PluginScore

WordPress.PHP.DevelopmentFunctions.error_log_error_log

error log error log

Development or debugging behavior appears in code that may run in production.

medium weight

Why It Shows Up

The scan found logging, debugging, path disclosure, `phpinfo()`, error-reporting changes, or similar development-oriented functions.

Why It Matters

Debug output can leak paths, configuration, request data, stack details, or sensitive runtime information.

How to Fix

  • Remove temporary debugging calls before release.
  • If logging is required, guard it with `WP_DEBUG` or a plugin setting intended for administrators.
  • Never show debug details to unauthenticated visitors or normal front-end users.

Affected Plugins

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#101FunnelKit Payment Gateway for Stripe WooCommerce2224432120k+Input is not sanitized
#102GeoDirectory – WP Business Directory Plugin and Classified Listings Directory224,4653,98510k+Output is not escaped
#103Happyforms – Form Builder for WordPress: Drag & Drop Contact Forms, Surveys, Payments & Multipurpose Forms221,03172220k+Unsafe printing function
#104Hesabfa Accounting22467718500Text Domain Mismatch
#105If-So Dynamic Content – Elementor & All Page Builders Personalization229698447k+Output is not escaped
#106The Innovative Form Builder – IvyForms22750309800Exception output is not escaped
#107JCC Payment Gateway for Woocommerce222,2731,136600Text Domain Mismatch
#108Jetpack – WP Security, Backup, Speed, & Growth223,2921,4383m+Text Domain Mismatch
#109LearnPress – WordPress LMS Plugin for Create and Sell Online Courses222,4333,59470k+Non-prefixed global variable
#110Custom Login Page Customizer – Login Designer225881,45530k+Non-prefixed global variable
#111Mail Baby SMTP22385699600SQL query is not prepared
#112Mailchimp for WooCommerce22524658200k+Non-prefixed global variable
#113MailOptin – Popup, Optin Forms & Email Newsletters for Mailchimp, HubSpot, AWeber Etc.222,6252,45810k+Output is not escaped
#114MapSVG – Vector maps, Image maps, Google Maps22179931k+Missing direct file access protection
#115Search Atlas SEO – Premier SEO Plugin for One-Click WP Publishing & Integrated AI Optimization221,3592,8008k+Output is not escaped
#116Modula Image Gallery – Photo Grid & Video Gallery22474437100k+Text Domain Mismatch
#117Molongui Authorship – Author Boxes, Guest Authors & Co-Authors for WordPress229191,23010k+Output is not escaped
#118MStore API – Create Native Android & iOS Apps On The Cloud226358563k+SQL query is not prepared
#119myCred Addons – Ultimate myCred Modules To Support WordPress Gamification and Loyalty Rewards222,3441,320400Output is not escaped
#120PAYCOMET for WooCommerce221,2234232k+Text Domain Mismatch
#121Post SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App221,5812,326300k+Non-prefixed global variable
#122Product Catalog Feed by PixelYourSite225813578k+Output is not escaped
#123PageSpeed Ninja – Cache, Minify, Defer CSS JavaScript, Critical CSS, Optimize Images, Convert WebP229844075k+Unsafe printing function
#124Quick Contact Form222606231k+Non-prefixed function
#125RabbitLoader Cache: Optimize your Website for Speed222411632k+Output is not escaped
#126Salon Booking System – Appointment Booking for Salons, Barbershops & Spas221867602k+Non-prefixed global variable
#127ShortPixel Image Optimizer – Optimize Images, Convert WebP & AVIF221,044800300k+Non-prefixed global variable
#128Simple Job Board226341,35510k+Non-prefixed global variable
#129SNS Count Cache229181207k+Non Singular String Literal Domain
#130SSL Zen — SSL Certificate Installer & HTTPS Redirects227511,60510k+Non-prefixed global variable
#131Swift Performance Lite222,3461,3256k+Text Domain Mismatch
#132Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent222265138k+error log error log
#133Uncanny Toolkit for LearnDash2253999420k+Output is not escaped
#134RapidLoad AI – Optimize Web Vitals Automatically2281840700Nonce verification recommended
#135UpStream: a Project Management Plugin for WordPress22683703600Non-prefixed global variable
#136WCFM Marketplace – Multivendor Marketplace for WooCommerce221,9502,10810k+Non-prefixed global variable
#137WCFM Membership – WooCommerce Memberships for Multivendor Marketplace2255967510k+Non-prefixed global variable
#138Easy Appointment Booking & Scheduling System – Webba Booking Calendar221,6173,3802k+Non-prefixed global variable
#139Wenprise WeChatPay Payment Gateway For WooCommerce22443178400Exception output is not escaped
#140WooCommerce221,3436,2107m+Non-prefixed global variable
#141Advanced AJAX Product Filters222,8401,25250k+Text Domain Mismatch
#142CoDesigner – All in One Elementor WooCommerce Builder224,1317745k+Text Domain Mismatch
#143Simple Shopping Cart2280054110k+Unsafe printing function
#144Asset CleanUp: Page Speed Booster222,0302,485100k+Non-prefixed global variable
#145WP Express Checkout (Fast Payments via PayPal & Stripe)225916271k+Output is not escaped
#146WP Umbrella: Security Backup Restore & Monitoring2296499480k+Exception output is not escaped
#147WP Super Minify • Minify, Compress and Cache HTML, CSS & JavaScript221642578k+Non-prefixed constant
#148NotifSMS – SMS Notifications OTP & 2FA for WordPress & WooCommerce221,3531,4121k+Non-prefixed global variable
#149User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post Submission222901,51720k+Non-prefixed global variable
#150WP-WebAuthn229573962k+Exception output is not escaped