PluginScore

WordPress.PHP.DevelopmentFunctions.error_log_trigger_error

error log trigger error

Development or debugging behavior appears in code that may run in production.

medium weight

Why It Shows Up

The scan found logging, debugging, path disclosure, `phpinfo()`, error-reporting changes, or similar development-oriented functions.

Why It Matters

Debug output can leak paths, configuration, request data, stack details, or sensitive runtime information.

How to Fix

  • Remove temporary debugging calls before release.
  • If logging is required, guard it with `WP_DEBUG` or a plugin setting intended for administrators.
  • Never show debug details to unauthenticated visitors or normal front-end users.

Affected Plugins

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#51Seamless Donations is Sunset216005142k+Text Domain Mismatch
#52SeatReg213121,637400Missing nonce verification
#53Professional Social Sharing Buttons, Icons & Related Posts – Shareaholic2132718110k+Output is not escaped
#54Smart Forms – when you need more than just a contact form217765745k+Output is not escaped
#55Accept Stripe Payments2137388420k+Missing nonce verification
#56TotalPoll for Polls and Contests211,3661551k+Text Domain Mismatch
#57UPC/EAN/GTIN Barcode Generator/Importer21776311500Exception output is not escaped
#58Buckaroo Woocommerce Payments Plugin215843262k+Exception output is not escaped
#59Wise Chat214705065k+Output is not escaped
#60Paysera Payment Gateway for WooCommerce211,8661957k+Exception output is not escaped
#61Wordfence Security – Firewall, Malware Scan, and Login Security211,5922,9735m+Output is not escaped
#62WP-Lister Lite for eBay216,6975,1292k+Output is not escaped
#63WP phpMyAdmin214,5286,43550k+Missing Arg Domain
#64wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin211,8111,43270k+Output is not escaped
#65WPScan – WordPress Security Scanner215272658k+Text Domain Mismatch
#6612 Step Meeting List22156593900Non-prefixed global variable
#67Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots221,6072,02010k+Direct Query
#68Better WordPress Minify224124848k+Non Singular String Literal Domain
#69Cleanup Action Scheduler225451,3061k+Non-prefixed global variable
#70Clearfy Cache – WordPress optimization plugin, Minify HTML, CSS & JS, Defer222,8581,27050k+Text Domain Mismatch
#71Accept PayPal Payments using Contact Form 722359127600Text Domain Mismatch
#72RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login223,6535,0848k+Non-prefixed global variable
#73Dynamic QR Code – generator222382086k+Missing direct file access protection
#74easyReservations225,3072,480800Text Domain Mismatch
#75Events Manager – Calendar, Bookings, Tickets, and more!224,7135,66070k+Output is not escaped
#76File Manager Pro – Filester22565391100k+Request data is not unslashed
#77Five Star Restaurant Menu and Food Ordering227526095k+Output is not escaped
#78FunnelKit Payment Gateway for Stripe WooCommerce2224432120k+Input is not sanitized
#79GeoDirectory – WP Business Directory Plugin and Classified Listings Directory224,4663,97210k+Output is not escaped
#80Heureka22557254400Exception output is not escaped
#81The Innovative Form Builder – IvyForms22713250600Exception output is not escaped
#82InfiniteWP Client222,2861,812200k+Exception output is not escaped
#83Import WP – Export and Import CSV and XML files to WordPress225803304k+Exception output is not escaped
#84Mail Baby SMTP22385699600SQL query is not prepared
#85Slider, Gallery, and Carousel by MetaSlider – Image Slider, Video Slider22207323500k+Non-prefixed global variable
#86myCred Addons – Ultimate myCred Modules To Support WordPress Gamification and Loyalty Rewards222,3441,320400Output is not escaped
#87Packeta228013338k+Exception output is not escaped
#88Post SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App221,5812,326300k+Non-prefixed global variable
#89PageSpeed Ninja – Cache, Minify, Defer CSS JavaScript, Critical CSS, Optimize Images, Convert WebP229844075k+Unsafe printing function
#90Quick Contact Form222606231k+Non-prefixed function
#91ShortPixel Image Optimizer – Optimize Images, Convert WebP & AVIF221,044800300k+Non-prefixed global variable
#92Slim Jetpack222,5861,9472k+Text Domain Mismatch
#93Customize Feeds for Twitter22921714k+Non-prefixed global variable
#94Uncanny Toolkit for LearnDash2253999420k+Output is not escaped
#95RapidLoad AI – Optimize Web Vitals Automatically2281840700Nonce verification recommended
#96UpStream: a Project Management Plugin for WordPress22683703600Non-prefixed global variable
#97Welcart e-Commerce2210,37810,93110k+Text Domain Mismatch
#98WCFM Marketplace – Multivendor Marketplace for WooCommerce221,9341,96610k+Non-prefixed global variable
#99WCFM Membership – WooCommerce Memberships for Multivendor Marketplace2255967510k+Non-prefixed global variable
#100Wenprise WeChatPay Payment Gateway For WooCommerce22443178400Exception output is not escaped