PluginScore

WordPress.PHP.DevelopmentFunctions.error_log_var_dump

error log var dump

Development or debugging behavior appears in code that may run in production.

medium weight

Why It Shows Up

The scan found logging, debugging, path disclosure, `phpinfo()`, error-reporting changes, or similar development-oriented functions.

Why It Matters

Debug output can leak paths, configuration, request data, stack details, or sensitive runtime information.

How to Fix

  • Remove temporary debugging calls before release.
  • If logging is required, guard it with `WP_DEBUG` or a plugin setting intended for administrators.
  • Never show debug details to unauthenticated visitors or normal front-end users.

Affected Plugins

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#101SiteGuard WP Plugin24359350500k+Output is not escaped
#102Sunshine Photo Cart – Client Photo Gallery & Photo Proofing for Photographers243601,4721k+Nonce verification recommended
#103Tutor LMS – eLearning and online course solution243284,409100k+Non-prefixed global variable
#104Ultimate Maps by Supsystic241,03437410k+Non Singular String Literal Domain
#105Video Conferencing with Zoom241,10544010k+Unsafe printing function
#106VikRentItems Flexible Rental Management System244,7554,639600Non-prefixed global variable
#107Vimeography: Vimeo Video Gallery WordPress Plugin24982125k+Nonce verification recommended
#108WCMultiShipping — Mondial Relay, Inpost & Chronopost for WooCommerce247334995k+Output is not escaped
#109pensopay Payments243962461k+Output is not escaped
#110EU VAT Assistant for WooCommerce241,7424955k+Non Singular String Literal Domain
#111European VAT Compliance Assistant for WooCommerce245153173k+Output is not escaped
#112WPML Multilingual & Multicurrency for WooCommerce241,4531,618100k+SQL query is not prepared
#113WP-Appbox244183902k+Missing Arg Domain
#114WP RSS Aggregator – RSS Import, Feed to Post, Autoblogging, AI Content241,77739440k+Text Domain Mismatch
#115WP Travel Engine – Tour Booking Plugin – Tour Operator Software242,0125,68920k+Non-prefixed global variable
#116WP User Manager – User Profile Builder & Membership2478753910k+Exception output is not escaped
#117Jetpack CRM – Clients, Leads, Invoices, Billing, Email Marketing, & Automation241,2113,15230k+Non-prefixed global variable
#118Booking Package251,6973,97710k+Missing nonce verification
#119CheckoutWC Lite – Conversion optimized WooCommerce checkout251,4168543k+Text Domain Mismatch
#120Colissimo shipping methods for WooCommerce251,75555710k+Text Domain Mismatch
#121Smash Balloon Social Post Feed – Simple Social Feeds for WordPress25554982200k+Output is not escaped
#122Events Made Easy255216,3241k+Non-prefixed function
#123Photo Gallery by FooGallery : Responsive Image Gallery, Masonry Gallery & Carousel258761,798100k+Non-prefixed global variable
#124Simple Giveaways – Grow your business, email lists and traffic with contests259562,384400Non-prefixed global variable
#125Media Cloud Sync251,0952741k+Exception output is not escaped
#126Multibanco / MB Way / Payshop / Cofidis Pay (by LUSOPAY) for WooCommerce25492216400Text Domain Mismatch
#127Tourfic – AI Powered Travel Booking, Hotel Booking & Car Rental WordPress Plugin251192,7042k+Non-prefixed global variable
#128Social Media Share Buttons & Social Sharing Icons252,4331,383100k+Unsafe printing function
#129VikBooking Hotel Booking Engine & PMS2513,2448,3148k+Output is not escaped
#130VikRentCar Car Rental Management System255,5375,0484k+Non-prefixed global variable
#131PDF Builder for WooCommerce. Create invoices,packing slips and more253725032k+Non-prefixed global variable
#132Product Table for WooCommerce251838965k+Non-prefixed global variable
#133WP Google Review Slider251,3662,58430k+Non-prefixed global variable
#134Wp Social Login and Register Social Counter258073890k+Non-prefixed global variable
#135WP TripAdvisor Review Slider251,0632,5828k+Non-prefixed global variable
#136WPvivid — Backup, Migration & Staging259001,461900k+Non-prefixed namespace
#137AI Content Writing Assistant261,069516700Text Domain Mismatch
#138Database for Contact Form 7, WPforms, Elementor forms2631748960k+Non-prefixed global variable
#139FlagShip WooCommerce Shipping26495188400Non Singular String Literal Domain
#140WP Flashy Marketing Automation264321862k+Text Domain Mismatch
#141Integration for HubSpot and Contact Form 7, WPForms, Elementor, Ninja Forms277203675k+Text Domain Mismatch
#142WP Zoho for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms – CRM, Bigin276923813k+Text Domain Mismatch
#143VOD Infomaniak2779738520k+Output is not escaped
#144AForms — Form Builder for Price Calculator & Cost Estimation28564953k+Text Domain Mismatch
#145AJAX Login and Registration modal popup + inline form281572613k+Output is not escaped
#146Integration for Constant Contact and Contact Form 7, WPForms, Elementor, Ninja Forms28632351800Text Domain Mismatch
#147Integration for Mailchimp and Contact Form 7, WPForms, Elementor, Ninja Forms286493579k+Text Domain Mismatch
#148Void Contact Form 7 Widget For Elementor Page Builder282796610k+Text Domain Mismatch
#149Code Engine – PHP Snippets, AI Functions & Automation for WordPress2812597700Non Singular String Literal Domain
#150Database Cleaner2813929410k+Direct Query