WordPress.PHP.DevelopmentFunctions.error_log_error_log
error log error log
Development or debugging behavior appears in code that may run in production.
Why It Shows Up
The scan found logging, debugging, path disclosure, `phpinfo()`, error-reporting changes, or similar development-oriented functions.
Why It Matters
Debug output can leak paths, configuration, request data, stack details, or sensitive runtime information.
How to Fix
- Remove temporary debugging calls before release.
- If logging is required, guard it with `WP_DEBUG` or a plugin setting intended for administrators.
- Never show debug details to unauthenticated visitors or normal front-end users.
Affected Plugins
| Rank | Plugin | Score | Errors | Warnings | Installs | Added | Updated | Top Issue |
|---|---|---|---|---|---|---|---|---|
| #1251 | Core Web Vitals & PageSpeed Booster | 77 | 346 | 65 | 1k+ | Text Domain Mismatch | ||
| #1252 | Dual Currency Display | 77 | 1 | 24 | 900 | Direct Query | ||
| #1253 | RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator | 77 | 37 | 282 | 40k+ | Non-prefixed global variable | ||
| #1254 | Index WP Users For Speed | 77 | 10 | 35 | 1k+ | Non-prefixed global variable | ||
| #1255 | Booking System Trafft | 78 | 3 | 19 | 400 | Nonce verification recommended | ||
| #1256 | Web3 Crypto Payments by DePay for WooCommerce | 78 | 6 | 101 | 1k+ | Direct Query | ||
| #1257 | Media Focus Point | 78 | 11 | 6 | 6k+ | Output is not escaped | ||
| #1258 | Post slider elementor addons | 78 | 168 | 13 | 2k+ | Text Domain Mismatch | ||
| #1259 | Sheet2Site | 78 | 21 | 3 | 400 | Output is not escaped | ||
| #1260 | AIKO – AI Developer Lite | 79 | 10 | 7 | 6k+ | error log error log | ||
| #1261 | Bitly URL Shortener | 79 | 65 | 22 | 600 | Text Domain Mismatch | ||
| #1262 | Custom Icons for Elementor | 80 | 6 | 25 | 10k+ | Non-prefixed global variable | ||
| #1263 | Duo Universal | 80 | 6 | 25 | 2k+ | Nonce verification recommended | ||
| #1264 | Media Library File Size | 80 | 3 | 15 | 6k+ | Nonce verification recommended | ||
| #1265 | Nudgify Social Proof | 80 | 3 | 12 | 600 | Discouraged PHP function | ||
| #1266 | SteadFast API | 80 | 2 | 23 | 8k+ | Non-prefixed global variable | ||
| #1267 | Great Restaurant Menu WP | 81 | 89 | 100 | 1k+ | Text Domain Mismatch | ||
| #1268 | Hostinger Tools | 81 | 14 | 22 | 3m+ | wp function not compatible with requires wp | ||
| #1269 | Siteimprove | 81 | 6 | 23 | 800 | Nonce verification recommended | ||
| #1270 | Wp Tracking Codes | 81 | 7 | 12 | 900 | Nonce verification recommended | ||
| #1271 | Stop Emails | 82 | 9 | 3 | 5k+ | Missing direct file access protection | ||
| #1272 | Product Compare for WooCommerce | 82 | 6 | 42 | 3k+ | Non-prefixed global variable | ||
| #1273 | AI Builder | 83 | 3 | 5 | 400 | Output is not escaped | ||
| #1274 | Photo Sphere Viewer – 360° Panorama, Virtual Tour, 360 Video & AR 3D Model Viewer | 83 | 13 | 10 | 500 | wp function not compatible with requires wp | ||
| #1275 | Zhanzhangb Indexing Submission for Baidu | 83 | 14 | 4 | 2k+ | Output is not escaped | ||
| #1276 | AnimateGL Animations for WordPress – Elementor & Gutenberg Blocks Animations | 84 | 88 | 20 | 3k+ | Text Domain Mismatch | ||
| #1277 | BinancePay Checkout for WooCommerce | 84 | 5 | 14 | 900 | Input is not validated | ||
| #1278 | Digital Signature For Contact Form 7 | 84 | 22 | 11 | 5k+ | file system operations fwrite | ||
| #1279 | Enable Turnstile (Cloudflare) for Gravity Forms | 84 | 8 | 7 | 700 | Missing direct file access protection | ||
| #1280 | HHG for TranslatePress | 84 | 43 | 18 | 800 | curl curl setopt | ||
| #1281 | JWT Authentication for WP REST API | 84 | 27 | 41 | 60k+ | wp function not compatible with requires wp | ||
| #1282 | LearnPress – Prerequisites Courses | 84 | 8 | 14 | 6k+ | Non-prefixed constant | ||
| #1283 | FormGent – Next-Gen AI Form Builder for WordPress with Multi-Step, Quizzes, Payments & More | 85 | 11 | 315 | 1k+ | Non-prefixed global variable | ||
| #1284 | Stock market charts from finviz | 85 | 8 | 1 | 400 | Missing Arg Domain | ||
| #1285 | Flexible Map | 85 | 10 | 7 | 7k+ | Non-prefixed class | ||
| #1286 | PDF for Elementor Forms + Drag And Drop Template Builder | 86 | 668 | 31 | 1k+ | wp function not compatible with requires wp | ||
| #1287 | Sharespine Woocommerce Connector | 86 | 2 | 16 | 500 | error log error log | ||
| #1288 | Microsoft Azure Storage for WordPress | 86 | 25 | 26 | 2k+ | Missing Translators Comment | ||
| #1289 | Image Optimizer – Optimize Images and Convert to WebP or AVIF | 87 | 14 | 24 | 1m+ | Missing Translators Comment | ||
| #1290 | ImageKit – URL based image manipulation and optimization | 87 | 47 | 42 | 1k+ | Non-prefixed global variable | ||
| #1291 | Object Cache 4 everyone | 87 | 2 | 65 | 5k+ | Non-prefixed function | ||
| #1292 | Export Single Post Page | 87 | 3 | 6 | 2k+ | Nonce verification recommended | ||
| #1293 | Custom Layouts – Post + Product grids made easy | 89 | 23 | 22 | 4k+ | Missing Translators Comment | ||
| #1294 | Loading Page with Loading Screen | 89 | 49 | 18 | 10k+ | wp function not compatible with requires wp | ||
| #1295 | RateMyAgent Official | 89 | 1 | 158 | 400 | Non-prefixed namespace | ||
| #1296 | MyRewards | 89 | 1,213 | 5 | 2k+ | Text Domain Mismatch | ||
| #1297 | Multiple Columns for Gravity Forms | 90 | 11 | 7 | 10k+ | Missing direct file access protection | ||
| #1298 | Loan Calculator WP | 90 | 16 | 5 | 2k+ | Non Singular String Literal Text | ||
| #1299 | Rapid URL Indexer for WP – Index Websites in Google | 90 | 6 | 28 | 1k+ | error log error log | ||
| #1300 | Chatbase | 91 | 4 | 4 | 5k+ | Non-prefixed function |
