PluginScore

WordPress.PHP.DevelopmentFunctions.error_log_var_export

error log var export

Development or debugging behavior appears in code that may run in production.

medium weight

Why It Shows Up

The scan found logging, debugging, path disclosure, `phpinfo()`, error-reporting changes, or similar development-oriented functions.

Why It Matters

Debug output can leak paths, configuration, request data, stack details, or sensitive runtime information.

How to Fix

  • Remove temporary debugging calls before release.
  • If logging is required, guard it with `WP_DEBUG` or a plugin setting intended for administrators.
  • Never show debug details to unauthenticated visitors or normal front-end users.

Affected Plugins

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#151Enable Media Replace24212276600k+Output is not escaped
#152F12 Profiler24282451500Direct Query
#153Fattura2424312333400Output is not escaped
#154Football Pool241,0857331k+Output is not escaped
#155FV Simpler SEO247663082k+Text Domain Mismatch
#156FV Player 8243231,3831k+Non-prefixed function
#157Simple Calendar – Google Calendar Plugin242,05359250k+Missing direct file access protection
#158Hummingbird Performance – Cache & Page Speed Optimization for Core Web Vitals | Critical CSS | Minify CSS | Defer CSS Javascript | CDN243,41086670k+Text Domain Mismatch
#159Import and export users and customers241,04035770k+Unsafe printing function
#160Infinite Uploads – Offload Media and Video to Cloud Storage24586722800Direct Query
#161Keap Official Opt-in Forms248291,0461k+Non-prefixed global variable
#162InstaWP Connect – 1-click WP Staging & Migration2425381140k+Non-prefixed global variable
#163Joli Table Of Contents246531,7557k+Non-prefixed global variable
#164Koko Analytics – Privacy-Friendly WordPress Analytics2416539360k+Short PHP open tag found
#165Mailjet Email Marketing2443520610k+Unsafe printing function
#166Mang Board WP241,2134,7209k+Non-prefixed global variable
#167Ninja Forms – The Contact Form Builder That Grows With You247491,525600k+Nonce verification recommended
#168PDF for Gravity Forms + Drag And Drop Template Builder241,457260400wp function not compatible with requires wp
#169PDF Generator for WordPress Elementor245132711k+Exception output is not escaped
#170PeproDev Ultimate Invoice243792344k+Output is not escaped
#171Post Status Notifier Lite24984451700Missing direct file access protection
#172Post Affiliate Pro24293335500Nonce verification recommended
#173reGenerate Thumbnails Advanced2422012270k+Unsafe printing function
#174Reviews Feed – Add Testimonials and Customer Reviews From Google Reviews, Yelp, TripAdvisor, and More24141718100k+Non-prefixed global variable
#175Security Plugin, Firewall & Malware Scanner with Auto Removal241,18877030k+Output is not escaped
#176Servebolt Optimizer241,9586811k+Text Domain Mismatch
#177ShortPixel Adaptive Images – WebP, AVIF, CDN, Image Optimization2492632210k+Output is not escaped
#178SiteOrigin Widgets Bundle24606455400k+Output is not escaped
#179Stripe Payment Forms by WP Simple Pay – Accept Credit Card Payments + Subscriptions with Stripe246346529k+Exception output is not escaped
#180Sunshine Photo Cart – Client Photo Gallery & Photo Proofing for Photographers243601,4721k+Nonce verification recommended
#181Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin249382,935200k+Non-prefixed global variable
#182EU VAT Assistant for WooCommerce241,7424955k+Non Singular String Literal Domain
#183WPML Multilingual & Multicurrency for WooCommerce241,4531,618100k+SQL query is not prepared
#184WordLift – AI powered SEO – Schema24278949400Non-prefixed hook name
#185WP-Appbox244183902k+Missing Arg Domain
#186WP Discourse241031141k+Nonce verification recommended
#187WP Layouts243491463k+Text Domain Mismatch
#188WP Recipe Maker2449494250k+Non-prefixed global variable
#189WSMS (formerly WP SMS) – SMS & MMS Notifications with OTP and 2FA for WooCommerce24911,7257k+Non-prefixed hook name
#190WP-Stateless – Google Cloud Storage241,0364824k+Non Singular String Literal Domain
#191WP User Manager – User Profile Builder & Membership2478753910k+Exception output is not escaped
#192Jetpack CRM – Clients, Leads, Invoices, Billing, Email Marketing, & Automation241,2113,15230k+Non-prefixed global variable
#193AF Companion – Starter Sites, Speed Booster & Growth Suite for Professional Publishing256651,48610k+Non-prefixed global variable
#194ATUM WooCommerce Inventory Management and Stock Tracking252,6381,30410k+Non Singular String Literal Domain
#195Breeze Cache25218800400k+Non-prefixed global variable
#196Broken Link Checker25727600500k+Output is not escaped
#197Bulk Edit Categories and Tags – Create Thousands Quickly on the Editor251,0411,0164k+Text Domain Mismatch
#198Bulk Edit and Create User Profiles – WP Sheet Editor259951,0011k+Text Domain Mismatch
#199GSheetConnector for CF7 – Connect Contact Form 7 to Google Sheets and Send Form Submissions in Real Time256141,43140k+Non-prefixed global variable
#200CheckoutWC Lite251,3998523k+Text Domain Mismatch