WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedFunctionFound
Non-prefixed function
The plugin defines a function without a plugin-specific prefix.
Why It Shows Up
WordPress loads many plugins in the same PHP runtime. Plugin Check found a global symbol or hook name that is not clearly namespaced to this plugin.
Why It Matters
Unprefixed globals can collide with WordPress core, themes, or other plugins, causing fatal errors, overwritten values, or handlers running in the wrong context.
How to Fix
- Choose a short, unique prefix or namespace based on the plugin slug or vendor name.
- Rename the function so it cannot collide with code from another plugin.
- For public hooks, document the final hook name and keep it stable after release.
References
Affected Plugins
| Rank | Plugin | Score | Errors | Warnings | Installs | Added | Updated | Top Issue |
|---|---|---|---|---|---|---|---|---|
| #2351 | ACF: Google Font Selector | 39 | 57 | 45 | 3k+ | Output is not escaped | ||
| #2352 | Advanced Categories Widget | 39 | 170 | 41 | 800 | Output is not escaped | ||
| #2353 | Affiliate Links – Link Cloaking and Management | 39 | 23 | 113 | 3k+ | Non-prefixed global variable | ||
| #2354 | AffiliatePages – Pros & Cons, Notice, and CTA Blocks for Affiliates | 39 | 91 | 53 | 2k+ | Output is not escaped | ||
| #2355 | Load More Anything | 39 | 38 | 73 | 5k+ | Output is not escaped | ||
| #2356 | Ads.txt & App-ads.txt Manager for WordPress | 39 | 97 | 23 | 2k+ | Output is not escaped | ||
| #2357 | Archive Control | 39 | 151 | 67 | 1k+ | Unsafe printing function | ||
| #2358 | AWEOS WP Lock | 39 | 24 | 53 | 400 | Output is not escaped | ||
| #2359 | Header Footer for Beaver Builder | 39 | 39 | 31 | 10k+ | Output is not escaped | ||
| #2360 | bbPress Voting | 39 | 27 | 53 | 500 | Output is not escaped | ||
| #2361 | Birds Custom Login | 39 | 196 | 23 | 4k+ | Non Singular String Literal Domain | ||
| #2362 | BOX NOW Delivery Croatia | 39 | 64 | 99 | 700 | Missing nonce verification | ||
| #2363 | BuddyPress Default Cover Photo | 39 | 62 | 39 | 500 | Output is not escaped | ||
| #2364 | BuddyPress Notification Widget | 39 | 54 | 31 | 600 | Output is not escaped | ||
| #2365 | Cache Images | 39 | 72 | 27 | 1k+ | Unsafe printing function | ||
| #2366 | Innozilla Skins for Contact Form 7 | 39 | 152 | 22 | 2k+ | Output is not escaped | ||
| #2367 | Constant Contact + WooCommerce | 39 | 27 | 91 | 1k+ | Nonce verification recommended | ||
| #2368 | Image CAPTCHA for Contact Form 7 and WPForms by HookAndHook (DSGVO/GDPR) | 39 | 28 | 45 | 80k+ | Missing nonce verification | ||
| #2369 | Culqi | 39 | 571 | 88 | 1k+ | Text Domain Mismatch | ||
| #2370 | Custom Metadata Manager | 39 | 81 | 20 | 700 | Output is not escaped | ||
| #2371 | Custom Post Type Parents | 39 | 75 | 18 | 900 | Output is not escaped | ||
| #2372 | Da Reactions | 39 | 15 | 140 | 400 | Request data is not unslashed | ||
| #2373 | Dashboard Cleaner | 39 | 40 | 91 | 500 | Missing nonce verification | ||
| #2374 | Datalogics Ecommerce Delivery – Datalogics | 39 | 13 | 115 | 500 | Nonce verification recommended | ||
| #2375 | Dublin Core Metadata Generator | 39 | 74 | 15 | 900 | Output is not escaped | ||
| #2376 | WeShareAI – AI-Powered Share Buttons (formerly E-MAILiT) | 39 | 165 | 24 | 700 | Unsafe printing function | ||
| #2377 | Easy PayPal Events & Tickets | 39 | 28 | 550 | 1k+ | Request data is not unslashed | ||
| #2378 | Editor Menu and Widget Access | 39 | 81 | 24 | 7k+ | Output is not escaped | ||
| #2379 | Caldera Forms styler for Elementor Page Builder | 39 | 173 | 12 | 800 | Text Domain Mismatch | ||
| #2380 | ElementsKit Elementor Addons – Advanced Widgets & Templates Addons for Elementor | 39 | 73 | 350 | 1m+ | Non-prefixed global variable | ||
| #2381 | BestWebSoft's Like & Share – Posts, Pages and Widget Social Extension plugin for WordPress | 39 | 480 | 226 | 4k+ | Text Domain Mismatch | ||
| #2382 | Faster Image Insert | 39 | 94 | 26 | 2k+ | Output is not escaped | ||
| #2383 | First Order Discount Woocommerce | 39 | 55 | 30 | 1k+ | Output is not escaped | ||
| #2384 | Fix Duplicates | 39 | 76 | 73 | 800 | Output is not escaped | ||
| #2385 | Flex Import | 39 | 15 | 140 | 500 | Non-prefixed global variable | ||
| #2386 | GL Import External Images | 39 | 118 | 19 | 800 | wp function not compatible with requires wp | ||
| #2387 | Graphina – Charts and Graphs For Elementor | 39 | 1,895 | 113 | 10k+ | Text Domain Mismatch | ||
| #2388 | Gravity Slider Fields | 39 | 56 | 36 | 2k+ | Text Domain Mismatch | ||
| #2389 | Maintenance Mode | 39 | 86 | 109 | 7k+ | Output is not escaped | ||
| #2390 | hpb seo plugin for WordPress | 39 | 15 | 87 | 2k+ | Non-prefixed global variable | ||
| #2391 | If Menu – Visibility control for Menus | 39 | 281 | 63 | 50k+ | Output is not escaped | ||
| #2392 | S2W – Import Shopify to WooCommerce | 39 | 8 | 132 | 3k+ | Request data is not unslashed | ||
| #2393 | Leaflet Map | 39 | 59 | 32 | 30k+ | Output is not escaped | ||
| #2394 | linkPizza-Manager | 39 | 46 | 23 | 700 | Exception output is not escaped | ||
| #2395 | Logo Showcase – Logo Slider, Carousel & Sponsors Gallery | 39 | 535 | 98 | 1k+ | Text Domain Mismatch | ||
| #2396 | Logo Showcase – Carousel, Slider, Grid & List for WordPress | 39 | 123 | 160 | 400 | Unsafe printing function | ||
| #2397 | Magazine Blocks – Blog Designer, Magazine & Newspaper Website Builder, Page Builder with Posts Blocks, Post Grid | 39 | 65 | 72 | 6k+ | block api version too low | ||
| #2398 | MailChimp Add-On for FormCraft | 39 | 56 | 29 | 800 | curl curl setopt | ||
| #2399 | Kikote – Location Picker at Checkout & Google Address AutoFill Plugin for WooCommerce | 39 | 76 | 64 | 1k+ | Missing Translators Comment | ||
| #2400 | Maps for WP | 39 | 169 | 73 | 400 | Output is not escaped |