WordPress.PHP.DevelopmentFunctions.error_log_var_export
error log var export
Development or debugging behavior appears in code that may run in production.
Why It Shows Up
The scan found logging, debugging, path disclosure, `phpinfo()`, error-reporting changes, or similar development-oriented functions.
Why It Matters
Debug output can leak paths, configuration, request data, stack details, or sensitive runtime information.
How to Fix
- Remove temporary debugging calls before release.
- If logging is required, guard it with `WP_DEBUG` or a plugin setting intended for administrators.
- Never show debug details to unauthenticated visitors or normal front-end users.
Affected Plugins
| Rank | Plugin | Score | Errors | Warnings | Installs | Added | Updated | Top Issue |
|---|---|---|---|---|---|---|---|---|
| #401 | whatwedo ACF Cleaner | 61 | 8 | 20 | 800 | Input is not validated | ||
| #402 | Estonian Shipping Methods for WooCommerce | 64 | 97 | 16 | 1k+ | Text Domain Mismatch | ||
| #403 | USPS Simple Shipping for Woocommerce | 65 | 20 | 11 | 8k+ | Exception output is not escaped | ||
| #404 | WPAdmin AWS CDN | 66 | 161 | 42 | 500 | Text Domain Mismatch | ||
| #405 | