WordPress.PHP.DevelopmentFunctions.error_log_error_log

error log error log

Development or debugging behavior appears in code that may run in production.

medium weight

Why It Shows Up

The scan found logging, debugging, path disclosure, `phpinfo()`, error-reporting changes, or similar development-oriented functions.

Why It Matters

Debug output can leak paths, configuration, request data, stack details, or sensitive runtime information.

How to Fix

  • Remove temporary debugging calls before release.
  • If logging is required, guard it with `WP_DEBUG` or a plugin setting intended for administrators.
  • Never show debug details to unauthenticated visitors or normal front-end users.

Affected Plugins

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#301E-cab Taxi Booking Manager for Woocommerce243561,4622k+Non-prefixed global variable
#302Email Subscribers & Newsletters – Email Marketing, Post Notifications & Newsletter Plugin for WordPress246521,49560k+Non-prefixed hook name
#303EmbedPress – PDF Embedder, 3D PDF FlipBook, Google Reviews, YouTube Videos, Upload & Embed PDF documents247111,588100k+Output is not escaped
#304Enable Media Replace24212276600k+Output is not escaped
#305Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns24120684200k+Non-prefixed global variable
#306Event Tickets and Registration243,4094,21790k+Non-prefixed global variable
#307Export WordPress Pages to Static HTML & PDF — Static Site Export245093044k+Text Domain Mismatch
#308Etsy Integration For WooCommerce241,2464,643900Non-prefixed global variable
#309Fast Velocity Minify2428225640k+Unsafe printing function
#310Fattura2424312333400Output is not escaped
#311Featured Image from URL (FIFU)241,65441870k+Non Singular String Literal Domain
#312Featured Post with thumbnail24158122400Output is not escaped
#313FeedWordPress244963199k+Missing Arg Domain
#314FileBird – WordPress Media Library Folders & File Manager24239377200k+wp function not compatible with requires wp
#315Fix Alt Text245443461k+Non Singular String Literal Domain
#316FluentCRM – Email Newsletter, Automation, Email Marketing, Email Campaigns, Optins, Leads, and CRM Solution2419375380k+Direct Query
#317Football Pool241,0857331k+Output is not escaped
#318Forminator Forms – Contact Form, Payment Form & Custom Form Builder248261,314600k+Non-prefixed global variable
#319FV Player 8243231,3831k+Non-prefixed function
#320Photo Gallery – Responsive Image Galleries by Supsystic242409120k+Text Domain Mismatch
#321GD Mail Queue24502582700Output is not escaped
#322Cookie Banner for GDPR / CCPA – WPLP Cookie Consent241,2141,9249k+Non-prefixed global variable
#323GG Woo Feed for WooCommerce Shopping Feed on Google and Other Channels244695921k+Non-prefixed global variable
#324Simple Calendar – Google Calendar Plugin242,05359250k+Missing direct file access protection
#325Hummingbird Performance – Cache & Page Speed Optimization for Core Web Vitals | Critical CSS | Minify CSS | Defer CSS Javascript | CDN243,41086670k+Text Domain Mismatch
#326Import and export users and customers241,04035770k+Unsafe printing function
#327Infinite Uploads – Offload Media and Video to Cloud Storage24586722800Direct Query
#328Social Slider Feed – Social Media Feed & Gallery Widgets2492970720k+Non-prefixed global variable
#329InstaWP Connect – 1-click WP Staging & Migration2425381140k+Non-prefixed global variable
#330Joli Table Of Contents246531,7557k+Non-prefixed global variable
#331KiviCare – Clinic & Patient Management System (EHR)242238802k+Direct Query
#332Koko Analytics – Privacy-Friendly WordPress Analytics2416539360k+Short PHP open tag found
#333Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress241,855953100k+Output is not escaped
#334LearnPress – Backup & Migration Tool243854695k+Output is not escaped
#335LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes244141,17610k+Non-prefixed global variable
#336Event Booking Manager for WooCommerce – Registration, RSVP, Calendar & Tickets249692,1407k+Non-prefixed global variable
#337Mailchimp for WooCommerce24523663200k+Non-prefixed global variable
#338MailerPress – Newsletter, email marketing & AI automation248053,9311k+Direct Query
#339Admin Tweaks241,5072061k+Text Domain Mismatch
#340Media Library Folders2488980710k+Text Domain Mismatch
#341MxChat – AI Chatbot & Content Generation for WordPress243,2301,4052k+Text Domain Mismatch
#342Ninja Forms – The Contact Form Builder That Grows With You247491,525600k+Nonce verification recommended
#343Omnipress24169245800Non-prefixed global variable
#344Pagar.me para WooCommerce245491165k+Text Domain Mismatch
#345Participants Database249518947k+SQL query is not prepared
#346Paymob for WooCommerce243482885k+Text Domain Mismatch
#347PDF for Gravity Forms + Drag And Drop Template Builder241,457260400wp function not compatible with requires wp
#348PeproDev Ultimate Invoice243792344k+Output is not escaped
#349PixelYourSite – Your smart PIXEL (TAG) & API Manager241,1602,407500k+Non-prefixed namespace
#350Post Status Notifier Lite24984451700Missing direct file access protection