PluginScore

WordPress.PHP.DevelopmentFunctions.error_log_var_export

error log var export

Development or debugging behavior appears in code that may run in production.

medium weight

Why It Shows Up

The scan found logging, debugging, path disclosure, `phpinfo()`, error-reporting changes, or similar development-oriented functions.

Why It Matters

Debug output can leak paths, configuration, request data, stack details, or sensitive runtime information.

How to Fix

  • Remove temporary debugging calls before release.
  • If logging is required, guard it with `WP_DEBUG` or a plugin setting intended for administrators.
  • Never show debug details to unauthenticated visitors or normal front-end users.

Affected Plugins

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#51The Innovative Form Builder – IvyForms22713250500Exception output is not escaped
#52InfiniteWP Client222,2861,812200k+Exception output is not escaped
#53Import WP – Export and Import CSV and XML files to WordPress225803304k+Exception output is not escaped
#54Jetpack – WP Security, Backup, Speed, & Growth222,9751,3483m+Text Domain Mismatch
#55Mail Baby SMTP22385699600SQL query is not prepared
#56MarketKing — Ultimate WooCommerce Multivendor Marketplace Solution221,1311,844800Non-prefixed global variable
#57Slider, Gallery, and Carousel by MetaSlider – Image Slider, Video Slider22207323500k+Non-prefixed global variable
#58Packeta228013338k+Exception output is not escaped
#59PagBank / PagSeguro Connect para WooCommerce225047574k+Non-prefixed global variable
#60PDF Builder for WPForms22321266900SQL query is not prepared
#61Smart Popup by Supsystic223,17250310k+Non Singular String Literal Domain
#62Post SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App221,5812,326300k+Non-prefixed global variable
#63Prime Mover – Migrate WordPress Website & Backups221,3261,60010k+Non-prefixed global variable
#64PageSpeed Ninja – Cache, Minify, Defer CSS JavaScript, Critical CSS, Optimize Images, Convert WebP229844075k+Unsafe printing function
#65Salon Booking System – Free Version226556202k+Missing direct file access protection
#66Seraphinite Accelerator2259425550k+Output is not escaped
#67ShortPixel Image Optimizer – Optimize Images, Convert WebP & AVIF221,044800300k+Non-prefixed global variable
#68Slim Jetpack222,5861,9472k+Text Domain Mismatch
#69NextScripts: Social Networks Auto-Poster222,4081,13330k+Output is not escaped
#70Customize Feeds for Twitter22921714k+Non-prefixed global variable
#71RapidLoad AI – Optimize Web Vitals Automatically2281840700Nonce verification recommended
#72Search & Replace Everything – Quick and Easy Way to Find and Replace Text, Links221,0441,79720k+Non-prefixed global variable
#73Wenprise WeChatPay Payment Gateway For WooCommerce22443178400Exception output is not escaped
#74ManageWP Worker225075651m+Non-prefixed class
#75WP Umbrella: Update Backup Restore & Monitoring2292191970k+Exception output is not escaped
#76WP Super Minify • Minify, Compress and Cache HTML, CSS & JavaScript221642578k+Non-prefixed constant
#77WP-WebAuthn229573962k+Exception output is not escaped
#78WPSSO Core – Complete Schema Markup and Meta Tags221,4074125k+Missing Translators Comment
#79YaySMTP – WP Mail SMTP with Email Logs, Tracking & Reports2265443510k+Exception output is not escaped
#80Advanced Custom Fields: Extended231,885329100k+Text Domain Mismatch
#81Admin and Site Enhancements (ASE)23136331200k+Nonce verification recommended
#82AI Engine – The Chatbot, AI Framework & MCP for WordPress23408539100k+error log error log
#83Affiliate Super Assistent231,2802671k+Text Domain Mismatch
#84Autoptimize23288191800k+Output is not escaped
#85Kadence Security – Password, Two Factor Authentication, and Brute Force Protection231,053967700k+Missing Translators Comment
#86BlossomThemes Email Newsletter2333723920k+Output is not escaped
#87Business Directory Plugin – Easy Listing Directories for WordPress236111,06310k+Non-prefixed global variable
#88Geo Controller23914501k+Non-prefixed global variable
#89Classified Listing – AI-Powered Classified ads & Business Directory231552,0749k+Non-prefixed global variable
#90Content Egg – Affiliate Product Importer & Price Comparison231,2451,27510k+Non-prefixed global variable
#91DK PDF – WordPress PDF Generator237443353k+Exception output is not escaped
#92Double Opt-In for Contact Form 7 & Avada – Secure, GDPR-Compliant Email Verification236756431k+Unsafe printing function
#93Easy Digital Downloads – eCommerce Payments and Subscriptions made easy233,72310,28340k+Non-prefixed namespace
#94Ecwid by Lightspeed Ecommerce Shopping Cart2333930720k+Missing direct file access protection
#95Error Log Monitor236941,41420k+Non-prefixed global variable
#96Ezoic2343251610k+Output is not escaped
#97Fastcache by Host.it231,327203800Text Domain Mismatch
#98FV Flowplayer Video Player231,3111,45420k+Output is not escaped
#99Hunk Companion232,5476876k+Text Domain Mismatch
#100Iks Menu – WordPress Category Accordion Menu & FAQs236151,29310k+Non-prefixed global variable