WordPress.PHP.DevelopmentFunctions.error_log_print_r
error log print r
Development or debugging behavior appears in code that may run in production.
Why It Shows Up
The scan found logging, debugging, path disclosure, `phpinfo()`, error-reporting changes, or similar development-oriented functions.
Why It Matters
Debug output can leak paths, configuration, request data, stack details, or sensitive runtime information.
How to Fix
- Remove temporary debugging calls before release.
- If logging is required, guard it with `WP_DEBUG` or a plugin setting intended for administrators.
- Never show debug details to unauthenticated visitors or normal front-end users.
Affected Plugins
| Rank | Plugin | Score | Errors | Warnings | Installs | Updated | Top Issue |
|---|---|---|---|---|---|---|---|
| #551 | WP Edit | 33 | 337 | 137 | 40k+ | Unsafe Printing Function | |
| #552 | AyeCode Connect | 34 | 178 | 253 | 10k+ | Recommended | |
| #553 | Reviews Widgets for Google, Yelp & TripAdvisor | 34 | 274 | 212 | 10k+ | Output Not Escaped | |
| #554 | Forms: 3rd-Party Integration | 34 | 234 | 112 | 5k+ | Output Not Escaped | |
| #555 | Garden Gnome Package | 34 | 116 | 51 | 4k+ | Text Domain Mismatch | |
| #556 | Multi Step Form | 34 | 277 | 136 | 9k+ | Output Not Escaped | |
| #557 | Ni WooCommerce Custom Order Status | 34 | 256 | 139 | 2k+ | Text Domain Mismatch | |
| #558 | Payoneer Checkout | 34 | 168 | 41 | 6k+ | Exception Not Escaped | |
| #559 | Search Engine Insights for Google Search Console | 34 | 174 | 113 | 2k+ | Output Not Escaped | |
| #560 | TaxJar – Sales Tax Automation for WooCommerce | 34 | 236 | 170 | 5k+ | Text Domain Mismatch | |
| #561 | PostNL for WooCommerce | 34 | 587 | 104 | 3k+ | Text Domain Mismatch | |
| #562 | Integration for WooCommerce and Zoho CRM, Books, Invoice, Inventory, Bigin | 34 | 230 | 154 | 2k+ | Output Not Escaped | |
| #563 | Email Template Designer – WP HTML Mail | 34 | 62 | 80 | 20k+ | badly named files | |
| #564 | Wp Favs – Plugin Manager | 34 | 238 | 153 | 3k+ | Text Domain Mismatch | |
| #565 | Embed Plus for YouTube Gallery, Livestream and Lazy Loading with Facades | 34 | 571 | 195 | 100k+ | Output Not Escaped | |
| #566 | zipMoney(Zip Co) Payments Plugin for WooCommerce | 34 | 147 | 70 | 2k+ | Text Domain Mismatch | |
| #567 | Advanced Custom Fields: Image Aspect Ratio Crop Field | 35 | 70 | 37 | 20k+ | Text Domain Mismatch | |
| #568 | Ad Widget for WordPress | 35 | 68 | 14 | 2k+ | Output Not Escaped | |
| #569 | Akismet Anti-spam: Spam Protection | 35 | 33 | 99 | 6m+ | Non Prefixed Variable Found | |
| #570 | Basic Google Maps Placemarks | 35 | 189 | 80 | 3k+ | Output Not Escaped | |
| #571 | bbPress Notify (No-Spam) | 35 | 62 | 66 | 2k+ | wp function not compatible with requires wp | |
| #572 | C3 Cloudfront Cache Controller | 35 | 109 | 60 | 3k+ | Non Singular String Literal Domain | |
| #573 | CF7 Submissions – Securely Store Contact Form 7 Data and Attachments, Reply to the Sender and more | 35 | 16 | 119 | 2k+ | Non Prefixed Variable Found | |
| #574 | Cloudflare | 35 | 27 | 85 | 200k+ | Non Prefixed Namespace Found | |
| #575 | Core Framework | 35 | 70 | 62 | 10k+ | Text Domain Mismatch | |
| #576 | CrowdSec | 35 | 130 | 119 | 2k+ | Output Not Escaped | |
| #577 | Datafeedr Product Sets | 35 | 602 | 206 | 5k+ | Output Not Escaped | |
| #578 | Duplica – Duplicate Posts, Pages, Custom Posts or Users | 35 | 14 | 31 | 2k+ | Non Prefixed Variable Found | |
| #579 | EnvíaloSimple: Email Marketing y Newsletters | 35 | 147 | 250 | 2k+ | Recommended | |
| #580 | EWWW Image Optimizer | 35 | 225 | 729 | 1m+ | Direct Query | |
| #581 | Iframely – WP media embeds, cards and blocks | 35 | 136 | 43 | 2k+ | Unsafe Printing Function | |
| #582 | Imsanity | 35 | 32 | 29 | 200k+ | Direct Query | |
| #583 | InPost PL | 35 | 2 | 925 | 10k+ | Non Prefixed Variable Found | |
| #584 | Woody Code Snippets – Insert PHP, CSS, JS, and Header/Footer Scripts | 35 | 64 | 91 | 60k+ | Output Not Escaped | |
| #585 | Instapage Plugin | 35 | 220 | 45 | 5k+ | Output Not Escaped | |
| #586 | iPages – FlipBook Image & PDF Viewer | 35 | 467 | 177 | 2k+ | Text Domain Mismatch | |
| #587 | Lead Form Builder & Contact Form | 35 | 400 | 345 | 9k+ | Output Not Escaped | |
| #588 | Less PHP Compiler | 35 | 163 | 47 | 3k+ | Exception Not Escaped | |
| #589 | Plugin Ongkos Kirim JNE Tiki Sicepat Wahana J&T POS for Woocommerce | 35 | 117 | 144 | 2k+ | Output Not Escaped | |
| #590 | OSM Map Widget for Elementor | 35 | 183 | 14 | 9k+ | Text Domain Mismatch | |
| #591 | Paytrail for WooCommerce | 35 | 28 | 46 | 3k+ | Non Prefixed Variable Found | |
| #592 | Perfecty Push Notifications | 35 | 204 | 213 | 4k+ | Not Prepared | |
| #593 | Post Content Shortcodes | 35 | 205 | 56 | 2k+ | Output Not Escaped | |
| #594 | Print, PDF, Email by PrintFriendly | 35 | 220 | 29 | 20k+ | Unsafe Printing Function | |
| #595 | ReactPress – Create React App for WordPress | 35 | 26 | 43 | 3k+ | Missing Unslash | |
| #596 | Real Time Validation for Gravity Forms | 35 | 185 | 30 | 2k+ | Output Not Escaped | |
| #597 | ReOrder Posts within Categories | 35 | 39 | 207 | 7k+ | Non Prefixed Variable Found | |
| #598 | Product Feed for Google Shopping, Microsoft Advertising and 40+ Channels for WooCommerce Merchant | 35 | 83 | 76 | 2k+ | Output Not Escaped | |
| #599 | SiteGround Migrator | 35 | 113 | 74 | 70k+ | Missing Arg Domain | |
| #600 | Sitekit | 35 | 122 | 8 | 3k+ | Output Not Escaped |