PluginScore

WordPress.PHP.DevelopmentFunctions.error_log_debug_backtrace

error log debug backtrace

Development or debugging behavior appears in code that may run in production.

medium weight

Why It Shows Up

The scan found logging, debugging, path disclosure, `phpinfo()`, error-reporting changes, or similar development-oriented functions.

Why It Matters

Debug output can leak paths, configuration, request data, stack details, or sensitive runtime information.

How to Fix

  • Remove temporary debugging calls before release.
  • If logging is required, guard it with `WP_DEBUG` or a plugin setting intended for administrators.
  • Never show debug details to unauthenticated visitors or normal front-end users.

Affected Plugins

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#1404 Solution155821,53210k+Non-prefixed class
#2RestroPress – Online Food Ordering System175353,2341k+Non-prefixed global variable
#3Advanced File Manager – Ultimate File Manager for WordPress And Document Library Solution181,229923100k+Exception output is not escaped
#4WPPizza – A Restaurant Plugin184,6892,7031k+Text Domain Mismatch
#5GiveWP – Donation Plugin and Fundraising Platform193,4223,570100k+Output is not escaped
#6Matomo Analytics – Powerful, Privacy-First Insights for WordPress191,993892100k+Exception output is not escaped
#7Really Simple Security – Simple and Performant Security (formerly Really Simple SSL)195303753m+Missing Translators Comment
#8SendPress Newsletters192,2931,4221k+Output is not escaped
#9WP Email Template193443452k+Exception output is not escaped
#10Broadstreet20434273800Output is not escaped
#11Duplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More202,8781,9881m+Non-prefixed global variable
#12Microthemer Lite – Visual Editor to Customize CSS201,0041,69910k+Non-prefixed global variable
#13Nimble Page Builder201,5911,68430k+Missing Arg Domain
#14Pix por Piggly (para Woocommerce)205471954k+Exception output is not escaped
#15Membership Plugin – Kadence Memberships205,0893,0059k+Text Domain Mismatch
#16Robin Image Optimizer – Unlimited Image Optimization, WebP & AVIF20556543100k+Output is not escaped
#17WP Compress – Instant Performance & Speed Optimization204,2923,69110k+Non Singular String Literal Domain
#18WP Minify Fix20306380800Output is not escaped
#19Premium Packages – Sell Digital Products Securely202,0412,2992k+Non-prefixed global variable
#20Backup Migration219991,08180k+Non-prefixed global variable
#21Kadence Security – Password, Two Factor Authentication, and Brute Force Protection211,060959700k+Missing Translators Comment
#22Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots211,6742,18010k+Direct Query
#23Event Espresso – Event Registration & Ticketing Sales2112,7102,136600Text Domain Mismatch
#24Filter Everything — WordPress & WooCommerce Filters2165195250k+Non-prefixed global variable
#25Five Star Restaurant Reservations – WordPress Booking Plugin211,1011,15910k+Output is not escaped
#26ThirstyAffiliates – Affiliate Links, Link Branding, Link Tracking & Marketing Plugin2119066030k+Non-prefixed global variable
#27Trace My IP – Visitor IP Tracker, Stats Analytics & Page Views Counter with Email Alerts218713381k+wp function not compatible with requires wp
#28URL Shortify – Simple and Easy URL Shortener211,5092,73710k+Non-prefixed global variable
#29Buckaroo Payments for WooCommerce216943512k+Exception output is not escaped
#30Razorpay for WooCommerce21980864100k+Non-prefixed function
#31Pay For Post with WooCommerce219581,4771k+Non-prefixed global variable
#32Wordfence Security – Firewall, Malware Scan, and Login Security211,8933,2925m+Output is not escaped
#33WP Import Export Lite2155633140k+Exception output is not escaped
#34WP-Lister Lite for eBay216,7015,1402k+Output is not escaped
#35WP phpMyAdmin214,5286,43540k+Missing Arg Domain
#36wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin211,8291,53460k+Output is not escaped
#37Better WordPress Minify224124847k+Non Singular String Literal Domain
#38Captcha by BestWebSoft – Advanced Spam Protection, Math & OCR-Friendly Captcha for Site Forms2249329510k+Text Domain Mismatch
#39Church Admin221,5604,215900Direct Query
#40Clearfy Cache – WordPress optimization plugin, Minify HTML, CSS & JS, Defer222,8541,26940k+Text Domain Mismatch
#41Code Profiler – WordPress Performance Profiling and Debugging Made Easy222604018k+Non-prefixed global variable
#42Dynamic QR Code – generator222382085k+Missing direct file access protection
#43Easy Digital Downloads – eCommerce Payments and Subscriptions made easy223,7138,57340k+Non-prefixed namespace
#44Ebook Store224061,076700Non-prefixed global variable
#45Five Star Restaurant Menu and Food Ordering227546105k+Output is not escaped
#46LearnPress – WordPress LMS Plugin for Create and Sell Online Courses222,3803,62370k+Non-prefixed global variable
#47Mailchimp for WooCommerce22525671200k+Non-prefixed global variable
#48Search Atlas SEO – OTTO AI SEO Automation for WordPress221,4352,9608k+Output is not escaped
#49NinjaFirewall (WP Edition) – Advanced Security Plugin and Firewall221,2511,992100k+Non-prefixed global variable
#50WP OAuth Server (OAuth Authentication)221893453k+Non-prefixed function