PluginScore

WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedVariableFound

Non-prefixed global variable

The plugin defines a global variable without a plugin-specific prefix.

medium weight

Why It Shows Up

WordPress loads many plugins in the same PHP runtime. Plugin Check found a global symbol or hook name that is not clearly namespaced to this plugin.

Why It Matters

Unprefixed globals can collide with WordPress core, themes, or other plugins, causing fatal errors, overwritten values, or handlers running in the wrong context.

How to Fix

  • Choose a short, unique prefix or namespace based on the plugin slug or vendor name.
  • Rename the global variable so it cannot collide with code from another plugin.
  • For public hooks, document the final hook name and keep it stable after release.

References

WordPress Coding Standards

Affected Plugins

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#2051AnsPress – Question and answer35227783k+Non-prefixed function
#2052Antideo Email Validator353898800Missing nonce verification
#2053Tuskcode Map Pro for Bing Maps3559359600Direct Query
#2054Aquila Admin Theme351513293k+Non-prefixed global variable
#2055Aurora Heatmap35141820k+Non-prefixed global variable
#2056Author Box WP Lens3516949900Unsafe printing function
#2057Automatic Internal Links for SEO by Pagup35301661k+error log error log
#2058Avif Express3526167400Input is not validated
#2059BackWPup – WordPress Backup & Restore Plugin3511779500k+Non-prefixed global variable
#2060BASE Item List35413800error log error log
#2061bbPress Notify (No-Spam)3562662k+wp function not compatible with requires wp
#2062Before After Image Comparison Slider for WPBakery Page Builder3558591k+Output is not escaped
#2063belingoGeo351361331k+Output is not escaped
#2064Better Recent Comments35127292k+Text Domain Mismatch
#2065Bicycles by falbar3542665600Output is not escaped
#2066Lord of the Files: Enhanced Upload Security3562421k+Non-prefixed global variable
#2067Block Comment Spam Bots353117800Output is not escaped
#2068Block Manager3533264k+Text Domain Mismatch
#2069BlockArt Blocks – Gutenberg Blocks, Page Builder Blocks ,WordPress Block Plugin, Sections & Template Library35561610k+block api version too low
#2070Blogsqode – Blog Layouts and News Post Design3543063400Text Domain Mismatch
#2071BlossomThemes Toolkit353475230k+Output is not escaped
#2072Bluehost Site Migrator3511184k+Missing direct file access protection
#2073Tooltipy (tooltips for WP)353701251k+Text Domain Mismatch
#2074bookingflow Smoobu for WP3510712400Text Domain Mismatch
#2075Bootstrap for Contact Form 735357310k+Nonce verification recommended
#2076BORICA Payments by BORICA AD35537196500Text Domain Mismatch
#2077BuddyPress Activity Filter352566400Nonce verification recommended
#2078Wbcom Designs – BuddyPress Activity Social Share3529327400Text Domain Mismatch
#2079Registration Options for BuddyPress35471321k+Non-prefixed function
#2080Brightcove Video Connect35580235600Text Domain Mismatch
#2081BTCPay Server – Accept Bitcoin payments in WooCommerce3548861k+Missing nonce verification
#2082Business Hours Indicator351391068k+Alternative PHP tag found
#2083Buying Buddy IDX CRM – Real Estate MLS Plugin3571240500Request data is not unslashed
#2084CatFolders – WordPress Media Library Folders & Categories3535766k+Direct Query
#2085CF7 Spreadsheets3510062400Text Domain Mismatch
#2086CF7 Submissions – Securely Store Contact Form 7 Data and Attachments, Reply to the Sender and more35161192k+Non-prefixed global variable
#2087Change Quantity on Checkout for WooCommerce35270324k+wp function not compatible with requires wp
#2088ChatHelp – Click to Chat Button, WooCommerce Chat to Order & Floating Chat Form35311881k+Non-prefixed global variable
#2089Payment Gateway Based Fees and Discounts for WooCommerce35246830k+Non-prefixed hook name
#2090CHP Ads Block Detector3510835900Output is not escaped
#2091CiviCRM Admin Utilities3519871k+Non-prefixed hook name
#2092CiviCRM Profile Sync3531140600Non-prefixed global variable
#2093Cloudflare352885200k+Non-prefixed namespace
#2094CM E-Mail Blacklist – Simple email filtering for safer registration35269205800Output is not escaped
#2095Conditional Menus35922860k+Text Domain Mismatch
#2096Content Mask35503501k+Non-prefixed global variable
#2097Kit (formerly ConvertKit) for WooCommerce35213184k+Text Domain Mismatch
#2098EasyTest – Simplify A/B Testing3597610k+Non-prefixed global variable
#2099GDPR Cookie Consent Notice Box3546171k+Output is not escaped
#2100Cookie Information – Cookie Banner with Consent Mode v235185282k+Output is not escaped