PluginScore

WordPress.PHP.DevelopmentFunctions.error_log_print_r

error log print r

Development or debugging behavior appears in code that may run in production.

medium weight

Why It Shows Up

The scan found logging, debugging, path disclosure, `phpinfo()`, error-reporting changes, or similar development-oriented functions.

Why It Matters

Debug output can leak paths, configuration, request data, stack details, or sensitive runtime information.

How to Fix

  • Remove temporary debugging calls before release.
  • If logging is required, guard it with `WP_DEBUG` or a plugin setting intended for administrators.
  • Never show debug details to unauthenticated visitors or normal front-end users.

Affected Plugins

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#1BulletProof Security05,0484,94920k+Output is not escaped
#2Live Shopping & Shoppable Videos For WooCommerce079174400Non-prefixed global variable
#3JetBackup – Backup, Restore & Migrate101,567156200k+Exception output is not escaped
#4404 Solution155821,53210k+Non-prefixed class
#5Easy WP SMTP – WordPress SMTP and Email Logs: Gmail SMTP, Office 365, Outlook, Custom SMTP, and more1545166500k+Database parameter is not escaped
#6MDTF – Meta Data and Taxonomies Filter161,5501,9561k+Non-prefixed global variable
#7RestroPress – Online Food Ordering System175353,2341k+Non-prefixed global variable
#8Efí Bank17886553300Exception output is not escaped
#9wpForo Forum174,3063,02620k+Unsafe printing function
#10WPtouch – Make your WordPress Website Mobile-Friendly171,46632550k+Text Domain Mismatch
#11Administrator Z182,061799400Output is not escaped
#12Advanced File Manager – Ultimate File Manager for WordPress And Document Library Solution181,229923100k+Exception output is not escaped
#13Shopping Cart & eCommerce Store188,24018,4783k+Non-prefixed global variable
#14WPPizza – A Restaurant Plugin184,6892,7031k+Text Domain Mismatch
#15GiveWP – Donation Plugin and Fundraising Platform193,4023,555100k+Output is not escaped
#16Go Fetch Jobs (for WP Job Manager)191,4101,741600Non-prefixed global variable
#17Matomo Analytics – Powerful, Privacy-First Insights for WordPress191,993892100k+Exception output is not escaped
#18Netgsm193523481k+Non-prefixed global variable
#19Razorpay Payment Button Plugin19486982k+Exception output is not escaped
#20Really Simple Security – Simple and Performant Security (formerly Really Simple SSL)195303753m+Missing Translators Comment
#21Scrollsequence – Cinematic Scroll Image Animation Plugin198781,5283k+Non-prefixed global variable
#22SendPress Newsletters192,2931,4221k+Output is not escaped
#23SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments195411,14680k+Non-prefixed global variable
#24WPQiNiu七牛云对象存储19138612400Non-prefixed global variable
#25Brizy – Page Builder2058572660k+Output is not escaped
#26Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC)207362,112900Non-prefixed global variable
#27Duplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More202,8741,9881m+Non-prefixed global variable
#28EventPrime – Events Calendar, Bookings, Tickets & AI208464,2247k+Non-prefixed global variable
#29GoUrl Bitcoin Payment Gateway & Paid Downloads & Membership201,832720700Non Singular String Literal Domain
#30MBE eShip205277401k+Non-prefixed global variable
#31Brevo – Email, SMS, Web Push, Chat, and more.20460646100k+Request data is not unslashed
#32Microthemer Lite – Visual Editor to Customize CSS201,0041,69910k+Non-prefixed global variable
#33Nimble Page Builder201,5911,68430k+Missing Arg Domain
#34Shipping for Nova Poshta20598923400Output is not escaped
#35پلاگین پرداخت دلخواه20584446900Text Domain Mismatch
#36Pix por Piggly (para Woocommerce)205471954k+Exception output is not escaped
#37Powered Cache – Caching and Optimization for WordPress – Easily Improve PageSpeed & Web Vitals Score201472313k+Exception output is not escaped
#38Quill Forms | Conversational Multi Step Forms, Surveys & quizzes204003713k+Text Domain Mismatch
#39Razorpay Payment Button Elementor Plugin20479621k+Exception output is not escaped
#40Membership Plugin – Kadence Memberships205,0893,0059k+Text Domain Mismatch
#41Restrict User Access – Ultimate Membership & Content Protection209771,84810k+Non-prefixed global variable
#42Events Manager – OpenStreetMaps20559444600Output is not escaped
#43Booster for WooCommerce – PDF Invoices, Abandoned Cart, Variation Swatches & 100+ Tools207873,41630k+Non-prefixed global variable
#44WP Compress – Instant Performance & Speed Optimization204,2923,69110k+Non Singular String Literal Domain
#45Premium Packages – Sell Digital Products Securely202,0432,2992k+Non-prefixed global variable
#46Backup Migration219991,08180k+Non-prefixed global variable
#47Booking Ultra Pro Appointments Booking Calendar Plugin217612,083400Request data is not unslashed
#48Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots211,6732,18010k+Direct Query
#49Spam protection, Honeypot, Anti-Spam by CleanTalk218351,146200k+Missing nonce verification
#50DELUCKS SEO213621,171300Missing nonce verification