PluginScore

Squiz.PHP.DiscouragedFunctions.Discouraged

Discouraged PHP function

The plugin uses a PHP or WordPress pattern that coding standards discourage.

medium weight

Why It Shows Up

Plugin Check found a discouraged function, forbidden function, goto, backtick operator, or similar construct.

Why It Matters

Discouraged patterns are often harder to review, less portable across hosts, or easier to misuse securely.

How to Fix

  • Identify why the construct is used and whether WordPress provides a safer API.
  • Replace shell execution, dynamic execution, or broad forbidden functions with constrained WordPress APIs.
  • If a third-party library triggers the warning, isolate and document it.

References

WordPress Coding Standards

Affected Plugins

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#51Pinpoint Booking System – Version 2216343283k+Missing direct file access protection
#52rtMedia for WordPress, BuddyPress and bbPress213636338k+Non-prefixed constant
#53Captcha Them All213003236k+Output is not escaped
#54CartFlows – Funnel Builder & Checkout Plugin for WooCommerce21462654200k+Text Domain Mismatch
#55Smart Grid-Layout Design for Contact Form 7211,12673410k+Output is not escaped
#56Comet Cache2185724520k+Output is not escaped
#57DELUCKS SEO213621,171400Missing nonce verification
#58Duplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More212,5721,2771m+Output is not escaped
#59Ebook Store216661,087700Non-prefixed global variable
#60Envo Extra2187860020k+Text Domain Mismatch
#61ERP: Complete HR, Recruitment, Accounting & CRM Suite with WooCommerce CRM Support218295,9665k+Direct Query
#62Feeds for YouTube (YouTube video, channel, and gallery plugin)21558978100k+Output is not escaped
#63FileOrganizer – WordPress File Manager21536241200k+unlink unlink
#64Formidable Forms – WordPress Form Builder for Contact Forms, Calculators, Quizzes & More21521,959300k+Non-prefixed global variable
#65Campaign Monitor for WordPress213864612k+Non-prefixed global variable
#66Imagify: Optimize Images for Top Speed (Compress & Convert to WebP/AVIF)214208611m+Non-prefixed global variable
#67Leyka212573,4462k+Request data is not unslashed
#68MailChimp Subscribe Form, Optin Builder, PopUp Builder, Form Builder211,1333,0112k+Non-prefixed global variable
#69Mapster WP Maps213,4402,9033k+Text Domain Mismatch
#70Modular DS: Monitor, update, and backup multiple websites211598140k+Exception output is not escaped
#71MotoPress Hotel Booking213,0611,03710k+Text Domain Mismatch
#72Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program – myCred211,4693,33310k+Non-prefixed global variable
#73Landing Page Builder – Coming Soon page, Maintenance Mode, Lead Page, WordPress Landing Pages211,1732,9839k+Non-prefixed global variable
#74Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction211,9185,06510k+Non-prefixed hook name
#75Five Star Restaurant Reservations – WordPress Booking Plugin211,0991,14710k+Output is not escaped
#76Rocket Maintenance Mode & Coming Soon Page211,1761,4064k+Non-prefixed global variable
#77Royal Addons for Elementor – Addons and Templates Kit for Elementor2113,0112,530600k+Text Domain Mismatch
#78Seamless Donations is Sunset216005142k+Text Domain Mismatch
#79SeatReg213121,637400Missing nonce verification
#80Smart Forms – when you need more than just a contact form217765745k+Output is not escaped
#81Accept Stripe Payments2137388220k+Missing nonce verification
#82UPC/EAN/GTIN Barcode Generator/Importer21776311500Exception output is not escaped
#83Buckaroo Woocommerce Payments Plugin215843262k+Exception output is not escaped
#84Wise Chat214705065k+Output is not escaped
#85Paysera Payment Gateway for WooCommerce211,8661957k+Exception output is not escaped
#86Booster for WooCommerce – PDF Invoices, Abandoned Cart, Variation Swatches & 100+ Tools217863,39530k+Non-prefixed global variable
#87PPOM – Product Addons & Custom Fields for WooCommerce213361,32220k+Non-prefixed global variable
#88Wordfence Security – Firewall, Malware Scan, and Login Security211,5922,9735m+Output is not escaped
#89WP Compress – Instant Performance & Speed Optimization213,3673,25310k+Non Singular String Literal Domain
#90WP-Lister Lite for eBay216,6975,1292k+Output is not escaped
#91WP phpMyAdmin214,5286,43550k+Missing Arg Domain
#92wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin211,8111,43270k+Output is not escaped
#93WPScan – WordPress Security Scanner215272658k+Text Domain Mismatch
#94WebTotem Security211,110213900Text Domain Mismatch
#9512 Step Meeting List22156593900Non-prefixed global variable
#96Frontend Admin by DynamiApps225,9223,20810k+Text Domain Mismatch
#97Advanced Form Integration — Connect Forms to 200+ Apps225,7714,67810k+wp function not compatible with requires wp
#98All-in-One Video Gallery229112,89220k+Non-prefixed global variable
#99Booking for Appointments and Events Calendar – Amelia221,48948090k+Exception output is not escaped
#100ANAC XML Bandi di Gara22294244600Output is not escaped