PluginScore

WordPress.PHP.DevelopmentFunctions.error_log_var_export

error log var export

Development or debugging behavior appears in code that may run in production.

medium weight

Why It Shows Up

The scan found logging, debugging, path disclosure, `phpinfo()`, error-reporting changes, or similar development-oriented functions.

Why It Matters

Debug output can leak paths, configuration, request data, stack details, or sensitive runtime information.

How to Fix

  • Remove temporary debugging calls before release.
  • If logging is required, guard it with `WP_DEBUG` or a plugin setting intended for administrators.
  • Never show debug details to unauthenticated visitors or normal front-end users.

Affected Plugins

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#201Cryptocurrency Payment Gateway251,963589400Text Domain Mismatch
#202DecaLog259432361k+Exception output is not escaped
#203Docket Cache – Object Cache Accelerator2533348120k+Output is not escaped
#204Photo Gallery by FooGallery : Responsive Image Gallery, Masonry Gallery & Carousel258761,798100k+Non-prefixed global variable
#205Gift Cards (Gift Vouchers and Packages) (WooCommerce Supported)25501,0431k+Non-prefixed global variable
#206WPBruiser {no- Captcha anti-Spam}2564625910k+Non Singular String Literal Domain
#207Site Kit by Google – Analytics, Search Console, AdSense, Speed251,3042425m+Missing direct file access protection
#208MaxButtons – Create buttons2562640470k+Output is not escaped
#209Media Cloud Sync251,0952741k+Exception output is not escaped
#210Nexter Extension – Security, Performance, Code Snippets & Site Toolkit2519871210k+Nonce verification recommended
#211Notifications for Forms & WordPress Actions253092821k+Text Domain Mismatch
#212PDF Importer for WPForms25332329400Non-prefixed global variable
#213PDF & Print by BestWebSoft – WordPress Posts and Pages PDF Generator Plugin251,0841,2969k+Non-prefixed global variable
#214Post Snippets – Custom WordPress Code Snippets Customizer258081,65420k+Non-prefixed global variable
#215QuadMenu – Mega Menu252,12845510k+Output is not escaped
#216Quttera ThreatSign – Web Malware Scanner for WordPress2533447110k+Non-prefixed global variable
#217reSmush.it : The original free image compressor and optimizer plugin2515569100k+Output is not escaped
#218Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin2595873860k+Text Domain Mismatch
#219Smart Image Resize for WooCommerce255824047k+Text Domain Mismatch
#220Stylish Cost Calculator – Quote Generator, Lead Gen & Price Estimator256481,0211k+Output is not escaped
#221Tamara Checkout256012282k+Exception output is not escaped
#222TemplateSpare – 1000+ WordPress Starter Templates & Full Site Migration Tool | 1-Click Import/Export & No-Code Builder257051,58710k+Non-prefixed global variable
#223Vayu Blocks – Website Builder for the Gutenberg Block Editor251742331k+Text Domain Mismatch
#224Bulk Edit Products for WooCommerce – WP Sheet Editor2595796810k+Text Domain Mismatch
#225Bulk Edit Coupons for WooCommerce – WP Sheet Editor251,022982500Text Domain Mismatch
#226PDF Builder for WooCommerce. Create invoices,packing slips and more253725032k+Non-prefixed global variable
#227WordPress Importer252381102m+Output is not escaped
#228Super Page Cache – Cloudflare Cache, Page Speed & Core Web Vitals2513735360k+Input is not sanitized
#229WP Review Slider251,1862,2796k+Non-prefixed global variable
#230WP Photo Album Plus2541,80710k+Direct Query
#231WP Popups – WordPress Popup builder2544034230k+Output is not escaped
#232Bulk Edit Posts and Products in Spreadsheet259349448k+Text Domain Mismatch
#233SlimStat Analytics251,17787070k+Exception output is not escaped
#234Smush – Image Optimization, Compression, Lazy Load, WebP & CDN252445681m+Non-prefixed hook name
#235WP Statistics – Simple, privacy-friendly Google Analytics alternative256102,465600k+Non-prefixed global variable
#236WP Super Cache258009891m+Output is not escaped
#237WPvivid — Backup, Migration & Staging259001,461900k+Non-prefixed namespace
#238Backup, Restore and Migrate your sites with XCloner2523886410k+Input is not sanitized
#239YeeMail — Email Template Builder & Customizer25606222600wp function not compatible with requires wp
#240ActiveCampaign for WooCommerce265411906k+Exception output is not escaped
#241Event Monster – Event Manager, Ticket Booking & Registration26781781600Non-prefixed global variable
#242ezCache2612728810k+Direct Query
#243FV Antispam26332239900Output is not escaped
#244Icegram Collect – Easy Form, Lead Collection and Subscription plugin264232922k+Output is not escaped
#245Image SEO – AI-Driven Image SEO Optimizer263503271k+Text Domain Mismatch
#246Kirki – Freeform Page Builder, Website Builder & Customizer26192799500k+Nonce verification recommended
#247Landing Page Cat – Coming Soon & Maintenance Pages2691180600Non-prefixed class
#248Pressidium Cookie Consent262039510k+Exception output is not escaped
#249SP Move Login268812156k+Text Domain Mismatch
#250SV Proven Expert26747380900Output is not escaped