PluginScore

WordPress.PHP.DevelopmentFunctions.error_log_var_export

error log var export

Development or debugging behavior appears in code that may run in production.

medium weight

Why It Shows Up

The scan found logging, debugging, path disclosure, `phpinfo()`, error-reporting changes, or similar development-oriented functions.

Why It Matters

Debug output can leak paths, configuration, request data, stack details, or sensitive runtime information.

How to Fix

  • Remove temporary debugging calls before release.
  • If logging is required, guard it with `WP_DEBUG` or a plugin setting intended for administrators.
  • Never show debug details to unauthenticated visitors or normal front-end users.

Affected Plugins

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#101Joli FAQ SEO – WordPress FAQ Plugin231,0831,526700Non-prefixed global variable
#102Justified Gallery235891,4178k+Non-prefixed global variable
#103Masteriyo LMS – LMS Course Builder, Quizzes & Certificates231902,1225k+Non-prefixed global variable
#104Link Whisper Free233,8825,30330k+Text Domain Mismatch
#105MasterStudy LMS WordPress Plugin – for Online Courses and Education231,4194,87510k+Non-prefixed global variable
#106Media Library Assistant231,1313,75970k+Nonce verification recommended
#107MPG – Multiple Page Generator, Bulk Landing Pages & Programmatic SEO234855802k+Missing nonce verification
#108MyWorks Sync for WooCommerce & QuickBooks Online232,2929,1015k+Non-prefixed global variable
#109Next Active Directory Integration236832842k+Exception output is not escaped
#110Ocean Extra231,4942,107500k+Non-prefixed global variable
#111Patchstack – WordPress & Plugins Security2310748950k+Missing nonce verification
#112Pricing Table by Supsystic231,29944710k+Non Singular String Literal Domain
#113Revive.so – Bulk Rewrite and Republish Blog Posts23332228700Text Domain Mismatch
#114SecuPress with Simple SSL – Simple and Performant Security231,6971,60140k+Non-prefixed global variable
#115Seraphinite Post .DOCX Source231,156110900Output is not escaped
#116Image Optimizer, Resizer and CDN – Sirv236161,0041k+Output is not escaped
#117Site Reviews231,62660460k+Output is not escaped
#118ThemeHunk Customizer233,9685826k+Text Domain Mismatch
#119Trinity Audio – Text to Speech AI audio player to convert content into audio231192272k+Non-prefixed global variable
#120Ultimate Fields23371458600Alternative PHP tag found
#121Product Options and Price Calculation Formulas for WooCommerce – Uni CPO232,5141,9291k+Output is not escaped
#122W3 Total Cache23307678900k+Non-prefixed global variable
#123Cart PDF for WooCommerce235311721k+Exception output is not escaped
#124WP BackItUp Community Edition232579896k+Non-prefixed global variable
#125Lead Form Data Collection to CRM232111,698400Non-prefixed global variable
#126WP-Lister Lite for Amazon233,0614,177800Output is not escaped
#127WP Migrate Lite – Migration Made Easy23369255200k+Exception output is not escaped
#128Shield Security – Smart Bot Blocking, Brute-Force Login Protection & File Scanning231,11820240k+Missing Translators Comment
#129WP STAGING – WordPress Backup, Restore, Migration & Clone231,5041,567100k+Non-prefixed global variable
#130WPCal.io – Easy Meeting Scheduler23694595900Direct Query
#131Yatra – Travel Booking & Tour Operator Software232,2263,997600Non-prefixed global variable
#132404 Solution244861,33810k+Non-prefixed class
#133A2 Optimized WP – Turbocharge and secure your WordPress site2427123160k+Missing Arg Domain
#134AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress245,2341,4647k+Output is not escaped
#135Ad Inserter – Ad Manager & AdSense Ads244,260812300k+Output is not escaped
#136Affiliates Manager241,2686538k+Unsafe printing function
#137Backuply – Backup, Restore, Migrate and Clone24704551700k+Non-prefixed global variable
#138Product Feed Manager For WooCommerce – Sell on 200+ Online Marketplaces242,3173,37510k+slow db query meta key
#139Arigato Autoresponder and Newsletter241,318769500Text Domain Mismatch
#140Kognetiks Chatbot for WordPress246511,486600Non-prefixed global variable
#141Church Admin241,5544,207900Direct Query
#142CleanTalk Anti-Spam. Spam Firewall & Bot protection248251,079200k+Missing nonce verification
#143Smart Online Order for Clover241,7461,2461k+Text Domain Mismatch
#144Contact Form by Supsystic241,9136336k+Non Singular String Literal Domain
#145WPBot – ChatBot Conversational Forms241,2541,2262k+Text Domain Mismatch
#146Custom CSS247036571k+Output is not escaped
#147WP Customer Area243,30694110k+Text Domain Mismatch
#148Defender Security – Malware Scanner, Login Security & Firewall2430651880k+Non-prefixed namespace
#149Easy Invoice – Invoice Generator, PDF Quotes & Payments241,3662,013500Non-prefixed global variable
#150Email Subscribers & Newsletters – Email Marketing, Post Notifications & Newsletter Plugin for WordPress246521,49560k+Non-prefixed hook name