WordPress.PHP.DevelopmentFunctions.error_log_set_error_handler
error log set error handler
Development or debugging behavior appears in code that may run in production.
Why It Shows Up
The scan found logging, debugging, path disclosure, `phpinfo()`, error-reporting changes, or similar development-oriented functions.
Why It Matters
Debug output can leak paths, configuration, request data, stack details, or sensitive runtime information.
How to Fix
- Remove temporary debugging calls before release.
- If logging is required, guard it with `WP_DEBUG` or a plugin setting intended for administrators.
- Never show debug details to unauthenticated visitors or normal front-end users.
Affected Plugins
| Rank | Plugin | Score | Errors | Warnings | Installs | Updated | Top Issue |
|---|---|---|---|---|---|---|---|
| #101 | CheckoutWC Lite | 25 | 1,359 | 850 | 3k+ | Text Domain Mismatch | |
| #102 | Coupon Creator | 25 | 698 | 412 | 1k+ | Output Not Escaped | |
| #103 | DecaLog | 25 | 943 | 236 | 1k+ | Exception Not Escaped | |
| #104 | Docket Cache – Object Cache Accelerator | 25 | 333 | 481 | 20k+ | Output Not Escaped | |
| #105 | FunnelKit – Funnel Builder for WooCommerce Checkout | 25 | 3,278 | 2,574 | 30k+ | Text Domain Mismatch | |
| #106 | Site Kit by Google – Analytics, Search Console, AdSense, Speed | 25 | 1,304 | 242 | 5m+ | missing direct file access protection | |
| #107 | Sitemap by BestWebSoft – WordPress XML Site Map Page Generator Plugin | 25 | 608 | 207 | 20k+ | Text Domain Mismatch | |
| #108 | Nexter Extension – Security, Performance, Code Snippets & Site Toolkit | 25 | 198 | 710 | 10k+ | Recommended | |
| #109 | Tamara Checkout | 25 | 601 | 228 | 2k+ | Exception Not Escaped | |
| #110 | W3 Total Cache | 25 | 617 | 1,345 | 900k+ | Non Prefixed Variable Found | |
| #111 | weForms – Easy Drag & Drop Contact Form Builder For WordPress | 25 | 916 | 450 | 10k+ | Output Not Escaped | |
| #112 | PDF Builder for WooCommerce. Create invoices,packing slips and more | 25 | 372 | 503 | 2k+ | Non Prefixed Variable Found | |
| #113 | WP Go Maps – Google Map, OpenStreetMap, Leaflet Map | 25 | 4,996 | 1,008 | 300k+ | Unsafe Printing Function | |
| #114 | Blog Floating Button | 26 | 705 | 240 | 9k+ | Output Not Escaped | |
| #115 | Charitable – Donation Plugin for WordPress – Fundraising with Recurring Donations & More | 26 | 97 | 270 | 10k+ | error log error log | |
| #116 | Loco Translate | 26 | 454 | 242 | 1m+ | Output Not Escaped | |
| #117 | Pressidium Cookie Consent | 26 | 203 | 95 | 10k+ | Exception Not Escaped | |
| #118 | SP Move Login | 26 | 881 | 215 | 6k+ | Text Domain Mismatch | |
| #119 | BackUpWordPress | 27 | 245 | 271 | 90k+ | Non Prefixed Variable Found | |
| #120 | Login for Google Apps | 27 | 139 | 85 | 10k+ | Exception Not Escaped | |
| #121 | Login Security Solution | 27 | 216 | 154 | 4k+ | Output Not Escaped | |
| #122 | MW WP Form | 27 | 334 | 219 | 200k+ | Output Not Escaped | |
| #123 | Maspik – Ultimate Spam Protection | 28 | 212 | 864 | 30k+ | Missing | |
| #124 | Fluent Support – Helpdesk & Customer Support Ticket System | 28 | 50 | 271 | 10k+ | Direct Query | |
| #125 | WPS Bidouille | 28 | 472 | 215 | 10k+ | Output Not Escaped | |
| #126 | WP Synchro – The Ultimate WordPress Migration Tool | 28 | 243 | 244 | 2k+ | Missing Translators Comment | |
| #127 | PhastPress | 29 | 95 | 52 | 10k+ | Exception Not Escaped | |
| #128 | Paymattic – Secure, Simple Payment & Donation with Subscription Payments, Recurring Donations, Customer Management | 29 | 53 | 496 | 4k+ | Direct Query | |
| #129 | Travelers' Map | 30 | 311 | 155 | 1k+ | Output Not Escaped | |
| #130 | WCPOS – Point of Sale (POS) plugin for WooCommerce | 30 | 77 | 228 | 5k+ | Recommended | |
| #131 | FastDup – Fastest WordPress Migration & Duplicator | 31 | 83 | 66 | 5k+ | wp function not compatible with requires wp | |
| #132 | Activity Logs, User Activity Tracking, Multisite Activity Log from Logtivity | 31 | 122 | 131 | 2k+ | Output Not Escaped | |
| #133 | Query Monitor | 31 | 44 | 273 | 200k+ | Non Prefixed Class Found | |
| #134 | QNAP NAS Backup | 33 | 374 | 70 | 2k+ | Non Singular String Literal Domain | |
| #135 | Meta pixel for WordPress | 34 | 91 | 38 | 400k+ | Exception Not Escaped | |
| #136 | Elementor Website Builder – more than just a page builder | 35 | 46 | 428 | 10m+ | Non Prefixed Variable Found | |
| #137 | Perfecty Push Notifications | 35 | 204 | 213 | 4k+ | Not Prepared | |
| #138 | ReactPress – Create React App for WordPress | 35 | 26 | 43 | 3k+ | Missing Unslash | |
| #139 | Two Factor Authentication | 35 | 108 | 139 | 20k+ | Output Not Escaped | |
| #140 | XServer Migrator | 35 | 39 | 53 | 10k+ | Interpolated Not Prepared | |
| #141 | Ziina | 35 | 8 | 19 | 2k+ | wp redirect wp redirect | |
| #142 | Breadcrumb NavXT | 36 | 102 | 111 | 800k+ | Non Singular String Literal Domain | |
| #143 | Depicter — Popup & Slider Builder | 36 | 130 | 121 | 80k+ | Exception Not Escaped | |
| #144 | Better Find and Replace – AI-Powered Suggestions | 36 | 67 | 129 | 40k+ | missing direct file access protection | |
| #145 | ClickCease Click Fraud Protection | 37 | 30 | 58 | 10k+ | Non Prefixed Class Found | |
| #146 | FluentAffiliate – Affiliate Program Management Suite, Affiliates Manager | 37 | 134 | 23 | 1k+ | Exception Not Escaped | |
| #147 | Accessibility by AllAccessible | 39 | 200 | 82 | 2k+ | Unsafe Printing Function | |
| #148 | All-in-One WP Migration and Backup | 40 | 28 | 61 | 5m+ | Missing | |
| #149 | Debug Bar | 41 | 64 | 25 | 20k+ | Output Not Escaped | |
| #150 | Fluent Booking – The Ultimate Appointments Scheduling, Events Booking, Events Calendar Solution | 42 | 111 | 17 | 20k+ | Exception Not Escaped |
