PluginScore

WordPress.PHP.DevelopmentFunctions.error_log_var_export

error log var export

Development or debugging behavior appears in code that may run in production.

medium weight

Why It Shows Up

The scan found logging, debugging, path disclosure, `phpinfo()`, error-reporting changes, or similar development-oriented functions.

Why It Matters

Debug output can leak paths, configuration, request data, stack details, or sensitive runtime information.

How to Fix

  • Remove temporary debugging calls before release.
  • If logging is required, guard it with `WP_DEBUG` or a plugin setting intended for administrators.
  • Never show debug details to unauthenticated visitors or normal front-end users.

Affected Plugins

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#1Themify Builder95,3892,2455k+Text Domain Mismatch
#2JetBackup – Backup, Restore & Migrate101,567156200k+Exception output is not escaped
#3404 Solution155821,53210k+Non-prefixed class
#4Shopping Cart & eCommerce Store177,45317,8663k+Non-prefixed global variable
#5Advanced File Manager – Ultimate File Manager for WordPress And Document Library Solution181,229923100k+Exception output is not escaped
#6Matomo Analytics – Powerful, Privacy-First Insights for WordPress191,993892100k+Exception output is not escaped
#7SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments195431,15080k+Non-prefixed global variable
#8Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC)207362,112900Non-prefixed global variable
#9Duplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More202,8781,9881m+Non-prefixed global variable
#10Brevo – Email, SMS, Web Push, Chat, and more.20460646100k+Request data is not unslashed
#11پلاگین پرداخت دلخواه20584446900Text Domain Mismatch
#12Pix por Piggly (para Woocommerce)205471954k+Exception output is not escaped
#13Powered Cache – Caching and Optimization for WordPress – Easily Improve PageSpeed & Web Vitals Score201472313k+Exception output is not escaped
#14Membership Plugin – Kadence Memberships205,0893,0059k+Text Domain Mismatch
#15Robin Image Optimizer – Unlimited Image Optimization, WebP & AVIF20556543100k+Output is not escaped
#16WP Compress – Instant Performance & Speed Optimization204,2923,69110k+Non Singular String Literal Domain
#17WP Minify Fix20306380800Output is not escaped
#18Kadence Security – Password, Two Factor Authentication, and Brute Force Protection211,060959700k+Missing Translators Comment
#19Pinpoint Booking System – Version 2216343283k+Missing direct file access protection
#20Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots211,6742,18010k+Direct Query
#21Spam protection, Honeypot, Anti-Spam by CleanTalk218351,146200k+Missing nonce verification
#22Event Espresso – Event Registration & Ticketing Sales2112,7102,136600Text Domain Mismatch
#23Modular DS: Monitor, update, and backup multiple websites211998240k+Exception output is not escaped
#24OneLogin SAML SSO215073307k+wp function not compatible with requires wp
#25Landing Page Builder – Coming Soon page, Maintenance Mode, Lead Page, WordPress Landing Pages211,1202,9138k+Non-prefixed global variable
#26User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor217411,49540k+Non-prefixed global variable
#27SeatReg213521,862300Missing nonce verification
#28Professional Social Sharing Buttons, Icons & Related Posts – Shareaholic2132718110k+Output is not escaped
#29Smart Forms – when you need more than just a contact form217765745k+Output is not escaped
#30URL Shortify – Simple and Easy URL Shortener211,5092,73710k+Non-prefixed global variable
#31Buckaroo Payments for WooCommerce216943512k+Exception output is not escaped
#32Razorpay for WooCommerce21980864100k+Non-prefixed function
#33Pay For Post with WooCommerce219581,4771k+Non-prefixed global variable
#34Wordfence Security – Firewall, Malware Scan, and Login Security211,8933,2925m+Output is not escaped
#35WP phpMyAdmin214,5286,43540k+Missing Arg Domain
#36wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin211,8291,53460k+Output is not escaped
#37WPScan – WordPress Security Scanner215272658k+Text Domain Mismatch
#38Frontend Admin by DynamiApps225,9433,2328k+Text Domain Mismatch
#39Better WordPress Minify224124847k+Non Singular String Literal Domain
#40CartFlows – Funnel Builder & Checkout Plugin for WooCommerce22459710200k+Non-prefixed global variable
#41Church Admin221,5604,215900Direct Query
#42Clearfy Cache – WordPress optimization plugin, Minify HTML, CSS & JS, Defer222,8541,26940k+Text Domain Mismatch
#43RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login223,6555,1607k+Non-prefixed global variable
#44Database Access with Adminer229832,5531k+Non-prefixed global variable
#45Free Downloads WooCommerce224283524k+Output is not escaped
#46Easy Digital Downloads – eCommerce Payments and Subscriptions made easy223,7138,57340k+Non-prefixed namespace
#47Ebook Store224061,076700Non-prefixed global variable
#48Events Manager – Calendar, Bookings, Tickets, Appointments and more!224,7305,71460k+Output is not escaped
#49Fastcache by Host.it221,3352061k+Text Domain Mismatch
#50FireBox – WooCommerce Popup Builder, Exit Intent Popup, Email Optin & Cart Abandonment221538477k+Non-prefixed global variable