PluginScore

WordPress.PHP.DevelopmentFunctions.error_log_trigger_error

error log trigger error

Development or debugging behavior appears in code that may run in production.

medium weight

Why It Shows Up

The scan found logging, debugging, path disclosure, `phpinfo()`, error-reporting changes, or similar development-oriented functions.

Why It Matters

Debug output can leak paths, configuration, request data, stack details, or sensitive runtime information.

How to Fix

  • Remove temporary debugging calls before release.
  • If logging is required, guard it with `WP_DEBUG` or a plugin setting intended for administrators.
  • Never show debug details to unauthenticated visitors or normal front-end users.

Affected Plugins

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#1JetBackup – Backup, Restore & Migrate101,563149200k+Exception output is not escaped
#2RestroPress – Online Food Ordering System175243,1551k+Non-prefixed global variable
#3Efí Bank17886553400Exception output is not escaped
#4Podlove Podcast Publisher182,3541,4333k+Output is not escaped
#5Property Hive181,9576,0273k+Missing nonce verification
#6Shopping Cart & eCommerce Store185,37317,4663k+Non-prefixed global variable
#7Block Slider – Responsive Image Slider, Video Slider & Post Slider195551,2913k+Non-prefixed global variable
#8Advanced File Manager – Ultimate File Manager for WordPress And Document Library Solution191,218901100k+Exception output is not escaped
#9Go Fetch Jobs (for WP Job Manager)191,4101,741700Non-prefixed global variable
#10Matomo Analytics – Powerful, Privacy-First Insights for WordPress191,900877100k+Exception output is not escaped
#11Razorpay Payment Button Plugin19486982k+Exception output is not escaped
#12Membership Plugin – Kadence Memberships195,0832,9829k+Text Domain Mismatch
#13Scrollsequence – Cinematic Scroll Image Animation Plugin198781,5284k+Non-prefixed global variable
#14WP Import Export Lite1973797940k+Non-prefixed global variable
#15WPJAM Basic193253464k+Output is not escaped
#16AweBooking – Hotel Booking System203095141k+Non-prefixed global variable
#17Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC)207362,112900Non-prefixed global variable
#18Download Monitor204231,36480k+Non-prefixed hook name
#19Event Espresso – Event Registration & Ticketing Sales2012,6982,135600Text Domain Mismatch
#20GiveWP – Donation Plugin and Fundraising Platform203,4103,554100k+Output is not escaped
#21Leaky Paywall20322789600Nonce verification recommended
#22Shipping for Nova Poshta20598923500Output is not escaped
#23Pix por Piggly (para Woocommerce)205471954k+Exception output is not escaped
#24Powered Cache – Caching and Optimization for WordPress – Easily Improve PageSpeed & Web Vitals Score201472313k+Exception output is not escaped
#25Razorpay Payment Button Elementor Plugin20479621k+Exception output is not escaped
#26Robin Image Optimizer – Unlimited Image Optimization, WebP & AVIF20556543100k+Output is not escaped
#27SpeakOut! Email Petitions208509942k+Missing nonce verification
#28Events Manager – OpenStreetMaps20559444700Output is not escaped
#29Razorpay for WooCommerce20975859100k+Non-prefixed function
#30WP Minify Fix20306380800Output is not escaped
#31Store Locator WordPress212,4941,62810k+Text Domain Mismatch
#32Kadence Security – Password, Two Factor Authentication, and Brute Force Protection211,060957700k+Missing Translators Comment
#33Pinpoint Booking System – Version 2216343283k+Missing direct file access protection
#34Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots211,6212,03810k+Direct Query
#35Captcha Them All213003235k+Output is not escaped
#36CartFlows – Funnel Builder & Checkout Plugin for WooCommerce21462656200k+Text Domain Mismatch
#37DELUCKS SEO213621,171400Missing nonce verification
#38Duplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More212,5721,2771m+Output is not escaped
#39Envo Extra2187860020k+Text Domain Mismatch
#40FileOrganizer – WordPress File Manager21536241200k+unlink unlink
#41Front End Users217192,759400Non-prefixed global variable
#42Frontend Dashboard21384945500Non-prefixed function
#43Leyka212573,4462k+Request data is not unslashed
#44MotoPress Hotel Booking213,0671,03710k+Text Domain Mismatch
#45Landing Page Builder – Coming Soon page, Maintenance Mode, Lead Page, WordPress Landing Pages211,1202,9139k+Non-prefixed global variable
#46Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction211,9535,29710k+Non-prefixed hook name
#47Razorpay for Gravity Forms2141147600Exception output is not escaped
#48Razorpay Quick Payments21399632k+Exception output is not escaped
#49Five Star Restaurant Reservations – WordPress Booking Plugin211,1011,15910k+Output is not escaped
#50Seamless Donations is Sunset216005142k+Text Domain Mismatch