing direct file access protection
#30Captcha Them All213003235k+Output is not escaped
#31Event Espresso – Event Registration & Ticketing Sales2112,7102,136600Text Domain Mismatch
#32Filter Everything — WordPress & WooCommerce Filters2165195250k+Non-prefixed global variable
#33Formidable Forms – WordPress Form Builder for Contact Forms, Calculators, Quizzes & More21562,148300k+Non-prefixed global variable
#34Front End Users217192,759400Non-prefixed global variable
#35JCH Optimize212,2922774k+Output is not escaped
#36King Addons for Elementor – 100+ Elementor Widgets, 4 000+ Elementor Templates, WooCommerce Builder, Mega Menu, Popup Builder211,8473,90410k+Non-prefixed global variable
#37Modular DS: Monitor, update, and backup multiple websites211998240k+Exception output is not escaped
#38OneLogin SAML SSO215073307k+wp function not compatible with requires wp
#39Razorpay for Gravity Forms2141147500Exception output is not escaped
#40Razorpay Quick Payments21399632k+Exception output is not escaped
#41Five Star Restaurant Reservations – WordPress Booking Plugin211,1011,15910k+Output is not escaped
#42Professional Social Sharing Buttons, Icons & Related Posts – Shareaholic2132718110k+Output is not escaped
#43Smart Forms – when you need more than just a contact form217765745k+Output is not escaped
#44Revive Social – Social Media Auto Post and Scheduling Automation Plugin2125443520k+Non-prefixed hook name
#45Uncanny Automator – AI + Automation for WordPress | AI Agent, AI Page Builder, Free AI Usage Included211,0813,14740k+Direct Query
#46URL Shortify – Simple and Easy URL Shortener211,5092,73710k+Non-prefixed global variable
#47Visual Composer Website Builder217332030k+Non-prefixed global variable
#48WebP Express21160427300k+Non-prefixed global variable
#49Razorpay for WooCommerce21980864100k+Non-prefixed function
#50Wordfence Security – Firewall, Malware Scan, and Login Security211,8933,2925m+Output is not escaped