WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedVariableFound

Non-prefixed global variable

The plugin defines a global variable without a plugin-specific prefix.

medium weight

Why It Shows Up

WordPress loads many plugins in the same PHP runtime. Plugin Check found a global symbol or hook name that is not clearly namespaced to this plugin.

Why It Matters

Unprefixed globals can collide with WordPress core, themes, or other plugins, causing fatal errors, overwritten values, or handlers running in the wrong context.

How to Fix

  • Choose a short, unique prefix or namespace based on the plugin slug or vendor name.
  • Rename the global variable so it cannot collide with code from another plugin.
  • For public hooks, document the final hook name and keep it stable after release.

Affected Plugins

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#201Events Manager – Calendar, Bookings, Tickets, and more!224,7135,64770k+Output is not escaped
#202Falang multilanguage for WordPress227167691k+Output is not escaped
#203File Manager Pro – Filester22565391100k+Request data is not unslashed
#204Finale Lite – Sales Countdown Timer & Discount for WooCommerce221,0314514k+Output is not escaped
#205FireBox Popups – Increase Sales and Grow Your Email List221538127k+Non-prefixed global variable
#206Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder22409236700k+Text Domain Mismatch
#207Notification Bar, Announcement and Cookie Notice WordPress Plugin – FooBar221,3211,3713k+Non-prefixed global variable
#208Five Star Restaurant Menu and Food Ordering227526095k+Output is not escaped
#209FunnelKit Payment Gateway for Stripe WooCommerce2224432120k+Input is not sanitized
#210GeoDirectory – WP Business Directory Plugin and Classified Listings Directory224,4663,97210k+Output is not escaped
#211Gutenberg22628342300k+Missing direct file access protection
#212Happyforms – Form Builder for WordPress: Drag & Drop Contact Forms, Surveys, Payments & Multipurpose Forms221,03772220k+Unsafe printing function
#213HeadSpace2 SEO229403603k+Text Domain Mismatch
#214Hesabfa Accounting22467718400Text Domain Mismatch
#215Heureka22557254400Exception output is not escaped
#216History Log by click5226751,290400Direct Query
#217Csomagpontok és Címkék WooCommerce-hez222,0017697k+Text Domain Mismatch
#218IMPress for IDX Broker221,0856366k+Text Domain Mismatch
#219Insert or Embed Articulate Content into WordPress226591,4372k+Non-prefixed global variable
#220Számlázz.hu integráció WooCommerce-hez221,1694607k+Text Domain Mismatch
#221The Innovative Form Builder – IvyForms22713250400Exception output is not escaped
#222InfiniteWP Client222,2861,812200k+Exception output is not escaped
#223Import WP – Export and Import CSV and XML files to WordPress225803304k+Exception output is not escaped
#224JCC Payment Gateway for Woocommerce222,2731,136600Text Domain Mismatch
#225Jim Soft Swiss QR Invoice22263392400Non-prefixed global variable
#226LearnPress – WordPress LMS Plugin for Create and Sell Online Courses222,3463,34170k+Non-prefixed global variable
#227Leyka222533,4452k+Request data is not unslashed
#228Custom Login Page Customizer – Login Designer225881,45530k+Non-prefixed global variable
#229Mail Baby SMTP22385699600SQL query is not prepared
#230MailOptin – Popup, Optin Forms & Email Newsletters for Mailchimp, HubSpot, AWeber Etc.222,6192,45310k+Output is not escaped
#231MarketKing — Ultimate WooCommerce Multivendor Marketplace Solution221,1311,844800Non-prefixed global variable
#232Slider, Gallery, and Carousel by MetaSlider – Image Slider, Video Slider22207323500k+Non-prefixed global variable
#233Modula Image Gallery – Photo Grid & Video Gallery22474436100k+Text Domain Mismatch
#234Molongui Authorship – Author Boxes, Guest Authors & Co-Authors for WordPress229191,23010k+Output is not escaped
#235Moloni229023562k+Missing Arg Domain
#236Motors – Car Dealership & Classified Listings Plugin225,3405,9589k+Text Domain Mismatch
#237myCred Toolkit with AI Assistant – Scale Your Loyalty & Gamification Rewards With Integrations221,5881,172400Output is not escaped
#238Newsletters222,9682,2482k+Text Domain Mismatch
#239NinjaFirewall (WP Edition) – Advanced Security Plugin and Firewall221,2662,059100k+Non-prefixed global variable
#240NinjaScanner – Virus & Malware scan2259655130k+Non-prefixed global variable
#241WP OAuth Server (OAuth Authentication)221893473k+Non-prefixed function
#242PagBank / PagSeguro Connect para WooCommerce225047434k+Non-prefixed global variable
#243PAYCOMET for WooCommerce221,2064232k+Text Domain Mismatch
#244PDF Builder for WPForms22321266900SQL query is not prepared
#245Smart Popup by Supsystic223,17250310k+Non Singular String Literal Domain
#246Post SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App221,5812,326300k+Non-prefixed global variable
#247Prime Mover – Migrate WordPress Website & Backups221,3261,60010k+Non-prefixed global variable
#248Product Catalog Feed by PixelYourSite225813578k+Output is not escaped
#249Pronamic Pay222581,0772k+Non-prefixed global variable
#250PageSpeed Ninja – Cache, Minify, Defer CSS JavaScript, Critical CSS, Optimize Images, Convert WebP229844075k+Unsafe printing function