WordPress.PHP.DevelopmentFunctions.error_log_debug_print_backtrace
error log debug print backtrace
Development or debugging behavior appears in code that may run in production.
Why It Shows Up
The scan found logging, debugging, path disclosure, `phpinfo()`, error-reporting changes, or similar development-oriented functions.
Why It Matters
Debug output can leak paths, configuration, request data, stack details, or sensitive runtime information.
How to Fix
- Remove temporary debugging calls before release.
- If logging is required, guard it with `WP_DEBUG` or a plugin setting intended for administrators.
- Never show debug details to unauthenticated visitors or normal front-end users.
Affected Plugins
| Rank | Plugin | Score | Errors | Warnings | Installs | Added | Updated | Top Issue |
|---|---|---|---|---|---|---|---|---|
| #1 | Seamless Donations is Sunset | 21 | 600 | 514 | 2k+ | Text Domain Mismatch | ||
| #2 | Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder | 23 | 4,740 | 1,279 | 30k+ | Non Singular String Literal Domain | ||
| #3 | Smart Slider 3 | 23 | 263 | 268 | 800k+ | Non-prefixed global variable | ||
| #4 | teachPress | 23 | 744 | 1,587 | 2k+ | SQL query is not prepared | ||
| #5 | W3 Total Cache | 23 | 345 | 678 | 900k+ | Non-prefixed global variable | ||
| #6 | Memberful – Membership Plugin | 27 | 358 | 362 | 1k+ | Text Domain Mismatch | ||
| #7 | Maven Algolia | 28 | 148 | 89 | 6k+ | Non Singular String Literal Domain | ||
| #8 | DEPRECATED – Shipmondo – A complete shipping solution for WooCommerce | 32 | 166 | 119 | 5k+ | Output is not escaped | ||
| #9 | BjornTech PayPal POS integration for WooCommerce | 34 | 68 | 182 | 700 | Non-prefixed hook name | ||
| #10 | Woopra Analytics Plugin | 34 | 114 | 53 | 800 | Output is not escaped | ||
| #11 | Webo-facto | 40 | 41 | 102 | 900 | Nonce verification recommended | ||
| #12 | Text Domain Inspector | 61 | 41 | 36 | 400 | Non-prefixed global variable |
