WordPress.PHP.DevelopmentFunctions.error_log_error_log
error log error log
Development or debugging behavior appears in code that may run in production.
Why It Shows Up
The scan found logging, debugging, path disclosure, `phpinfo()`, error-reporting changes, or similar development-oriented functions.
Why It Matters
Debug output can leak paths, configuration, request data, stack details, or sensitive runtime information.
How to Fix
- Remove temporary debugging calls before release.
- If logging is required, guard it with `WP_DEBUG` or a plugin setting intended for administrators.
- Never show debug details to unauthenticated visitors or normal front-end users.
Affected Plugins
| Rank | Plugin | Score | Errors | Warnings | Installs | Added | Updated | Top Issue |
|---|---|---|---|---|---|---|---|---|
| #151 | User Frontend: AI Powered Frontend Post Submission, User Directory, User Profile, Membership & User Registration | 22 | 291 | 1,516 | 20k+ | Non-prefixed global variable | ||
| #152 | WP-WebAuthn | 22 | 957 | 396 | 2k+ | Exception output is not escaped | ||
| #153 | ShopWP | 22 | 430 | 225 | 700 | Text Domain Mismatch | ||
| #154 | WPSSO Core – Complete Schema Markup and Meta Tags | 22 | 1,409 | 414 | 5k+ | Missing Translators Comment | ||
| #155 | YaySMTP – WP Mail SMTP with Email Logs, Tracking & Reports | 22 | 654 | 435 | 10k+ | Exception output is not escaped | ||
| #156 | ЮKassa для WooCommerce | 22 | 591 | 167 | 9k+ | Short PHP open tag found | ||
| #157 | Advanced Custom Fields: Extended | 23 | 1,885 | 329 | 100k+ | Text Domain Mismatch | ||
| #158 | Frontend Admin by DynamiApps | 23 | 5,946 | 3,231 | 9k+ | Text Domain Mismatch | ||
| #159 | Advanced Custom Fields (ACF®) | 23 | 2,472 | 1,239 | 2m+ | Text Domain Mismatch | ||
| #160 | AI Engine – The Chatbot, AI Framework & MCP for WordPress | 23 | 423 | 600 | 100k+ | error log error log | ||
| #161 | Affiliate Super Assistent | 23 | 1,280 | 267 | 1k+ | Text Domain Mismatch | ||
| #162 | AR for WordPress | 23 | 151 | 499 | 400 | Non-prefixed global variable | ||
| #163 | Autoptimize | 23 | 288 | 191 | 800k+ | Output is not escaped | ||
| #164 | Shortcodes and extra features for Phlox theme | 23 | 412 | 446 | 90k+ | Output is not escaped | ||
| #165 | bBlocks – Essential Gutenberg Blocks & Patterns Collection | 23 | 661 | 1,506 | 700 | Non-prefixed global variable | ||
| #166 | BA Book Everything | 23 | 1,184 | 1,086 | 10k+ | Output is not escaped | ||
| #167 | BlossomThemes Email Newsletter | 23 | 337 | 239 | 20k+ | Output is not escaped | ||
| #168 | BuddyDrive | 23 | 722 | 1,597 | 1k+ | Non-prefixed global variable | ||
| #169 | BuddyPress | 23 | 584 | 9,012 | 90k+ | Non-prefixed function | ||
| #170 | CallTrackingMetrics | 23 | 922 | 286 | 3k+ | Unsafe printing function | ||
| #171 | Smart Grid-Layout Design for Contact Form 7 | 23 | 954 | 459 | 10k+ | Output is not escaped | ||
| #172 | Classified Listing – AI-Powered Classified ads & Business Directory | 23 | 152 | 2,158 | 9k+ | Non-prefixed global variable | ||
| #173 | Content Egg – Affiliate Product Importer & Price Comparison | 23 | 1,300 | 1,287 | 10k+ | Non-prefixed global variable | ||
