WordPress.PHP.DevelopmentFunctions.error_log_trigger_error
error log trigger error
Development or debugging behavior appears in code that may run in production.
Why It Shows Up
The scan found logging, debugging, path disclosure, `phpinfo()`, error-reporting changes, or similar development-oriented functions.
Why It Matters
Debug output can leak paths, configuration, request data, stack details, or sensitive runtime information.
How to Fix
- Remove temporary debugging calls before release.
- If logging is required, guard it with `WP_DEBUG` or a plugin setting intended for administrators.
- Never show debug details to unauthenticated visitors or normal front-end users.
Affected Plugins
| Rank | Plugin | Score | Errors | Warnings | Installs | Added | Updated | Top Issue |
|---|---|---|---|---|---|---|---|---|
| #301 | Arconix FAQ | 27 | 552 | 201 | 6k+ | Text Domain Mismatch | ||
| #302 | Church Content – Sermons, Events and More | 27 | 134 | 410 | 4k+ | Non-prefixed function | ||
| #303 | Custom Scrollbar | 27 | 184 | 191 | 2k+ | Output is not escaped | ||
| #304 | Cyrlitera – Transliteration of Links and File Names | 27 | 453 | 204 | 40k+ | Output is not escaped | ||
| #305 | CM Tooltip Glossary | 27 | 611 | 188 | 7k+ | Output is not escaped | ||
| #306 | FG Joomla to WordPress | 27 | 278 | 101 | 7k+ | Unsafe printing function | ||
| #307 | Gravity Forms + Stripe | 27 | 368 | 210 | 600 | Output is not escaped | ||
| #308 | Hester Core | 27 | 253 | 103 | 10k+ | Output is not escaped | ||
| #309 | Ray Enterprise Translation | 27 | 87 | 606 | 8k+ | Non-prefixed global variable | ||
| #310 | Login Security Solution | 27 | 216 | 154 | 4k+ | Output is not escaped | ||
| #311 | Quick Paypal Payments | 27 | 101 | 303 | 1k+ | Non-prefixed function | ||
| #312 | Simple Download Monitor | 27 | 218 | 273 | 20k+ | Output is not escaped | ||
| #313 | Content Pilot – Autoblogging & Affiliate Marketing Suite | 27 | 299 | 269 | 900 | Output is not escaped | ||
| #314 | Worthy – VG WORT Integration für WordPress | 27 | 1,343 | 773 | 1k+ | Output is not escaped | ||
| #315 | Ultimate Addons for SiteOrigin | 28 | 525 | 189 | 7k+ | Text Domain Mismatch | ||
| #316 | Code Engine – PHP Snippets, AI Functions & Automation for WordPress | 28 | 124 | 101 | 700 | Non Singular String Literal Domain | ||
| #317 | Database Cleaner | 28 | 137 | 297 | 10k+ | Direct Query | ||
| #318 | FAPI Member | 28 | 279 | 153 | 500 | Exception output is not escaped | ||
| #319 | Geo Mashup | 28 | 775 | 232 | 1k+ | Text Domain Mismatch | ||
| #320 | Kama Thumbnail | 28 | 80 | 47 | 9k+ | Output is not escaped | ||
| #321 | Laposta Signup Basic | 28 | 275 | 66 | 2k+ | Output is not escaped | ||
| #322 | Notification – Custom Notifications and Alerts for WordPress | 28 | 186 | 219 | 10k+ | Non-prefixed global variable | ||
| #323 | Store Hours for WooCommerce | 28 | 525 | 60 | 2k+ | Output is not escaped | ||
| #324 | Redis Object Cache | 28 | 151 | 103 | 400k+ | Exception output is not escaped | ||
| #325 | Terms descriptions | 28 | 222 | 423 | 1k+ | Non-prefixed function | ||
| #326 | WeeConnectPay – Clover Payment Gateway for WooCommerce | 28 | 179 | 171 | 500 | Exception output is not escaped | ||
| #327 | WP Synchro – The Ultimate WordPress Migration Tool | 28 | 243 | 244 | 2k+ | Missing Translators Comment | ||
| #328 | Attribute Stock for WooCommerce – Shared Stock & Variable Quantities (Lite Version) | 29 | 481 | 313 | 2k+ | Text Domain Mismatch | ||
| #329 | Advanced Shipping Rates for WooCommerce: Flexible Table Rate Shipping Rules | 29 | 185 | 504 | 2k+ | Non-prefixed global variable | ||
| #330 | FluentSMTP – WP SMTP Plugin with Amazon SES, SendGrid, MailGun, Postmark, Google and Any SMTP Provider | 29 | 74 | 78 | 600k+ | Missing Translators Comment | ||
| #331 | Gianism | 29 | 395 | 154 | 700 | Text Domain Mismatch | ||
| #332 | Laposta WooCommerce | 29 | 96 | 115 | 500 | Non-prefixed global variable | ||
| #333 | Meow Gallery | 29 | 113 | 182 | 10k+ | Direct Query | ||
| #334 | Page Restrict for WooCommerce | 29 | 579 | 374 | 700 | Text Domain Mismatch | ||
| #335 | Social Engine | 29 | 133 | 90 | 600 | Exception output is not escaped | ||
| #336 | SQLite Database Integration | 29 | 161 | 89 | 3k+ | Exception output is not escaped | ||
| #337 | SureForms – Drag & Drop Contact Form & Form Builder, Payment Form, Survey, Quiz & Calculator | 29 | 336 | 198 | 500k+ | Text Domain Mismatch | ||
| #338 | Wenprise Alipay Gateway For WooCommerce | 29 | 113 | 68 | 700 | Exception output is not escaped | ||
| #339 | Sofortueberweisung Gateway for Woocommerce | 29 | 104 | 71 | 700 | Output is not escaped | ||
| #340 | WP Popular Posts | 29 | 77 | 300 | 100k+ | Non-prefixed global variable | ||
| #341 | WP Subscribe | 29 | 79 | 79 | 8k+ | Non-prefixed class | ||
| #342 | WPComplete | 29 | 383 | 333 | 1k+ | Output is not escaped | ||
| #343 | Analytics Insights – Google Analytics Dashboard for WordPress | 30 | 241 | 170 | 10k+ | Unsafe printing function | ||
| #344 | Sliding Cart for WooCommerce by FunnelKit – Skip Cart & Reach WooCommerce Checkout Faster | 30 | 306 | 434 | 30k+ | Non-prefixed global variable | ||
| #345 | Classified Listing Toolkits | 30 | 43 | 1,859 | 4k+ | Non-prefixed global variable | ||
| #346 | Contact Form 7 – PayPal & Stripe Add-on | 30 | 385 | 233 | 7k+ | Unsafe printing function | ||
| #347 | Laposta Signup Embed | 30 | 88 | 19 | 1k+ | Exception output is not escaped | ||
| #348 | Rublon Multi-Factor Authentication (MFA) | 30 | 216 | 160 | 500 | Output is not escaped | ||
| #349 | Travelers' Map | 30 | 311 | 155 | 1k+ | Output is not escaped | ||
| #350 | Urvanov Syntax Highlighter | 30 | 221 | 87 | 3k+ | Output is not escaped |
