PluginScore

WordPress.PHP.DevelopmentFunctions.error_log_trigger_error

error log trigger error

Development or debugging behavior appears in code that may run in production.

medium weight

Why It Shows Up

The scan found logging, debugging, path disclosure, `phpinfo()`, error-reporting changes, or similar development-oriented functions.

Why It Matters

Debug output can leak paths, configuration, request data, stack details, or sensitive runtime information.

How to Fix

  • Remove temporary debugging calls before release.
  • If logging is required, guard it with `WP_DEBUG` or a plugin setting intended for administrators.
  • Never show debug details to unauthenticated visitors or normal front-end users.

Affected Plugins

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#1JetBackup – Backup, Restore & Migrate101,567156200k+Exception output is not escaped
#2RestroPress – Online Food Ordering System175363,2361k+Non-prefixed global variable
#3Efí Bank17886553300Exception output is not escaped
#4Shopping Cart & eCommerce Store177,45317,8663k+Non-prefixed global variable
#5Advanced File Manager – Ultimate File Manager for WordPress And Document Library Solution181,229923100k+Exception output is not escaped
#6Block Slider – Responsive Image Slider, Video Slider & Post Slider195551,2913k+Non-prefixed global variable
#7GiveWP – Donation Plugin and Fundraising Platform193,4223,570100k+Output is not escaped
#8Go Fetch Jobs (for WP Job Manager)191,4101,741600Non-prefixed global variable
#9Matomo Analytics – Powerful, Privacy-First Insights for WordPress191,993892100k+Exception output is not escaped
#10Scrollsequence – Cinematic Scroll Image Animation Plugin198781,5283k+Non-prefixed global variable
#11AweBooking – Hotel Booking System203095141k+Non-prefixed global variable
#12Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC)207362,112900Non-prefixed global variable
#13Download Monitor204231,36780k+Non-prefixed hook name
#14Shipping for Nova Poshta20598923400Output is not escaped
#15Pix por Piggly (para Woocommerce)205471954k+Exception output is not escaped
#16Powered Cache – Caching and Optimization for WordPress – Easily Improve PageSpeed & Web Vitals Score201472313k+Exception output is not escaped
#17Razorpay Payment Button Plugin20486942k+Exception output is not escaped
#18Razorpay Payment Button Elementor Plugin20479621k+Exception output is not escaped
#19Membership Plugin – Kadence Memberships205,0893,0059k+Text Domain Mismatch
#20Robin Image Optimizer – Unlimited Image Optimization, WebP & AVIF20556543100k+Output is not escaped
#21Events Manager – OpenStreetMaps20559444600Output is not escaped
#22WP Minify Fix20306380800Output is not escaped
#23Kadence Security – Password, Two Factor Authentication, and Brute Force Protection211,060959700k+Missing Translators Comment
#24Pinpoint Booking System – Version 2216343283k+Missing direct file access protection
#25Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots211,6582,18010k+Direct Query
#26Captcha Them All213003235k+Output is not escaped
#27DELUCKS SEO213621,171300Missing nonce verification
#28Envo Extra2187760020k+Text Domain Mismatch
#29Event Espresso – Event Registration & Ticketing Sales2112,7102,136600Text Domain Mismatch
#30FileOrganizer – WordPress File Manager21549261200k+unlink unlink
#31Front End Users217192,759400Non-prefixed global variable
#32Leyka212573,4462k+Request data is not unslashed
#33Landing Page Builder – Coming Soon page, Maintenance Mode, Lead Page, WordPress Landing Pages211,1202,9138k+Non-prefixed global variable
#34Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction211,9945,33110k+Non-prefixed hook name
#35Razorpay for Gravity Forms2141147500Exception output is not escaped
#36Razorpay Quick Payments21399632k+Exception output is not escaped
#37Five Star Restaurant Reservations – WordPress Booking Plugin211,1011,15910k+Output is not escaped
#38Seamless Donations is Sunset216005142k+Text Domain Mismatch
#39SeatReg213461,834300Missing nonce verification
#40Professional Social Sharing Buttons, Icons & Related Posts – Shareaholic2132718110k+Output is not escaped
#41Smart Forms – when you need more than just a contact form217765745k+Output is not escaped
#42Accept Stripe Payments2137389120k+Missing nonce verification
#43TotalPoll for Polls and Contests211,3661551k+Text Domain Mismatch
#44UPC/EAN/GTIN Barcode Generator/Importer21776311500Exception output is not escaped
#45Buckaroo Payments for WooCommerce216943512k+Exception output is not escaped
#46WCFM Marketplace – Multivendor Marketplace for WooCommerce211,9482,10810k+Non-prefixed global variable
#47Wise Chat214705155k+Output is not escaped
#48Razorpay for WooCommerce21980864100k+Non-prefixed function
#49Wordfence Security – Firewall, Malware Scan, and Login Security211,8933,2925m+Output is not escaped
#50WP Import Export Lite2155633140k+Exception output is not escaped