PluginScore

WordPress.PHP.DevelopmentFunctions.error_log_var_dump

error log var dump

Development or debugging behavior appears in code that may run in production.

medium weight

Why It Shows Up

The scan found logging, debugging, path disclosure, `phpinfo()`, error-reporting changes, or similar development-oriented functions.

Why It Matters

Debug output can leak paths, configuration, request data, stack details, or sensitive runtime information.

How to Fix

  • Remove temporary debugging calls before release.
  • If logging is required, guard it with `WP_DEBUG` or a plugin setting intended for administrators.
  • Never show debug details to unauthenticated visitors or normal front-end users.

Affected Plugins

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#1Plugin Check (PCP)012813210k+Exception output is not escaped
#2Easy WP SMTP – WordPress SMTP and Email Logs: Gmail, Office 365, Outlook, Custom SMTP, and more1532163500k+Direct Query
#3WPtouch – Make your WordPress Website Mobile-Friendly171,46632550k+Text Domain Mismatch
#4Property Hive181,9576,0273k+Missing nonce verification
#5Shopping Cart & eCommerce Store185,45917,2984k+Non-prefixed global variable
#6WP Import Export Lite1873897940k+Non-prefixed global variable
#7Realtyna Organic IDX plugin + WPL Real Estate199473,6532k+Non-prefixed global variable
#8WP Email Template193423502k+Exception output is not escaped
#9Link Library201,9411,39710k+Unsafe printing function
#10Powered Cache – Caching and Optimization for WordPress – Easily Improve PageSpeed & Web Vitals Score201472313k+Exception output is not escaped
#11WPJAM Basic203283564k+Output is not escaped
#12Duplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More212,5721,2771m+Output is not escaped
#13eRoom – Webinar & Meeting Plugin for Zoom, Google Meet, Microsoft Teams211864379k+Non-prefixed global variable
#14EventPrime – Events Calendar, Bookings and Tickets218724,2977k+Non-prefixed global variable
#15Campaign Monitor for WordPress213864612k+Non-prefixed global variable
#16JCH Optimize219531334k+Output is not escaped
#17Landing Page Builder – Coming Soon page, Maintenance Mode, Lead Page, WordPress Landing Pages211,1732,9839k+Non-prefixed global variable
#18Razorpay Quick Payments21399633k+Exception output is not escaped
#19Seamless Donations is Sunset216005142k+Text Domain Mismatch
#20Pay For Post with WooCommerce219601,4741k+Non-prefixed global variable
#21WP Compress – Instant Performance & Speed Optimization213,3493,21810k+Non Singular String Literal Domain
#22WP phpMyAdmin214,5286,43550k+Missing Arg Domain
#23RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login223,6545,0618k+Non-prefixed global variable
#24Directorist: AI-Powered Business Directory, Listings & Classified Ads224432,12920k+Non-prefixed global variable
#25Dynamic QR Code – generator222382086k+Missing direct file access protection
#26Notification Bar, Announcement and Cookie Notice WordPress Plugin – FooBar221,3211,3713k+Non-prefixed global variable
#27InfiniteWP Client222,2861,812200k+Exception output is not escaped
#28oik224891802k+Non Singular String Literal Domain
#29Smart Popup by Supsystic223,17250310k+Non Singular String Literal Domain
#30ShortPixel Image Optimizer – Optimize Images, Convert WebP & AVIF221,044799300k+Non-prefixed global variable
#31NextScripts: Social Networks Auto-Poster222,4081,13330k+Output is not escaped
#32CoDesigner – All in One Elementor WooCommerce Builder224,1317745k+Text Domain Mismatch
#33YaySMTP – WP Mail SMTP with Email Logs, Tracking & Reports2265443510k+Exception output is not escaped
#34BlossomThemes Email Newsletter2333723920k+Output is not escaped
#35CWW Companion233072231k+Output is not escaped
#36DK PDF – WordPress PDF Generator237443353k+Exception output is not escaped
#37FV Flowplayer Video Player231,3111,45420k+Output is not escaped
#38IP Geo Block233995899k+Output is not escaped
#39Jetpack – WP Security, Backup, Speed, & Growth232,8211,3033m+Text Domain Mismatch
#40License Manager for WooCommerce231298196k+Request data is not unslashed
#41Master Slider – Responsive Touch Slider2380040860k+Output is not escaped
#42MStore API – Create Native Android & iOS Apps On The Cloud236187643k+SQL query is not prepared
#43MyWorks Sync for WooCommerce & QuickBooks Online232,2929,1015k+Non-prefixed global variable
#44Next Active Directory Integration236832842k+Exception output is not escaped
#45Ninja Forms – The Contact Form Builder That Grows With You237541,525600k+Nonce verification recommended
#46NitroPack – Performance, Page Speed & Cache Plugin for Core Web Vitals, CDN & Image Optimization23315631100k+Output is not escaped
#47Postie2340726110k+Output is not escaped
#48Pricing Table by Supsystic231,29944710k+Non Singular String Literal Domain
#49SecuPress with Simple SSL – Simple and Performant Security231,6961,59040k+Non-prefixed global variable
#50teachPress237441,5872k+SQL query is not prepared