PluginScore

WordPress.PHP.DevelopmentFunctions.error_log_debug_backtrace

error log debug backtrace

Development or debugging behavior appears in code that may run in production.

medium weight

Why It Shows Up

The scan found logging, debugging, path disclosure, `phpinfo()`, error-reporting changes, or similar development-oriented functions.

Why It Matters

Debug output can leak paths, configuration, request data, stack details, or sensitive runtime information.

How to Fix

  • Remove temporary debugging calls before release.
  • If logging is required, guard it with `WP_DEBUG` or a plugin setting intended for administrators.
  • Never show debug details to unauthenticated visitors or normal front-end users.

Affected Plugins

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#51LearnPress – WordPress LMS Plugin for Create and Sell Online Courses222,3463,34170k+Non-prefixed global variable
#52Slider, Gallery, and Carousel by MetaSlider – Image Slider, Video Slider22207323500k+Non-prefixed global variable
#53Molongui Authorship – Author Boxes, Guest Authors & Co-Authors for WordPress229191,23010k+Output is not escaped
#54NinjaFirewall (WP Edition) – Advanced Security Plugin and Firewall221,2662,059100k+Non-prefixed global variable
#55WP OAuth Server (OAuth Authentication)221893473k+Non-prefixed function
#56oik224891802k+Non Singular String Literal Domain
#57PagBank / PagSeguro Connect para WooCommerce225047434k+Non-prefixed global variable
#58Smart Popup by Supsystic223,17250310k+Non Singular String Literal Domain
#59Post SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App221,5812,326300k+Non-prefixed global variable
#60PageSpeed Ninja – Cache, Minify, Defer CSS JavaScript, Critical CSS, Optimize Images, Convert WebP229844075k+Unsafe printing function
#61RabbitLoader Cache: Optimize your Website for Speed222411632k+Output is not escaped
#62SALESmanago & Leadoo226454291k+Unsafe printing function
#63Sellsy22586490400Non Singular String Literal Domain
#64Seraphinite Accelerator2259425550k+Output is not escaped
#65ShortPixel Image Optimizer – Optimize Images, Convert WebP & AVIF221,044799300k+Non-prefixed global variable
#66NextScripts: Social Networks Auto-Poster222,4081,13330k+Output is not escaped
#67RapidLoad AI – Optimize Web Vitals Automatically2281840800Nonce verification recommended
#68Search & Replace Everything – Quick and Easy Way to Find and Replace Text, Links221,0441,79720k+Non-prefixed global variable
#69UpStream: a Project Management Plugin for WordPress22683703600Non-prefixed global variable
#70URL Shortify – Simple and Easy URL Shortener221,5202,68910k+Non-prefixed global variable
#71Wenprise WeChatPay Payment Gateway For WooCommerce22443178400Exception output is not escaped
#72WooCommerce221,3596,1717m+Non-prefixed global variable
#73Advanced AJAX Product Filters222,6831,20550k+Text Domain Mismatch
#74ManageWP Worker225075651m+Non-prefixed class
#75WP Fusion Lite – Marketing Automation and CRM Integration for WordPress222756835k+Nonce verification recommended
#76WP Super Minify • Minify, Compress and Cache HTML, CSS & JavaScript221642579k+Non-prefixed constant
#77WP-WebAuthn229573962k+Exception output is not escaped
#78WPSSO Core – Complete Schema Markup and Meta Tags221,4074125k+Missing Translators Comment
#79YaySMTP – WP Mail SMTP with Email Logs, Tracking & Reports2265443510k+Exception output is not escaped
#80Recipe Cards For Your Food Blog from Zip Recipes221,1261,7311k+Non-prefixed global variable
#81Advanced Custom Fields: Extended231,885329100k+Text Domain Mismatch
#82Affiliate Super Assistent231,2802672k+Text Domain Mismatch
#83Autoptimize23288191800k+Output is not escaped
#84Kadence Security – Password, Two Factor Authentication, and Brute Force Protection231,053967700k+Missing Translators Comment
#85Business Directory Plugin – Easy Listing Directories for WordPress236111,05810k+Non-prefixed global variable
#86Geo Controller232035441k+Non-prefixed global variable
#87Church Admin231,6434,202900Direct Query
#88Classified Listing – AI-Powered Classified ads & Business Directory231552,0749k+Non-prefixed global variable
#89Easy Digital Downloads – eCommerce Payments and Subscriptions made easy233,72310,28340k+Non-prefixed namespace
#90Flexmls® IDX Plugin231,2689571k+Output is not escaped
#91Freshdesk (official)23194386900Non-prefixed function
#92Houzez Property Feed231,4641,6151k+Text Domain Mismatch
#93Joli FAQ SEO – WordPress FAQ Plugin231,0831,526700Non-prefixed global variable
#94Justified Gallery235891,4178k+Non-prefixed global variable
#95License Manager for WooCommerce231298196k+Request data is not unslashed
#96Link Whisper Free233,8825,30330k+Text Domain Mismatch
#97Locatoraid Store Locator233196451k+Non-prefixed global variable
#98Login With Ajax – Fast Logins, 2FA, Redirects2362352010k+Output is not escaped
#99Order Bump for WooCommerce231,7201,562700Output is not escaped
#100MyWorks Sync for WooCommerce & QuickBooks Online232,2929,1015k+Non-prefixed global variable