| #174 | Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe | 23 | 9,358 | 26,430 | 1k+ | Non-prefixed global variable | ||
| #175 | Auto Post Cleaner | 23 | 715 | 1,378 | 1k+ | Non-prefixed global variable | ||
| #176 | DK PDF – WordPress PDF Generator | 23 | 744 | 335 | 3k+ | Exception output is not escaped | ||
| #177 | Dokan: AI Powered WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy | 23 | 170 | 821 | 30k+ | Non-prefixed global variable | ||
| #178 | Easy Digital Downloads – eCommerce Payments and Subscriptions made easy | 23 | 3,719 | 10,280 | 40k+ | Non-prefixed namespace | ||
| #179 | Easy Social Feed – Social Photos Gallery and Post Feed for WordPress | 23 | 1,681 | 1,488 | 30k+ | Non-prefixed global variable | ||
| #180 | Marijuana Age Verify | 23 | 1,154 | 2,630 | 1k+ | Non-prefixed global variable | ||
| #181 | Email Subscribers & Newsletters – Email Marketing, Post Notifications & Newsletter Plugin for WordPress | 23 | 653 | 1,510 | 50k+ | Non-prefixed hook name | ||
| #182 | ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce | 23 | 828 | 5,968 | 5k+ | Direct Query | ||
| #183 | EventON – Events Calendar | 23 | 2,585 | 1,021 | 6k+ | Text Domain Mismatch | ||
| #184 | Ezoic | 23 | 441 | 519 | 10k+ | Output is not escaped | ||
| #185 | Fastcache by Host.it | 23 | 1,327 | 207 | 900 | Text Domain Mismatch | ||
| #186 | Feed Them Social – Social Media Feeds, Video, and Photo Galleries | 23 | 563 | 535 | 20k+ | Output is not escaped | ||
| #187 | Flexmls® IDX Plugin | 23 | 1,268 | 957 | 1k+ | Output is not escaped | ||
| #188 | GamiPress – Gamification plugin to reward points, achievements, badges & ranks in WordPress | 23 | 3,594 | 2,775 | 10k+ | Output is not escaped | ||
| #189 | Groundhogg — CRM, Newsletters, and Marketing Automation | 23 | 136 | 919 | 2k+ | Non-prefixed global variable | ||
| #190 | Heureka | 23 | 534 | 237 | 400 | Exception output is not escaped | ||
| #191 | IMPress for IDX Broker | 23 | 1,089 | 636 | 7k+ | Text Domain Mismatch | ||
| #192 | Payment forms, Buy now buttons, and Invoicing System | GetPaid | 23 | 390 | 1,266 | 5k+ | Non-prefixed global variable | ||
| #193 | IP Geo Block | 23 | 399 | 589 | 8k+ | Output is not escaped | ||
| #194 | InfiniteWP Client | 23 | 2,287 | 1,811 | 200k+ | Exception output is not escaped | ||
| #195 | Kadence Blocks — Page Builder Toolkit for Gutenberg Editor | 23 | 55 | 2,127 | 600k+ | Non-prefixed global variable | ||
| #196 | King Addons for Elementor – 80+ Elementor Widgets, 4 000+ Elementor Templates, WooCommerce, Mega Menu, Popup Builder | 23 | 1,832 | 3,877 | 10k+ | Non-prefixed global variable | ||
| #197 | Masteriyo LMS – LMS Course Builder, Quizzes & Certificates | 23 | 188 | 2,123 | 5k+ | Non-prefixed global variable | ||
| #198 | Link Whisper Free | 23 | 3,926 | 5,402 | 30k+ | Text Domain Mismatch | ||
| #199 | Listdom: AI-powered Business Directory with Classifieds Ads Listings | 23 | 4,673 | 3,336 | 1k+ | Output is not escaped | ||
| #200 | LLMagnet – AI Visibility & AI SEO for Claude, ChatGPT & More | 23 | 627 | 1,798 | 500 | Non-prefixed global variable |