WordPress.PHP.DevelopmentFunctions.error_log_set_error_handler
error log set error handler
Development or debugging behavior appears in code that may run in production.
Why It Shows Up
The scan found logging, debugging, path disclosure, `phpinfo()`, error-reporting changes, or similar development-oriented functions.
Why It Matters
Debug output can leak paths, configuration, request data, stack details, or sensitive runtime information.
How to Fix
- Remove temporary debugging calls before release.
- If logging is required, guard it with `WP_DEBUG` or a plugin setting intended for administrators.
- Never show debug details to unauthenticated visitors or normal front-end users.
Affected Plugins
| Rank | Plugin | Score | Errors | Warnings | Installs | Added | Updated | Top Issue |
|---|---|---|---|---|---|---|---|---|
| #101 | Custom CSS | 24 | 703 | 657 | 1k+ | Output is not escaped | ||
| #102 | Easy Form Builder by WhiteStudio – Drag & Drop Form Builder | 24 | 212 | 433 | 1k+ | Nonce verification recommended | ||
| #103 | Event Tickets and Registration | 24 | 3,407 | 4,218 | 90k+ | Non-prefixed global variable | ||
| #104 | Simple Calendar – Google Calendar Plugin | 24 | 2,147 | 611 | 50k+ | Missing direct file access protection | ||
| #105 | Kirki – Freeform Page Builder, Website Builder & Customizer | 24 | 222 | 814 | 500k+ | Exception output is not escaped | ||
| #106 | Mang Board WP | 24 | 1,213 | 4,720 | 8k+ | Non-prefixed global variable | ||
| #107 | Nexter Extension – Security, Performance, Code Snippets & Site Toolkit | 24 | 193 | 771 | 10k+ | Nonce verification recommended | ||
| #108 | PDF for Gravity Forms + Drag And Drop Template Builder | 24 | 1,457 | 260 | 400 | wp function not compatible with requires wp | ||
| #109 | Database Manager – WP Adminer | 24 | 1,005 | 2,752 | 20k+ | Non-prefixed global variable | ||
| #110 | PixelYourSite – Your smart PIXEL (TAG) & API Manager | 24 | 1,232 | 2,433 | 500k+ | Non-prefixed namespace | ||
| #111 | Product Catalog Simple | 24 | 1,555 | 1,982 | 1k+ | Output is not escaped | ||
| #112 | Post Affiliate Pro | 24 | 293 | 335 | 500 | Nonce verification recommended | ||
| #113 | SecuPress with Simple SSL – Simple and Performant Security | 24 | 1,695 | 1,600 | 40k+ | Non-prefixed global variable | ||
| #114 | ShortPixel Adaptive Images – WebP, AVIF, CDN, Image Optimization | 24 | 926 | 322 | 10k+ | Output is not escaped | ||
| #115 | Slideshow Gallery LITE | 24 | 896 | 414 | 5k+ | Output is not escaped | ||
| #116 | Stripe Payment Forms by WP Simple Pay – Accept Credit Card Payments + Subscriptions with Stripe | 24 | 634 | 652 | 9k+ | Exception output is not escaped | ||
| #117 | Sunshine Photo Cart – Client Photo Gallery & Photo Proofing for Photographers | 24 | 361 | 1,483 | 1k+ | Nonce verification recommended | ||
| #118 | wallee | 24 | 331 | 220 | 400 | Exception output is not escaped | ||
| #119 | EU VAT Assistant for WooCommerce | 24 | 1,742 | 495 | 5k+ | Non Singular String Literal Domain | ||
| #120 | WPML Multilingual & Multicurrency for WooCommerce | 24 | 1,599 | 1,691 | 100k+ | SQL query is not prepared | ||
| #121 | WP Discourse | 24 | 103 | 114 | 1k+ | Nonce verification recommended | ||
