PluginScore

WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedVariableFound

Non-prefixed global variable

The plugin defines a global variable without a plugin-specific prefix.

medium weight

Why It Shows Up

WordPress loads many plugins in the same PHP runtime. Plugin Check found a global symbol or hook name that is not clearly namespaced to this plugin.

Why It Matters

Unprefixed globals can collide with WordPress core, themes, or other plugins, causing fatal errors, overwritten values, or handlers running in the wrong context.

How to Fix

  • Choose a short, unique prefix or namespace based on the plugin slug or vendor name.
  • Rename the global variable so it cannot collide with code from another plugin.
  • For public hooks, document the final hook name and keep it stable after release.

References

WordPress Coding Standards

Affected Plugins

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#1BulletProof Security05,0484,94920k+Output is not escaped
#2Live Shopping & Shoppable Videos For WooCommerce079174400Non-prefixed global variable
#3Plugin Check (PCP)012814010k+Non-prefixed global variable
#4Themify Builder95,3342,1715k+Text Domain Mismatch
#5JetBackup – Backup, Restore & Migrate101,567156200k+Exception output is not escaped
#6404 Solution155821,53210k+Non-prefixed class
#7Easy WP SMTP – WordPress SMTP and Email Logs: Gmail SMTP, Office 365, Outlook, Custom SMTP, and more1545166500k+Database parameter is not escaped
#8Visual Composer Website Builder168232040k+Non-prefixed global variable
#9MDTF – Meta Data and Taxonomies Filter161,5501,9561k+Non-prefixed global variable
#10AnyComment174454495k+Output is not escaped
#11RestroPress – Online Food Ordering System175343,2071k+Non-prefixed global variable
#12Efí Bank17886553400Exception output is not escaped
#13Shopping Cart & eCommerce Store178,03817,4643k+Non-prefixed global variable
#14wpForo Forum174,3063,02620k+Unsafe printing function
#15WPtouch – Make your WordPress Website Mobile-Friendly171,46632550k+Text Domain Mismatch
#16Administrator Z182,061799400Output is not escaped
#17JetFormBuilder — Dynamic Blocks Form Builder182,1201,61580k+Text Domain Mismatch
#18Pagopar – WooCommerce Gateway185301,215400Non-prefixed global variable
#19Property Hive181,9576,0273k+Missing nonce verification
#20WPPizza – A Restaurant Plugin184,6892,7031k+Text Domain Mismatch
#21Block Slider – Responsive Image Slider, Video Slider & Post Slider195551,2913k+Non-prefixed global variable
#22Advanced File Manager – Ultimate File Manager for WordPress And Document Library Solution191,227892100k+Exception output is not escaped
#23GiveWP – Donation Plugin and Fundraising Platform193,4133,569100k+Output is not escaped
#24Go Fetch Jobs (for WP Job Manager)191,4101,741700Non-prefixed global variable
#25Leaflet Maps Marker (Google Maps, OpenStreetMap, Bing Maps)193,2753,2289k+Output is not escaped
#26Matomo Analytics – Powerful, Privacy-First Insights for WordPress191,975892100k+Exception output is not escaped
#27Netgsm193343081k+Setting is missing a sanitization callback
#28Verified Reviews (Avis Vérifiés)196711,136700Non-prefixed global variable
#29Razorpay Payment Button Plugin19486982k+Exception output is not escaped
#30Really Simple Security – Simple and Performant Security (formerly Really Simple SSL)195313783m+Missing Translators Comment
#31Membership Plugin – Kadence Memberships195,0853,0039k+Text Domain Mismatch
#32Scrollsequence – Cinematic Scroll Image Animation Plugin198781,5283k+Non-prefixed global variable
#33SendPress Newsletters192,2931,4221k+Output is not escaped
#34SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments195341,16180k+Non-prefixed global variable
#35WP Email Template193443452k+Exception output is not escaped
#36WP Import Export Lite1973797940k+Non-prefixed global variable
#37WP Directory Kit191,5022,6412k+Non-prefixed global variable
#38WPOSS阿里云对象存储19269315900Non-prefixed namespace
#39WPQiNiu七牛云对象存储19138612400Non-prefixed global variable
#40AweBooking – Hotel Booking System203095141k+Non-prefixed global variable
#41Brizy – Page Builder2058572670k+Output is not escaped
#42Broadstreet20434273800Output is not escaped
#43Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC)207362,112900Non-prefixed global variable
#44Cost Calculator Builder2032376620k+Non-prefixed global variable
#45SysBasics Customize My Account for WooCommerce – Live My Account Customizer207439118k+Non-prefixed global variable
#46Download Monitor204231,36780k+Non-prefixed hook name
#47Ebook Store204051,065700Non-prefixed global variable
#48Event Espresso – Event Registration & Ticketing Sales2012,6982,135600Text Domain Mismatch
#49Event Organiser201,10454420k+Text Domain Mismatch
#50EventPrime – Events Calendar, Bookings, Tickets & AI208464,2247k+Non-prefixed global variable