WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedVariableFound
Non-prefixed global variable
The plugin defines a global variable without a plugin-specific prefix.
Why It Shows Up
WordPress loads many plugins in the same PHP runtime. Plugin Check found a global symbol or hook name that is not clearly namespaced to this plugin.
Why It Matters
Unprefixed globals can collide with WordPress core, themes, or other plugins, causing fatal errors, overwritten values, or handlers running in the wrong context.
How to Fix
- Choose a short, unique prefix or namespace based on the plugin slug or vendor name.
- Rename the global variable so it cannot collide with code from another plugin.
- For public hooks, document the final hook name and keep it stable after release.
References
Affected Plugins
| Rank | Plugin | Score | Errors | Warnings | Installs | Added | Updated | Top Issue |
|---|---|---|---|---|---|---|---|---|
| #601 | CRM Perks Forms – WordPress Form Builder | 24 | 819 | 577 | 1k+ | Output is not escaped | ||
| #602 | Custom CSS | 24 | 703 | 657 | 1k+ | Output is not escaped | ||
| #603 | Custom Twitter Feeds – A Tweets Widget or X Feed Widget | 24 | 446 | 922 | 100k+ | Output is not escaped | ||
| #604 | WP Customer Area | 24 | 3,306 | 941 | 10k+ | Text Domain Mismatch | ||
| #605 | Customer Reviews for WooCommerce | 24 | 2,202 | 2,445 | 80k+ | Output is not escaped | ||
| #606 | Defender Security – Malware Scanner, Login Security & Firewall | 24 | 547 | 594 | 80k+ | Non-prefixed namespace | ||
| #607 | WP Comment Cleaner – Delete All Comments, Disable Comments, Bulk Delete & Remove Comments | 24 | 587 | 1,430 | 20k+ | Non-prefixed global variable | ||
| #608 | WP Delicious – Recipe Plugin for Food Bloggers (formerly Delicious Recipes) | 24 | 845 | 2,643 | 4k+ | Non-prefixed global variable | ||
| #609 | Democracy Poll | 24 | 387 | 436 | 7k+ | Short PHP open tag found | ||
| #610 | Deployer for Git | 24 | 541 | 1,336 | 500 | Non-prefixed global variable | ||
| #611 | DFX Automatic Role Changer for WooCommerce | 24 | 597 | 1,308 | 400 | Non-prefixed global variable | ||
| #612 | Digital License Manager | 24 | 295 | 670 | 800 | Non-prefixed hook name | ||
| #613 | Double Opt-In for Contact Form 7 – Secure, GDPR-Compliant Email Verification | 24 | 233 | 441 | 1k+ | Non-prefixed hook name | ||
| #614 | Doubly – Cross Domain Copy Paste for WordPress | 24 | 252 | 55 | 10k+ | Output is not escaped | ||
| #615 | Drop Shadow Boxes | 24 | 642 | 1,290 | 4k+ | Non-prefixed global variable | ||
| #616 | DSGVO All in one for WP | 24 | 75 | 1,637 | 20k+ | Non-prefixed global variable | ||
| #617 | Dynamic Widgets | 24 | 631 | 812 | 10k+ | Non-prefixed global variable | ||
| #618 | Easy Form Builder by WhiteStudio — Drag & Drop Form Builder | 24 | 194 | 381 | 1k+ | Nonce verification recommended | ||
| #619 | Easy Invoice – Invoice Generator, PDF Quotes & Payments | 24 | 1,366 | 2,013 | 500 | Non-prefixed global variable | ||
| #620 | Easy Modal | 24 | 564 | 299 | 7k+ | Unsafe printing function | ||
| #621 | E-cab Taxi Booking Manager for Woocommerce | 24 | 356 | 1,462 | 2k+ | Non-prefixed global variable | ||
