WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedVariableFound
Non-prefixed global variable
The plugin defines a global variable without a plugin-specific prefix.
Why It Shows Up
WordPress loads many plugins in the same PHP runtime. Plugin Check found a global symbol or hook name that is not clearly namespaced to this plugin.
Why It Matters
Unprefixed globals can collide with WordPress core, themes, or other plugins, causing fatal errors, overwritten values, or handlers running in the wrong context.
How to Fix
- Choose a short, unique prefix or namespace based on the plugin slug or vendor name.
- Rename the global variable so it cannot collide with code from another plugin.
- For public hooks, document the final hook name and keep it stable after release.
References
Affected Plugins
| Rank | Plugin | Score | Errors | Warnings | Installs | Added | Updated | Top Issue |
|---|---|---|---|---|---|---|---|---|
| #2651 | PayU CommercePro Plugin | 37 | 218 | 7k+ | error log error log | |||
| #2652 | GoHero Store Customizer for WooCommerce | 37 | 75 | 53 | 600 | Unsafe printing function | ||
| #2653 | Phoenix Media Rename | 37 | 180 | 104 | 50k+ | Output is not escaped | ||
| #2654 | POEditor | 37 | 78 | 140 | 500 | Output is not escaped | ||
| #2655 | Product Image Hover Effects WOOC – WPSHARE247 | 37 | 161 | 94 | 800 | Output is not escaped | ||
| #2656 | Product page shipping calculator for WooCommerce | 37 | 217 | 117 | 1k+ | Text Domain Mismatch | ||
| #2657 | PublishPress Statuses – Custom Post Status and Workflow | 37 | 231 | 78 | 1k+ | Missing Arg Domain | ||
| #2658 | Quantities and Units for WooCommerce | 37 | 133 | 118 | 1k+ | Output is not escaped | ||
| #2659 | Quentn WP | 37 | 4 | 251 | 500 | Nonce verification recommended | ||
| #2660 | rapidmail: Newsletter & E-Mail Marketing for WooCommerce | 37 | 79 | 47 | 400 | Text Domain Mismatch | ||
| #2661 | Recent Posts Widget With Thumbnails | 37 | 222 | 46 | 100k+ | Output is not escaped | ||
| #2662 | resmio button & widget | 37 | 99 | 36 | 400 | Text Domain Mismatch | ||
| #2663 | Rich Table of Contents | 37 | 262 | 57 | 20k+ | Output is not escaped | ||
| #2664 | Robots & Sitemap | 37 | 199 | 28 | 500 | Text Domain Mismatch | ||
| #2665 | Ryviu – Review Importer & Product Reviews | 37 | 72 | 95 | 1k+ | Output is not escaped | ||
| #2666 | SB RSS feed plus | 37 | 172 | 24 | 1k+ | Output is not escaped | ||
| #2667 | Send PDF for Contact Form 7 | 37 | 22 | 308 | 9k+ | Non-prefixed global variable | ||
| #2668 | SendWP | 37 | 47 | 42 | 10k+ | Output is not escaped | ||
| #2669 | Sensei LMS Certificates | 37 | 97 | 362 | 4k+ | Non-prefixed global variable | ||
| #2670 | Shortcoder — Create Shortcodes for Anything | 37 | 25 | 70 | 100k+ | Non-prefixed global variable | ||
| #2671 | Weaver Show Sliders | 37 | 177 | 132 | 900 | Text Domain Mismatch | ||
| #2672 | Simple Countdown Timer | 37 | 110 | 113 | 1k+ | Missing Arg Domain | ||
| #2673 | Simple Image XML Sitemap | 37 | 119 | 16 | 1k+ | Output is not escaped | ||
| #2674 | Lightbox slider – Responsive Lightbox Gallery | 37 | 36 | 173 | 3k+ | Non-prefixed global variable | ||
| #2675 | Site Offline Or Coming Soon Or Maintenance Mode | 37 | 127 | 138 | 30k+ | Unsafe printing function | ||
| #2676 | Slider Pro | 37 | 78 | 260 | 1k+ | Non-prefixed global variable | ||
| #2677 | Smart Send Logistics | 37 | 92 | 81 | 400 | Output is not escaped | ||
| #2678 | Social Comments | 37 | 59 | 32 | 400 | Output is not escaped | ||
| #2679 | StagTools | 37 | 476 | 53 | 1k+ | Text Domain Mismatch | ||
| #2680 | Website Pop-up Builder by BDOW! (formerly Sumo): Pop-ups + forms for email opt-ins and lead generation | 37 | 42 | 33 | 10k+ | Output is not escaped | ||
| #2681 | Super Simple Site Offline | 37 | 115 | 59 | 6k+ | Text Domain Mismatch | ||
| #2682 | Swifty Bar, sticky bar by WPGens | 37 | 112 | 81 | 400 | Output is not escaped | ||
| #2683 | TelSender – Сontact form 7, Events, Wpforms, ninja forms and woocommerce to telegram bot | 37 | 48 | 40 | 6k+ | Unsafe printing function | ||
| #2684 | Theme Builder For Elementor | 37 | 477 | 28 | 2k+ | Text Domain Mismatch | ||
| #2685 | Tilopay | 37 | 35 | 130 | 1k+ | Nonce verification recommended | ||
| #2686 | Tracking Code Manager | 37 | 55 | 42 | 90k+ | Output is not escaped | ||
| #2687 | Tracking Script Manager | 37 | 82 | 57 | 2k+ | Non Singular String Literal Domain | ||
| #2688 | Tourfic Toolkit | 37 | 67 | 165 | 1k+ | Post Not In exclude | ||
| #2689 | Ultimate Tag Cloud Widget | 37 | 715 | 16 | 4k+ | Output is not escaped | ||
| #2690 | User Meta Display | 37 | 78 | 74 | 500 | Output is not escaped | ||
| #2691 | ValidateCertify Free | 37 | 123 | 97 | 1k+ | Text Domain Mismatch | ||
| #2692 | ViaBill – WooCommerce | 37 | 437 | 86 | 500 | Text Domain Mismatch | ||
| #2693 | Virtual Classroom – Video Conferencing & Online Meeting with BigBlueButton | 37 | 45 | 140 | 400 | Nonce verification recommended | ||
| #2694 | Featured Video for WordPress – VideographyWP | 37 | 287 | 93 | 1k+ | Unsafe printing function | ||
| #2695 | Innovs WPBakery Visual Composer WHMCS Elements | 37 | 154 | 24 | 2k+ | Text Domain Mismatch | ||
| #2696 | Weather Atlas Widget | 37 | 630 | 111 | 8k+ | Output is not escaped | ||
| #2697 | Orders Tracking for WooCommerce | 37 | 7 | 312 | 10k+ | Request data is not unslashed | ||
| #2698 | Módulo PagSeguro | 37 | 90 | 46 | 1k+ | Unsafe printing function | ||
| #2699 | Variation Swatches for WooCommerce | 37 | 92 | 103 | 10k+ | Output is not escaped | ||
| #2700 | Xendit Payment | 37 | 3 | 197 | 3k+ | Missing nonce verification |