PluginScore

WordPress.PHP.DevelopmentFunctions.error_log_debug_backtrace

error log debug backtrace

Development or debugging behavior appears in code that may run in production.

medium weight

Why It Shows Up

The scan found logging, debugging, path disclosure, `phpinfo()`, error-reporting changes, or similar development-oriented functions.

Why It Matters

Debug output can leak paths, configuration, request data, stack details, or sensitive runtime information.

How to Fix

  • Remove temporary debugging calls before release.
  • If logging is required, guard it with `WP_DEBUG` or a plugin setting intended for administrators.
  • Never show debug details to unauthenticated visitors or normal front-end users.

Affected Plugins

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#1RestroPress – Online Food Ordering System175243,1551k+Non-prefixed global variable
#2Podlove Podcast Publisher182,3541,4333k+Output is not escaped
#3WPPizza – A Restaurant Plugin184,6892,7031k+Text Domain Mismatch
#4Advanced File Manager – Ultimate File Manager for WordPress And Document Library Solution191,218901100k+Exception output is not escaped
#5Matomo Analytics – Powerful, Privacy-First Insights for WordPress191,900877100k+Exception output is not escaped
#6Really Simple Security – Simple and Performant Security (formerly Really Simple SSL)195363793m+Missing Translators Comment
#7Membership Plugin – Kadence Memberships195,0832,9829k+Text Domain Mismatch
#8SendPress Newsletters192,2931,4221k+Output is not escaped
#9WP Email Template193443452k+Exception output is not escaped
#10WP Import Export Lite1973797940k+Non-prefixed global variable
#11WPJAM Basic193253464k+Output is not escaped
#12Broadstreet20434273700Output is not escaped
#13Event Espresso – Event Registration & Ticketing Sales2012,6982,135600Text Domain Mismatch
#14GiveWP – Donation Plugin and Fundraising Platform203,4103,554100k+Output is not escaped
#15Microthemer Lite – Visual Editor to Customize CSS201,0041,69910k+Non-prefixed global variable
#16Nimble Page Builder201,5911,68430k+Missing Arg Domain
#17Pix por Piggly (para Woocommerce)205471954k+Exception output is not escaped
#18Robin Image Optimizer – Unlimited Image Optimization, WebP & AVIF20556543100k+Output is not escaped
#19Razorpay for WooCommerce20975859100k+Non-prefixed function
#20WP Compress – Instant Performance & Speed Optimization204,0463,50210k+Non Singular String Literal Domain
#21WP Minify Fix20306380800Output is not escaped
#22Premium Packages – Sell Digital Products Securely202,0172,1832k+Non-prefixed global variable
#23Backup Migration219811,09380k+Non-prefixed global variable
#24Kadence Security – Password, Two Factor Authentication, and Brute Force Protection211,060957700k+Missing Translators Comment
#25Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots211,6212,03810k+Direct Query
#26SMS Extension for Contact Form 7217201,387400Non-prefixed global variable
#27Duplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More212,5721,2771m+Output is not escaped
#28Filter Everything — WordPress & WooCommerce Filters2164393350k+Non-prefixed global variable
#29Five Star Restaurant Reservations – WordPress Booking Plugin211,1011,15910k+Output is not escaped
#30ThirstyAffiliates – Affiliate Links, Link Branding, Link Tracking & Marketing Plugin2119066030k+Non-prefixed global variable
#31Trace My IP – Visitor IP Tracker, Stats Analytics & Page Views Counter with Email Alerts218713381k+wp function not compatible with requires wp
#32URL Shortify – Simple and Easy URL Shortener211,5112,66910k+Non-prefixed global variable
#33Buckaroo Woocommerce Payments Plugin216383212k+Exception output is not escaped
#34Paysera Payment Gateway for WooCommerce211,8681967k+Exception output is not escaped
#35Pay For Post with WooCommerce219581,4771k+Non-prefixed global variable
#36Wordfence Security – Firewall, Malware Scan, and Login Security211,8183,2365m+Output is not escaped
#37WP-Lister Lite for eBay216,7015,1322k+Output is not escaped
#38WP phpMyAdmin214,5286,43540k+Missing Arg Domain
#39wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin211,8121,43270k+Output is not escaped
#40Better WordPress Minify224124847k+Non Singular String Literal Domain
#41Captcha by BestWebSoft – Advanced Spam Protection, Math & OCR-Friendly Captcha for Site Forms2249329510k+Text Domain Mismatch
#42Clearfy Cache – WordPress optimization plugin, Minify HTML, CSS & JS, Defer222,8541,26950k+Text Domain Mismatch
#43Code Profiler – WordPress Performance Profiling and Debugging Made Easy222654008k+Non-prefixed global variable
#44Dynamic QR Code – generator222382085k+Missing direct file access protection
#45Ebook Store224101,054700Non-prefixed global variable
#46Five Star Restaurant Menu and Food Ordering227546105k+Output is not escaped
#47LearnPress – WordPress LMS Plugin for Create and Sell Online Courses222,4333,59470k+Non-prefixed global variable
#48Mailchimp for WooCommerce22524658200k+Non-prefixed global variable
#49Search Atlas SEO – Premier SEO Plugin for One-Click WP Publishing & Integrated AI Optimization221,3062,8188k+Output is not escaped
#50Molongui Authorship – Author Boxes, Guest Authors & Co-Authors for WordPress229191,23010k+Output is not escaped