| #122 | WP Travel Engine – Tour Booking Plugin – Tour Operator Software | 24 | 2,030 | 5,704 | 20k+ | Non-prefixed global variable | ||
| #123 | WPeMatico RSS Feed Fetcher | 24 | 1,378 | 587 | 10k+ | Output is not escaped | ||
| #124 | WPIDE – File Manager & Code Editor | 24 | 612 | 1,402 | 40k+ | Non-prefixed global variable | ||
| #125 | Jetpack CRM – Clients, Leads, Invoices, Billing, Email Marketing, & Automation | 24 | 1,211 | 3,153 | 30k+ | Non-prefixed global variable | ||
| #126 | CheckoutWC Lite – Conversion optimized WooCommerce checkout | 25 | 1,416 | 854 | 2k+ | Text Domain Mismatch | ||
| #127 | Coupon Creator | 25 | 698 | 412 | 1k+ | Output is not escaped | ||
| #128 | DecaLog | 25 | 943 | 236 | 1k+ | Exception output is not escaped | ||
| #129 | Docket Cache – Object Cache Accelerator | 25 | 333 | 481 | 20k+ | Output is not escaped | ||
| #130 | FunnelKit – Funnel Builder for WooCommerce Checkout | 25 | 3,164 | 2,624 | 30k+ | Text Domain Mismatch | ||
| #131 | Site Kit by Google – Analytics, Search Console, AdSense, Speed | 25 | 1,318 | 242 | 5m+ | Missing direct file access protection | ||
| #132 | Sitemap by BestWebSoft – WordPress XML Site Map Page Generator Plugin | 25 | 608 | 207 | 20k+ | Text Domain Mismatch | ||
| #133 | Image SEO – AI-Driven Image SEO Optimizer | 25 | 350 | 328 | 1k+ | Text Domain Mismatch | ||
| #134 | Media Cloud Sync | 25 | 1,095 | 274 | 1k+ | Exception output is not escaped | ||
| #135 | Participants Database | 25 | 941 | 893 | 7k+ | SQL query is not prepared | ||
| #136 | Smart Image Resize for WooCommerce | 25 | 582 | 404 | 7k+ | Text Domain Mismatch | ||
| #137 | Tamara Checkout | 25 | 601 | 228 | 2k+ | Exception output is not escaped | ||
| #138 | Taskbuilder – Project Management & Task Management Tool With Kanban Board | 25 | 128 | 4,376 | 800 | Non-prefixed global variable | ||
| #139 | weForms – Easy Drag & Drop Contact Form Builder For WordPress | 25 | 916 | 450 | 10k+ | Output is not escaped | ||
| #140 | PDF Builder for WooCommerce. Create invoices,packing slips and more | 25 | 372 | 504 | 2k+ | Non-prefixed global variable | ||
| #141 | WP Go Maps – Google Map, OpenStreetMap, Leaflet Map | 25 | 4,996 | 1,020 | 300k+ | Unsafe printing function | ||
| #142 | SlimStat Analytics | 25 | 1,177 | 870 | 70k+ | Exception output is not escaped | ||
| #143 | YeeMail — Email Template Builder & Customizer | 25 | 606 | 222 | 700 | wp function not compatible with requires wp | ||
| #144 | AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress | 26 | 245 | 225 | 6k+ | Exception output is not escaped | ||
| #145 | Charitable – Donation & Fundraising Platform (Donation Forms, Recurring Donations & Fundraising Campaigns) | 26 | 98 | 269 | 10k+ | error log error log | ||
| #146 | FG PrestaShop to WooCommerce | 26 | 254 | 94 | 900 | Unsafe printing function | ||
| #147 | Fluent Support – Helpdesk & Customer Support Ticket System | 26 | 92 | 272 | 10k+ | Direct Query | ||
| #148 | WANotifier for Forms and Actions | 26 | 309 | 280 | 1k+ | Text Domain Mismatch | ||
| #149 | Pressidium Cookie Consent | 26 | 203 | 95 | 10k+ | Exception output is not escaped | ||
| #150 | SP Move Login | 26 | 881 | 215 | 6k+ | Text Domain Mismatch |