PluginScore

Squiz.PHP.DiscouragedFunctions.Discouraged

Discouraged PHP function

The plugin uses a PHP or WordPress pattern that coding standards discourage.

medium weight

Why It Shows Up

Plugin Check found a discouraged function, forbidden function, goto, backtick operator, or similar construct.

Why It Matters

Discouraged patterns are often harder to review, less portable across hosts, or easier to misuse securely.

How to Fix

  • Identify why the construct is used and whether WordPress provides a safer API.
  • Replace shell execution, dynamic execution, or broad forbidden functions with constrained WordPress APIs.
  • If a third-party library triggers the warning, isolate and document it.

References

WordPress Coding Standards

Affected Plugins

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#651Contact Form Plugin33472202k+Non-prefixed function
#652WP GIF Uploader33117441k+Text Domain Mismatch
#653IP2Location Redirection331981228k+Output is not escaped
#654MWB HubSpot for WooCommerce – CRM, Abandoned Cart, Email Marketing, Marketing Automation & Analytics33262797k+Non-prefixed global variable
#655Molongui Post Contributors: Multi-Role Contributor Attribution33240162400Output is not escaped
#656Notification Master – Real-Time WordPress Notifications With Email, SMS, Webhooks & More332932151k+Text Domain Mismatch
#657QNAP NAS Backup33374702k+Non Singular String Literal Domain
#658Frisbii Pay33912921k+Non-prefixed global variable
#659RSS Feed Pro3348416500Output is not escaped
#660Social Rocket – Social Sharing Plugin331,0162551k+Unsafe printing function
#661Website Monetization by MageNet33608720k+Output is not escaped
#662Hyyan WooCommerce Polylang Integration331412208k+Nonce verification recommended
#663EasyMedia – Increase Media Upload File Size | Role-Based Upload Limit | Increase Execution Time338213870k+Non-prefixed global variable
#664WP Multilang – Translation and Multilingual Plugin335111810k+Database parameter is not escaped
#665XML Sitemaps3365622k+Output is not escaped
#666Zita Site Library for Elementor331071351k+Text Domain Mismatch
#667All-in-One WP Migration and Backup3447695m+Missing nonce verification
#668AyeCode Connect3417825310k+Nonce verification recommended
#669Campi Moduli Italiani3472363500Unquoted Complex Placeholder
#670SMS Abandoned Cart Recovery ✦ CartBoss346772400SQL query is not prepared
#671Download After Email – Subscribe & Download Form Plugin34223567k+Input is not validated
#672EasyIndex34741351k+Missing nonce verification
#673Essential Classy Addons for Elementor – 150+ Widgets, Templates & Performance Tools34278186500Output is not escaped
#674Image Cleanup3452941k+Nonce verification recommended
#675HTML Import 234273265k+Unsafe printing function
#676IP2Location Country Blocker342958830k+Output is not escaped
#677Majestic Support – The Leading-Edge Help Desk & Customer Support Plugin34364593k+Input is not sanitized
#678MantraBrain Starter Sites | MantraBrain Theme Demo Importer34117611k+Output is not escaped
#679Media Vault34115150800Output is not escaped
#680Optima Express IDX347123710k+Non-prefixed class
#681PushEngage – Web Push Notifications, WooCommerce Automation & Chat Widget34462989k+Missing nonce verification
#682PW WooCommerce Bulk Edit3421914920k+Unsafe printing function
#683QuadLayers Telegram Button34149711k+Text Domain Mismatch
#684Testimonial Slider344482623k+Unsafe printing function
#685Pix Automático com Pagarme para WooCommerce346866500Non-prefixed global variable
#686Checkout Field Editor (Checkout Page Manager) for WooCommerce347062322k+Text Domain Mismatch
#687Integration for WooCommerce and Zoho CRM, Books, Invoice, Inventory, Bigin342301542k+Output is not escaped
#688Live Visitor Counter341081144k+Interpolated SQL is not prepared
#689Aurora Heatmap35141820k+Non-prefixed global variable
#690Avif Express3526167400Input is not validated
#691BackWPup – WordPress Backup & Restore Plugin3512779500k+Non-prefixed global variable
#692bbPress Notify (No-Spam)3562662k+wp function not compatible with requires wp
#693Blogsqode – Blog Layouts and News Post Design3543063400Text Domain Mismatch
#694Bluehost Site Migrator3511184k+Missing direct file access protection
#695Bulk Download for Gravity Forms3552400Hidden files included
#696CiviCRM Profile Sync3531140500Non-prefixed global variable
#697CompressX — AVIF & WebP Converter, Media Replacement352642340k+Missing nonce verification
#698Core Framework35706210k+Text Domain Mismatch
#699Disk Usage Sunburst3530349k+Output is not escaped
#700DOOFINDER Search and Discovery for WP & WooCommerce351511202k+Text Domain Mismatch