WordPress.PHP.DevelopmentFunctions.error_log_debug_backtrace
error log debug backtrace
Development or debugging behavior appears in code that may run in production.
Why It Shows Up
The scan found logging, debugging, path disclosure, `phpinfo()`, error-reporting changes, or similar development-oriented functions.
Why It Matters
Debug output can leak paths, configuration, request data, stack details, or sensitive runtime information.
How to Fix
- Remove temporary debugging calls before release.
- If logging is required, guard it with `WP_DEBUG` or a plugin setting intended for administrators.
- Never show debug details to unauthenticated visitors or normal front-end users.
Affected Plugins
| Rank | Plugin | Score | Errors | Warnings | Installs | Added | Updated | Top Issue |
|---|---|---|---|---|---|---|---|---|
| #151 | Mang Board WP | 24 | 1,213 | 4,720 | 9k+ | Non-prefixed global variable | ||
| #152 | My WP Customize Admin/Frontend | 24 | 1,249 | 292 | 8k+ | Unsafe printing function | ||
| #153 | My Agile Privacy® – CMP, Cookie Consent & Privacy Tools | 24 | 1,170 | 674 | 7k+ | Text Domain Mismatch | ||
| #154 | Ninja Forms – The Contact Form Builder That Grows With You | 24 | 749 | 1,525 | 600k+ | Nonce verification recommended | ||
| #155 | Participants Database | 24 | 951 | 894 | 7k+ | SQL query is not prepared | ||
| #156 | Post Status Notifier Lite | 24 | 984 | 451 | 700 | Missing direct file access protection | ||
| #157 | Post Affiliate Pro | 24 | 293 | 335 | 500 | Nonce verification recommended | ||
| #158 | reGenerate Thumbnails Advanced | 24 | 220 | 122 | 70k+ | Unsafe printing function | ||
| #159 | Security Plugin, Firewall & Malware Scanner with Auto Removal | 24 | 1,188 | 770 | 30k+ | Output is not escaped | ||
| #160 | Servebolt Optimizer | 24 | 1,958 | 681 | 1k+ | Text Domain Mismatch | ||
| #161 | GEO Plugin by Squirrly SEO | 24 | 1,195 | 224 | 30k+ | Missing Translators Comment | ||
| #162 | Templately – Elementor & Gutenberg Template Library: 6500+ Free & Pro Ready Templates And Cloud! | 24 | 167 | 225 | 300k+ | Nonce verification recommended | ||
| #163 | Timber | 24 | 85 | 128 | 20k+ | Non-prefixed hook name | ||
| #164 | Ultimate Product Catalog | 24 | 554 | 525 | 5k+ | Unsafe printing function | ||
| #165 | Ultimate WP Mail | 24 | 400 | 546 | 700 | Unsafe printing function | ||
| #166 | User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder | 24 | 663 | 3,353 | 50k+ | Non-prefixed global variable | ||
| #167 | WCMultiShipping — Mondial Relay, Inpost & Chronopost for WooCommerce | 24 | 733 | 499 | 5k+ | Output is not escaped | ||
| #168 | Disable Updates – Updates Manager, Disable Automatic Updates, Disable All Updates | 24 | 522 | 135 | 10k+ | Output is not escaped | ||
| #169 | XT Floating Cart for WooCommerce | 24 | 1,249 | 2,023 | 4k+ | Non-prefixed global variable | ||
| #170 | EU VAT Assistant for WooCommerce | 24 | 1,742 | 495 | 5k+ | Non Singular String Literal Domain | ||
| #171 | WPML Multilingual & Multicurrency for WooCommerce | 24 | 1,453 | 1,618 | 100k+ | SQL query is not prepared | ||
| #172 | WP Fastest Cache – WordPress Cache Plugin | 24 | 541 | 753 | 1m+ | Unsafe printing function | ||
