WordPress.PHP.DevelopmentFunctions.error_log_debug_print_backtrace
error log debug print backtrace
Development or debugging behavior appears in code that may run in production.
Why It Shows Up
The scan found logging, debugging, path disclosure, `phpinfo()`, error-reporting changes, or similar development-oriented functions.
Why It Matters
Debug output can leak paths, configuration, request data, stack details, or sensitive runtime information.
How to Fix
- Remove temporary debugging calls before release.
- If logging is required, guard it with `WP_DEBUG` or a plugin setting intended for administrators.
- Never show debug details to unauthenticated visitors or normal front-end users.
Affected Plugins
| Rank | Plugin | Score | Errors | Warnings | Installs | Updated | Top Issue |
|---|---|---|---|---|---|---|---|
| #1 | Seamless Donations is Sunset | 21 | 600 | 514 | 2k+ | Text Domain Mismatch | |
| #2 | Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder | 23 | 4,746 | 1,279 | 30k+ | Non Singular String Literal Domain | |
| #3 | Smart Slider 3 | 23 | 261 | 268 | 800k+ | Non-prefixed global variable | |
| #4 | teachPress | 23 | 744 | 1,587 | 2k+ | SQL query is not prepared | |
| #5 | Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin | 25 | 960 | 738 | 60k+ | Text Domain Mismatch | |
| #6 | W3 Total Cache | 25 | 617 | 1,345 | 900k+ | Non-prefixed global variable | |
| #7 | Maven Algolia | 28 | 148 | 89 | 6k+ | Non Singular String Literal Domain | |
| #8 | DEPRECATED – Shipmondo – A complete shipping solution for WooCommerce | 32 | 166 | 119 | 5k+ | Output is not escaped |
