PluginScore

WordPress.PHP.DevelopmentFunctions.error_log_error_log

error log error log

Development or debugging behavior appears in code that may run in production.

medium weight

Why It Shows Up

The scan found logging, debugging, path disclosure, `phpinfo()`, error-reporting changes, or similar development-oriented functions.

Why It Matters

Debug output can leak paths, configuration, request data, stack details, or sensitive runtime information.

How to Fix

  • Remove temporary debugging calls before release.
  • If logging is required, guard it with `WP_DEBUG` or a plugin setting intended for administrators.
  • Never show debug details to unauthenticated visitors or normal front-end users.

Affected Plugins

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#51Formidable Forms – WordPress Form Builder for Contact Forms, Calculators, Quizzes & More21522,118300k+Non-prefixed global variable
#52Campaign Monitor for WordPress213864612k+Non-prefixed global variable
#53Front End Users217192,759400Non-prefixed global variable
#54Leyka212573,4462k+Request data is not unslashed
#55Mapster WP Maps213,4402,8943k+Text Domain Mismatch
#56Modular DS: Monitor, update, and backup multiple websites211918240k+Exception output is not escaped
#57Mooberry Book Manager211,0403991k+Text Domain Mismatch
#58MotoPress Hotel Booking213,0671,03710k+Text Domain Mismatch
#59Landing Page Builder – Coming Soon page, Maintenance Mode, Lead Page, WordPress Landing Pages211,1202,9139k+Non-prefixed global variable
#60Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction211,9535,29710k+Non-prefixed hook name
#61PeachPay — Payments & Express Checkout for WooCommerce (supports Stripe, PayPal, Square, Authorize.net, NMI)21485813300Missing direct file access protection
#62PublishPress Planner – Editorial Calendar, Marketing Content, Kanban Board216038906k+Output is not escaped
#63Razorpay for Gravity Forms2141147600Exception output is not escaped
#64Five Star Restaurant Reservations – WordPress Booking Plugin211,1011,15910k+Output is not escaped
#65Seamless Donations is Sunset216005142k+Text Domain Mismatch
#66SeatReg213121,637400Missing nonce verification
#67Professional Social Sharing Buttons, Icons & Related Posts – Shareaholic2132718110k+Output is not escaped
#68Smart Forms – when you need more than just a contact form217765745k+Output is not escaped
#69Accept Stripe Payments2137389220k+Missing nonce verification
#70ThirstyAffiliates – Affiliate Links, Link Branding, Link Tracking & Marketing Plugin2119066030k+Non-prefixed global variable
#71Trace My IP – Visitor IP Tracker, Stats Analytics & Page Views Counter with Email Alerts218713381k+wp function not compatible with requires wp
#72Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin211,0742,97840k+Direct Query
#73URL Shortify – Simple and Easy URL Shortener211,5072,66510k+Non-prefixed global variable
#74Buckaroo Woocommerce Payments Plugin216383212k+Exception output is not escaped
#75WebP Express21160427300k+Non-prefixed global variable
#76Wise Chat214705065k+Output is not escaped
#77Paysera Payment Gateway for WooCommerce211,8681967k+Exception output is not escaped
#78Wordfence Security – Firewall, Malware Scan, and Login Security211,8183,2365m+Output is not escaped
#79WP-Lister Lite for eBay216,7015,1322k+Output is not escaped
#80WP phpMyAdmin214,5286,43540k+Missing Arg Domain
#81wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin211,8121,43270k+Output is not escaped
#82WP Extended – The Ultimate WordPress Toolkit211,253398600Non Singular String Literal Domain
#83WPScan – WordPress Security Scanner215272658k+Text Domain Mismatch
#84Author Website Templates – Create Writer, Author & Publisher Websites Easily227112,910500Non-prefixed global variable
#85ANAC XML Bandi di Gara22294244500Output is not escaped
#86Cart Lift – Abandoned Cart Recovery for WooCommerce and EDD226697691k+Output is not escaped
#87CartFlows – Funnel Builder & Checkout Plugin for WooCommerce22460656200k+Text Domain Mismatch
#88Clearfy Cache – WordPress optimization plugin, Minify HTML, CSS & JS, Defer222,8541,26950k+Text Domain Mismatch
#89Accept PayPal Payments using Contact Form 722359127600Text Domain Mismatch
#90RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login223,6525,1458k+Non-prefixed global variable
#91Directorist: AI-Powered Business Directory, Listings & Classified Ads225602,20220k+Non-prefixed global variable
#92DirectoryPress – Business Directory And Classified Ad Listing224,7872,795700Text Domain Mismatch
#93Download Manager222,5131,459100k+Output is not escaped
#94Dynamic QR Code – generator222382085k+Missing direct file access protection
#95easyReservations225,3072,480800Text Domain Mismatch
#96Ebook Store224101,054700Non-prefixed global variable
#97EleSpare – News, Magazine and Blog Addons for Elementor227331,42310k+Non-prefixed global variable
#98Events Manager – Calendar, Bookings, Tickets, and more!224,7165,69070k+Output is not escaped
#99File Manager Pro – Filester22566391100k+Request data is not unslashed
#100Five Star Restaurant Menu and Food Ordering227546105k+Output is not escaped