WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedConstantFound
Non-prefixed constant
The plugin defines a constant without a plugin-specific prefix.
Why It Shows Up
WordPress loads many plugins in the same PHP runtime. Plugin Check found a global symbol or hook name that is not clearly namespaced to this plugin.
Why It Matters
Unprefixed globals can collide with WordPress core, themes, or other plugins, causing fatal errors, overwritten values, or handlers running in the wrong context.
How to Fix
- Choose a short, unique prefix or namespace based on the plugin slug or vendor name.
- Rename the constant so it cannot collide with code from another plugin.
- For public hooks, document the final hook name and keep it stable after release.
References
Affected Plugins
| Rank | Plugin | Score | Errors | Warnings | Installs | Added | Updated | Top Issue |
|---|---|---|---|---|---|---|---|---|
| #1701 | Duplicate Killer – Prevent Duplicate Form Submissions | 39 | 57 | 103 | 1k+ | Non-prefixed global variable | ||
| #1702 | Easy PayPal Events & Tickets | 39 | 28 | 550 | 1k+ | Request data is not unslashed | ||
| #1703 | BestWebSoft's Like & Share – Posts, Pages and Widget Social Extension plugin for WordPress | 39 | 480 | 226 | 4k+ | Text Domain Mismatch | ||
| #1704 | GoSMTP – SMTP for WordPress | 39 | 59 | 42 | 500k+ | Output is not escaped | ||
| #1705 | Gravity Slider Fields | 39 | 56 | 36 | 2k+ | Text Domain Mismatch | ||
| #1706 | Gutenverse News – News Blocks for Blog & Magazine Sites | 39 | 37 | 65 | 800 | Non-prefixed hook name | ||
| #1707 | Hide My WP Lite | 39 | 24 | 62 | 400 | Nonce verification recommended | ||
| #1708 | hpb seo plugin for WordPress | 39 | 15 | 87 | 2k+ | Non-prefixed global variable | ||
| #1709 | S2W – Import Shopify to WooCommerce | 39 | 8 | 132 | 3k+ | Request data is not unslashed | ||
| #1710 | JetGridBuilder — Grid Builder for Elementor and Gutenberg | 39 | 414 | 40 | 4k+ | Text Domain Mismatch | ||
| #1711 | Leaflet Map | 39 | 59 | 32 | 30k+ | Output is not escaped | ||
| #1712 | linkPizza-Manager | 39 | 46 | 23 | 700 | Exception output is not escaped | ||
| #1713 | Magazine Blocks – Blog Designer, Magazine & Newspaper Website Builder, Page Builder with Posts Blocks, Post Grid | 39 | 65 | 72 | 6k+ | block api version too low | ||
| #1714 | Manage Enrollment for LearnDash | 39 | 48 | 79 | 400 | Unsafe printing function | ||
| #1715 | Markup by Attribute for WooCommerce | 39 | 46 | 102 | 2k+ | Direct Query | ||
| #1716 | Mizan Demo Importer | 39 | 31 | 91 | 1k+ | Missing nonce verification | ||
| #1717 | Modal Dialog | 39 | 64 | 64 | 500 | Output is not escaped | ||
| #1718 | Pay by paynow.pl | 39 | 51 | 56 | 6k+ | Output is not escaped | ||
| #1719 | PO/MO Editor | 39 | 106 | 45 | 1k+ | Unsafe printing function | ||
| #1720 | Smaily for WP | 39 | 52 | 36 | 700 | Output is not escaped | ||
| #1721 | SMTP | 39 | 54 | 15 | 700 | Non Singular String Literal Domain | ||
| #1722 | Solid Post Likes | 39 | 96 | 52 | 500 | Text Domain Mismatch | ||
| #1723 | Soumettre.fr | 39 | 130 | 26 | 10k+ | Text Domain Mismatch | ||
| #1724 | Sydney Toolbox | 39 | 84 | 62 | 50k+ | Unsafe printing function | ||
| #1725 | Traffic Monitor | 39 | 6 | 143 | 1k+ | Direct Query | ||
| #1726 | User Blocker | 39 | 6 | 276 | 3k+ | Nonce verification recommended | ||
| #1727 | Smart COD for WooCommerce | 39 | 50 | 28 | 30k+ | Output is not escaped | ||
| #1728 | Lucky Wheel for WooCommerce – Spin a Sale | 39 | 12 | 153 | 1k+ | Request data is not unslashed | ||
| #1729 | PayU GPO Payment for WooCommerce | 39 | 44 | 91 | 10k+ | Output is not escaped | ||
| #1730 | Wallet for WooCommerce | 39 | 36 | 524 | 20k+ | Non-prefixed hook name | ||
| #1731 | WP Most Popular | 39 | 50 | 35 | 2k+ | Output is not escaped | ||
| #1732 | WP Realtime Sitemap | 39 | 46 | 41 | 10k+ | Output is not escaped | ||
| #1733 | WP Server Health Stats | 39 | 66 | 31 | 10k+ | Output is not escaped | ||
| #1734 | WP Sitemap Control | 39 | 31 | 37 | 400 | Output is not escaped | ||
| #1735 | Add & Replace Affiliate Links for Amazon | 40 | 39 | 52 | 600 | Output is not escaped | ||
| #1736 | Athemes Toolbox | 40 | 254 | 58 | 3k+ | Text Domain Mismatch | ||
| #1737 | Mastodon Autopost | 40 | 41 | 50 | 800 | Output is not escaped | ||
| #1738 | Client Portal – Private user pages and login | 40 | 52 | 29 | 3k+ | Output is not escaped | ||
| #1739 | Contact Form 7 Multi-Step Forms | 40 | 65 | 41 | 50k+ | Output is not escaped | ||
| #1740 | Flying Scripts: Delay JavaScript to Improve Site Speed & Performance | 40 | 23 | 44 | 30k+ | Missing direct file access protection | ||
| #1741 | Invite Anyone | 40 | 32 | 130 | 1k+ | Non-prefixed hook name | ||
| #1742 | Social Like Box and Page by WpDevArt | 40 | 62 | 24 | 5k+ | Output is not escaped | ||
| #1743 | WP All Import – Listings Import for Listify | 40 | 34 | 27 | 400 | Output is not escaped | ||
| #1744 | Loan Comparison | 40 | 27 | 192 | 400 | Request data is not unslashed | ||
| #1745 | Logbook | 40 | 33 | 59 | 2k+ | Nonce verification recommended | ||
| #1746 | 코드엠샵 소셜톡 | 40 | 47 | 36 | 400 | Output is not escaped | ||
| #1747 | My Social Feeds – Social Feeds Embedder Plugin for WP | 40 | 8 | 77 | 400 | Request data is not unslashed | ||
| #1748 | Flying Images: Optimize and Lazy Load Images for Faster Page Speed | 40 | 32 | 58 | 3k+ | Missing direct file access protection | ||
| #1749 | One Click SSL | 40 | 136 | 62 | 10k+ | Unsafe printing function | ||
| #1750 | Pixel Tag Manager for WooCommerce – Google Analytics 4, Google Ads, and More Pixels | 40 | 68 | 249 | 3k+ | Missing nonce verification |