WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedConstantFound
Non-prefixed constant
The plugin defines a constant without a plugin-specific prefix.
Why It Shows Up
WordPress loads many plugins in the same PHP runtime. Plugin Check found a global symbol or hook name that is not clearly namespaced to this plugin.
Why It Matters
Unprefixed globals can collide with WordPress core, themes, or other plugins, causing fatal errors, overwritten values, or handlers running in the wrong context.
How to Fix
- Choose a short, unique prefix or namespace based on the plugin slug or vendor name.
- Rename the constant so it cannot collide with code from another plugin.
- For public hooks, document the final hook name and keep it stable after release.
References
Affected Plugins
| Rank | Plugin | Score | Errors | Warnings | Installs | Added | Updated | Top Issue |
|---|---|---|---|---|---|---|---|---|
| #1751 | Pixel Tag Manager for WooCommerce – Google Analytics 4, Google Ads, and More Pixels | 40 | 68 | 249 | 3k+ | Missing nonce verification | ||
| #1752 | Responsive Plus – Elementor Templates & Starter Sites | 40 | 46 | 305 | 10k+ | Non-prefixed global variable | ||
| #1753 | REST API Custom Fields | 40 | 44 | 16 | 800 | Text Domain Mismatch | ||
| #1754 | Same Category Posts | 40 | 183 | 8 | 3k+ | Output is not escaped | ||
| #1755 | Schedule Posts Calendar | 40 | 74 | 36 | 1k+ | Output is not escaped | ||
| #1756 | Select Post Export | 40 | 51 | 18 | 500 | Output is not escaped | ||
| #1757 | Serviceform Pixel | 40 | 18 | 22 | 400 | Output is not escaped | ||
| #1758 | SportsPress for Cricket | 40 | 122 | 34 | 500 | Text Domain Mismatch | ||
| #1759 | CPS | Age Verification | 40 | 127 | 35 | 900 | Unsafe printing function | ||
| #1760 | Tagging | 40 | 33 | 37 | 500 | Output is not escaped | ||
| #1761 | ThemeZee Toolkit | 40 | 44 | 116 | 6k+ | Nonce verification recommended | ||
| #1762 | Ultimate Member – ForumWP forum integration | 40 | 31 | 73 | 500 | Nonce verification recommended | ||
| #1763 | WooBooster Partial COD for WooCommerce | 40 | 90 | 51 | 500 | Text Domain Mismatch | ||
| #1764 | NP Quote Request for WooCommerce | 40 | 91 | 145 | 9k+ | Non-prefixed global variable | ||
| #1765 | WP Compress for MainWP | 40 | 20 | 36 | 700 | Output is not escaped | ||
| #1766 | Custom CSS/JS | 40 | 58 | 34 | 700 | Text Domain Mismatch | ||
| #1767 | WP All Import – Job Listing Import for WP Job Manager | 40 | 35 | 27 | 2k+ | Output is not escaped | ||
| #1768 | WP Keyword Suggest | 40 | 29 | 41 | 500 | Non Singular String Literal Domain | ||
| #1769 | WP Nav Plus | 40 | 95 | 13 | 1k+ | Output is not escaped | ||
| #1770 | WP Paint – WordPress Image Editor | 40 | 30 | 29 | 6k+ | Missing Arg Domain | ||
| #1771 | Sentry for WordPress | 40 | 80 | 40 | 10k+ | Text Domain Mismatch | ||
| #1772 | WPC Estimated Delivery Date for WooCommerce | 40 | 13 | 106 | 10k+ | Non-prefixed global variable | ||
| #1773 | WPC Force Sells for WooCommerce | 40 | 38 | 97 | 600 | Output is not escaped | ||
| #1774 | WPC Smart Price Filter for WooCommerce | 40 | 23 | 62 | 600 | Nonce verification recommended | ||
| #1775 | Yektanet Ecommerce | 40 | 45 | 103 | 1k+ | Request data is not unslashed | ||
| #1776 | My YouTube Channel | 40 | 54 | 38 | 5k+ | Output is not escaped | ||
| #1777 | AMP for WP – Accelerated Mobile Pages | 41 | 656 | 2,401 | 80k+ | Non-prefixed global variable | ||
| #1778 | Add-on Contact Form 7 – MailPoet 3 | 41 | 88 | 12 | 3k+ | Output is not escaped | ||
| #1779 | Schema – All In One Schema Rich Snippets | 41 | 598 | 180 | 30k+ | Text Domain Mismatch | ||
| #1780 | Conditional Fields for Contact Form 7 | 41 | 113 | 52 | 100k+ | Output is not escaped | ||
| #1781 | Cookie Notice & Consent | 41 | 101 | 29 | 1k+ | Output is not escaped | ||
| #1782 | Disable Everything | 41 | 90 | 16 | 30k+ | Output is not escaped | ||
| #1783 | Hide WP Admin Login | 41 | 23 | 39 | 500 | Nonce verification recommended | ||
| #1784 | MaxLimits – Increase Maximum Upload, Post & PHP Limits | 41 | 99 | 16 | 2k+ | Unsafe printing function | ||
| #1785 | Multiple Domain | 41 | 42 | 17 | 10k+ | Output is not escaped | ||
| #1786 | My Wp Brand – Hide menu & Hide Plugin | 41 | 74 | 50 | 2k+ | Non Singular String Literal Domain | ||
| #1787 | Smart Post – Post Grid, Post Carousel, Post Slider Gutenberg Blocks for Blog & News | 41 | 537 | 20k+ | Non-prefixed global variable | |||
| #1788 | Preload LCP Image | 41 | 110 | 31 | 4k+ | Unsafe printing function | ||
| #1789 | wpSUBpages Redirect | 41 | 24 | 27 | 600 | Output is not escaped | ||
| #1790 | SiteSEO – SEO Simplified | 41 | 20 | 110 | 500k+ | Nonce verification recommended | ||
| #1791 | Smooth Scroll Up | 41 | 61 | 10 | 6k+ | Output is not escaped | ||
| #1792 | Taxonomy Filter | 41 | 143 | 40 | 800 | Output is not escaped | ||
| #1793 | Theme Blvd Importer | 41 | 25 | 58 | 500 | Missing nonce verification | ||
| #1794 | Unbloater | 41 | 57 | 18 | 5k+ | Output is not escaped | ||
| #1795 | Advanced Custom Stock Status | 41 | 84 | 33 | 9k+ | Output is not escaped | ||
| #1796 | WPC Product Bundles for WooCommerce | 41 | 23 | 141 | 30k+ | Request data is not unslashed | ||
| #1797 | Pricing Table – Responsive & Easy | 42 | 117 | 148 | 3k+ | Non-prefixed global variable | ||
| #1798 | Add to Home Screen & Progressive Web App | 42 | 23 | 68 | 1k+ | Request data is not unslashed | ||
| #1799 | Custom Admin Page by BestWebSoft – Configurable WordPress Dashboard Pages Plugin | 42 | 472 | 181 | 400 | Text Domain Mismatch | ||
| #1800 | Disable User Login | 42 | 25 | 19 | 5k+ | Unsafe printing function |