| #173 | WP Job Portal – AI-Powered Recruitment System for Company or Job Board website | 24 | 78 | 1,158 | 8k+ | Missing Version | ||
| #174 | WP Notification Bell | 24 | 736 | 1,591 | 700 | Non-prefixed global variable | ||
| #175 | WP Recipe Maker | 24 | 494 | 942 | 50k+ | Non-prefixed global variable | ||
| #176 | WP-Stateless – Google Cloud Storage | 24 | 1,036 | 482 | 4k+ | Non Singular String Literal Domain | ||
| #177 | WP Travel Engine – Tour Booking Plugin – Tour Operator Software | 24 | 2,012 | 5,689 | 20k+ | Non-prefixed global variable | ||
| #178 | WP User Manager – User Profile Builder & Membership | 24 | 787 | 539 | 10k+ | Exception output is not escaped | ||
| #179 | Jetpack CRM – Clients, Leads, Invoices, Billing, Email Marketing, & Automation | 24 | 1,211 | 3,152 | 30k+ | Non-prefixed global variable | ||
| #180 | Bookit — Booking & Appointment Calendar | 25 | 565 | 1,458 | 4k+ | Non-prefixed global variable | ||
| #181 | Online Scheduling and Appointment Booking System – Bookly | 25 | 1,088 | 888 | 60k+ | SQL query is not prepared | ||
| #182 | Broken Link Checker | 25 | 727 | 600 | 500k+ | Output is not escaped | ||
| #183 | Bulk Edit Categories and Tags – Create Thousands Quickly on the Editor | 25 | 1,041 | 1,016 | 4k+ | Text Domain Mismatch | ||
| #184 | Bulk Edit and Create User Profiles – WP Sheet Editor | 25 | 995 | 1,001 | 1k+ | Text Domain Mismatch | ||
| #185 | Colissimo shipping methods for WooCommerce | 25 | 1,755 | 557 | 10k+ | Text Domain Mismatch | ||
| #186 | Disable Comments & Delete All Comments | 25 | 503 | 185 | 9k+ | Output is not escaped | ||
| #187 | DecaLog | 25 | 943 | 236 | 1k+ | Exception output is not escaped | ||
| #188 | Disable Admin Notices – Hide Dashboard Notifications | 25 | 465 | 195 | 100k+ | Output is not escaped | ||
| #189 | WEB-Translation – eTranslation Multilingual | 25 | 217 | 1,057 | 400 | Non-prefixed function | ||
| #190 | Events Made Easy | 25 | 521 | 6,324 | 1k+ | Non-prefixed function | ||
| #191 | WP Fast Total Search – The Power of Indexed Search | 25 | 209 | 291 | 1k+ | Non-prefixed global variable | ||
| #192 | Gift Cards (Gift Vouchers and Packages) (WooCommerce Supported) | 25 | 50 | 1,043 | 1k+ | Non-prefixed global variable | ||
| #193 | Site Kit by Google – Analytics, Search Console, AdSense, Speed | 25 | 1,304 | 242 | 5m+ | Missing direct file access protection | ||
| #194 | Sitemap by BestWebSoft – WordPress XML Site Map Page Generator Plugin | 25 | 608 | 207 | 20k+ | Text Domain Mismatch | ||
| #195 | Hardcore Google Fonts Localizer | 25 | 331 | 261 | 800 | Text Domain Mismatch | ||
| #196 | Index WP MySQL For Speed | 25 | 250 | 255 | 50k+ | Output is not escaped | ||
| #197 | MaxButtons – Create buttons | 25 | 626 | 404 | 70k+ | Output is not escaped | ||
| #198 | Media Cloud Sync | 25 | 1,095 | 274 | 1k+ | Exception output is not escaped | ||
| #199 | Nexter Extension – Security, Performance, Code Snippets & Site Toolkit | 25 | 198 | 712 | 10k+ | Nonce verification recommended | ||
| #200 | Object Sync for Salesforce | 25 | 192 | 296 | 500 | Non-prefixed global variable |