| #622 | eCommerce Product Catalog Plugin for WordPress | 24 | 621 | 3,177 | 7k+ | Non-prefixed function | ||
| #623 | ELEX WooCommerce Request a Quote | 24 | 398 | 266 | 2k+ | Request data is not unslashed | ||
| #624 | Email Subscribers & Newsletters – Email Marketing, Post Notifications & Newsletter Plugin for WordPress | 24 | 652 | 1,495 | 60k+ | Non-prefixed hook name | ||
| #625 | EmbedPress – PDF Embedder, 3D PDF FlipBook, Google Reviews, YouTube Videos, Upload & Embed PDF documents | 24 | 711 | 1,588 | 100k+ | Output is not escaped | ||
| #626 | Enable Media Replace | 24 | 212 | 276 | 600k+ | Output is not escaped | ||
| #627 | Conversios: Google Analytics (GA4), Google Ads, Conversion and Analytics Tracking for Multi-Channels | 24 | 112 | 1,497 | 10k+ | Non-prefixed global variable | ||
| #628 | Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns | 24 | 120 | 684 | 200k+ | Non-prefixed global variable | ||
| #629 | Event Tickets and Registration | 24 | 3,409 | 4,217 | 90k+ | Non-prefixed global variable | ||
| #630 | Etsy Integration For WooCommerce | 24 | 1,246 | 4,643 | 900 | Non-prefixed global variable | ||
| #631 | F12 Profiler | 24 | 282 | 451 | 500 | Direct Query | ||
| #632 | Fast Velocity Minify | 24 | 282 | 256 | 40k+ | Unsafe printing function | ||
| #633 | Fattura24 | 24 | 312 | 333 | 400 | Output is not escaped | ||
| #634 | Featured Image from URL (FIFU) | 24 | 1,654 | 418 | 70k+ | Non Singular String Literal Domain | ||
| #635 | Featured Post with thumbnail | 24 | 158 | 122 | 400 | Output is not escaped | ||
| #636 | FeedWordPress | 24 | 496 | 319 | 9k+ | Missing Arg Domain | ||
| #637 | FileBird – WordPress Media Library Folders & File Manager | 24 | 239 | 377 | 200k+ | wp function not compatible with requires wp | ||
| #638 | Fix Alt Text | 24 | 544 | 346 | 1k+ | Non Singular String Literal Domain | ||
| #639 | FluentCRM – Email Newsletter, Automation, Email Marketing, Email Campaigns, Optins, Leads, and CRM Solution | 24 | 193 | 753 | 80k+ | Direct Query | ||
| #640 | Food Store – Online Food Delivery & Pickup | 24 | 862 | 1,941 | 1k+ | Non-prefixed global variable | ||
| #641 | Football Pool | 24 | 1,085 | 733 | 1k+ | Output is not escaped | ||
| #642 | Force Sell for WooCommerce | 24 | 697 | 455 | 600 | Text Domain Mismatch | ||
| #643 | Formidable PRO2PDF | 24 | 218 | 477 | 1k+ | Non-prefixed global variable | ||
| #644 | Forminator Forms – Contact Form, Payment Form & Custom Form Builder | 24 | 826 | 1,314 | 600k+ | Non-prefixed global variable | ||
| #645 | Fuse Social Floating Sidebar | 24 | 1,838 | 1,578 | 10k+ | Non-prefixed global variable | ||
| #646 | FV Simpler SEO | 24 | 766 | 308 | 2k+ | Text Domain Mismatch | ||
| #647 | FV Player 8 | 24 | 323 | 1,383 | 1k+ | Non-prefixed function | ||
| #648 | Photo Gallery – Responsive Image Galleries by Supsystic | 24 | 240 | 91 | 20k+ | Text Domain Mismatch | ||
| #649 | Gallery by BestWebSoft – Customizable Image and Photo Galleries for WordPress | 24 | 536 | 324 | 10k+ | Text Domain Mismatch | ||
| #650 | GD Mail Queue | 24 | 502 | 582 | 700 | Output is not escaped |