PluginScore

WordPress.PHP.DevelopmentFunctions.error_log_print_r

error log print r

Development or debugging behavior appears in code that may run in production.

medium weight

Why It Shows Up

The scan found logging, debugging, path disclosure, `phpinfo()`, error-reporting changes, or similar development-oriented functions.

Why It Matters

Debug output can leak paths, configuration, request data, stack details, or sensitive runtime information.

How to Fix

  • Remove temporary debugging calls before release.
  • If logging is required, guard it with `WP_DEBUG` or a plugin setting intended for administrators.
  • Never show debug details to unauthenticated visitors or normal front-end users.

Affected Plugins

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#101Directorist: AI-Powered Business Directory, Listings & Classified Ads224432,12920k+Non-prefixed global variable
#102Download Manager222,2901,301100k+Output is not escaped
#103Diverse Solutions IDX Real Estate Listings & MLS Search227456051k+Heredoc Output Not Escaped
#104Dynamic QR Code – generator222382086k+Missing direct file access protection
#105EleSpare – News, Magazine and Blog Addons for Elementor227331,42310k+Non-prefixed global variable
#106Events Manager – Calendar, Bookings, Tickets, and more!224,7225,62170k+Output is not escaped
#107Falang multilanguage for WordPress227167691k+Output is not escaped
#108Finale Lite – Sales Countdown Timer & Discount for WooCommerce221,0314514k+Output is not escaped
#109Notification Bar, Announcement and Cookie Notice WordPress Plugin – FooBar221,3211,3713k+Non-prefixed global variable
#110Five Star Restaurant Menu and Food Ordering227526095k+Output is not escaped
#111FunnelKit Payment Gateway for Stripe WooCommerce2224432120k+Input is not sanitized
#112GeoDirectory – WP Business Directory Plugin and Classified Listings Directory224,4663,97210k+Output is not escaped
#113Anti-Malware Security and Brute-Force Firewall22544965100k+Output is not escaped
#114HeadSpace2 SEO229403603k+Text Domain Mismatch
#115Hesabfa Accounting22467718400Text Domain Mismatch
#116Heureka22557254400Exception output is not escaped
#117InfiniteWP Client222,2861,812200k+Exception output is not escaped
#118JCC Payment Gateway for Woocommerce222,2731,136600Text Domain Mismatch
#119Jim Soft Swiss QR Invoice22263392400Non-prefixed global variable
#120LearnPress – WordPress LMS Plugin for Create and Sell Online Courses222,3613,38470k+Non-prefixed global variable
#121Leyka222533,4452k+Request data is not unslashed
#122Custom Login Page Customizer – Login Designer225881,45530k+Non-prefixed global variable
#123Mail Baby SMTP22385699600SQL query is not prepared
#124MailOptin – Popup, Optin Forms & Email Newsletters for Mailchimp, HubSpot, AWeber Etc.222,6192,45310k+Output is not escaped
#125Modula Image Gallery – Photo Grid & Video Gallery22474436100k+Text Domain Mismatch
#126Molongui Authorship – Author Boxes, Guest Authors & Co-Authors for WordPress229191,23010k+Output is not escaped
#127Moloni229023562k+Missing Arg Domain
#128myCred Toolkit with AI Assistant – Scale Your Loyalty & Gamification Rewards With Integrations221,5881,172400Output is not escaped
#129NinjaFirewall (WP Edition) – Advanced Security Plugin and Firewall221,2652,065100k+Non-prefixed global variable
#130WP OAuth Server (OAuth Authentication)221893473k+Non-prefixed function
#131oik224891802k+Non Singular String Literal Domain
#132PagBank / PagSeguro Connect para WooCommerce225047434k+Non-prefixed global variable
#133PAYCOMET for WooCommerce221,2064232k+Text Domain Mismatch
#134PDF Builder for WPForms22321266900SQL query is not prepared
#135Smart Popup by Supsystic223,17250310k+Non Singular String Literal Domain
#136Post SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App221,5812,326300k+Non-prefixed global variable
#137Prime Mover – Migrate WordPress Website & Backups221,3261,60010k+Non-prefixed global variable
#138Product Catalog Feed by PixelYourSite225813578k+Output is not escaped
#139Quick Contact Form222606231k+Non-prefixed function
#140RabbitLoader Cache: Optimize your Website for Speed222411632k+Output is not escaped
#141RealPress – Real Estate Plugin226041,167500Non-prefixed global variable
#142Restrict User Access – Ultimate Membership & Content Protection229771,84010k+Non-prefixed global variable
#143SALESmanago & Leadoo226454291k+Unsafe printing function
#144Salon Booking System – Free Version226556202k+Missing direct file access protection
#145Sellsy22586490400Non Singular String Literal Domain
#146ShortPixel Image Optimizer – Optimize Images, Convert WebP & AVIF221,044799300k+Non-prefixed global variable
#147Simple Job Board226341,35510k+Non-prefixed global variable
#148Slick Popup: Contact Form 7 Popup Plugin222,3223162k+Text Domain Mismatch
#149Slim Jetpack222,5861,9472k+Text Domain Mismatch
#150SNS Count Cache229181208k+Non Singular String Literal Domain