PluginScore

WordPress.PHP.DevelopmentFunctions.error_log_var_export

error log var export

Development or debugging behavior appears in code that may run in production.

medium weight

Why It Shows Up

The scan found logging, debugging, path disclosure, `phpinfo()`, error-reporting changes, or similar development-oriented functions.

Why It Matters

Debug output can leak paths, configuration, request data, stack details, or sensitive runtime information.

How to Fix

  • Remove temporary debugging calls before release.
  • If logging is required, guard it with `WP_DEBUG` or a plugin setting intended for administrators.
  • Never show debug details to unauthenticated visitors or normal front-end users.

Affected Plugins

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#1Themify Builder95,3042,1365k+Text Domain Mismatch
#2JetBackup – Backup, Restore & Migrate101,563149200k+Exception output is not escaped
#3Shopping Cart & eCommerce Store185,37317,4663k+Non-prefixed global variable
#4Advanced File Manager – Ultimate File Manager for WordPress And Document Library Solution191,218901100k+Exception output is not escaped
#5Matomo Analytics – Powerful, Privacy-First Insights for WordPress191,900877100k+Exception output is not escaped
#6Membership Plugin – Kadence Memberships195,0832,9829k+Text Domain Mismatch
#7SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments195331,14980k+Non-prefixed global variable
#8WPJAM Basic193253464k+Output is not escaped
#9Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC)207362,112900Non-prefixed global variable
#10Event Espresso – Event Registration & Ticketing Sales2012,6982,135600Text Domain Mismatch
#11Brevo – Email, SMS, Web Push, Chat, and more.20460646100k+Request data is not unslashed
#12پلاگین پرداخت دلخواه20584446900Text Domain Mismatch
#13Pix por Piggly (para Woocommerce)205471954k+Exception output is not escaped
#14Powered Cache – Caching and Optimization for WordPress – Easily Improve PageSpeed & Web Vitals Score201472313k+Exception output is not escaped
#15Robin Image Optimizer – Unlimited Image Optimization, WebP & AVIF20556543100k+Output is not escaped
#16Razorpay for WooCommerce20975859100k+Non-prefixed function
#17WP Minify Fix20306380800Output is not escaped
#18Kadence Security – Password, Two Factor Authentication, and Brute Force Protection211,060957700k+Missing Translators Comment
#19Pinpoint Booking System – Version 2216343283k+Missing direct file access protection
#20Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots211,6212,03310k+Direct Query
#21CartFlows – Funnel Builder & Checkout Plugin for WooCommerce21462656200k+Text Domain Mismatch
#22Free Downloads WooCommerce214303594k+Output is not escaped
#23Duplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More212,5721,2771m+Output is not escaped
#24Modular DS: Monitor, update, and backup multiple websites211598240k+Exception output is not escaped
#25OneLogin SAML SSO215073307k+wp function not compatible with requires wp
#26Landing Page Builder – Coming Soon page, Maintenance Mode, Lead Page, WordPress Landing Pages211,1202,9139k+Non-prefixed global variable
#27PeachPay — Payments & Express Checkout for WooCommerce (supports Stripe, PayPal, Square, Authorize.net, NMI)21485813300Missing direct file access protection
#28User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor217031,46340k+Missing Translators Comment
#29SeatReg213121,637400Missing nonce verification
#30Professional Social Sharing Buttons, Icons & Related Posts – Shareaholic2132718110k+Output is not escaped
#31Smart Forms – when you need more than just a contact form217765745k+Output is not escaped
#32URL Shortify – Simple and Easy URL Shortener211,5112,66910k+Non-prefixed global variable
#33Buckaroo Woocommerce Payments Plugin216383212k+Exception output is not escaped
#34Paysera Payment Gateway for WooCommerce211,8681967k+Exception output is not escaped
#35Pay For Post with WooCommerce219581,4771k+Non-prefixed global variable
#36Wordfence Security – Firewall, Malware Scan, and Login Security211,5922,9735m+Output is not escaped
#37WP Compress – Instant Performance & Speed Optimization213,3673,25310k+Non Singular String Literal Domain
#38WP phpMyAdmin214,5286,43550k+Missing Arg Domain
#39wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin211,8121,43270k+Output is not escaped
#40WPScan – WordPress Security Scanner215272658k+Text Domain Mismatch
#4112 Step Meeting List22156593900Non-prefixed global variable
#42Better WordPress Minify224124847k+Non Singular String Literal Domain
#43Clearfy Cache – WordPress optimization plugin, Minify HTML, CSS & JS, Defer222,8541,26950k+Text Domain Mismatch
#44RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login223,6525,1348k+Non-prefixed global variable
#45Database Access with Adminer229832,5531k+Non-prefixed global variable
#46Ebook Store224101,054700Non-prefixed global variable
#47Events Manager – Calendar, Bookings, Tickets, and more!224,7165,69070k+Output is not escaped
#48FireBox Popups – Increase Sales and Grow Your Email List221578267k+Non-prefixed global variable
#49The Innovative Form Builder – IvyForms22750309800Exception output is not escaped
#50Jetpack – WP Security, Backup, Speed, & Growth222,9751,3483m+Text Domain Mismatch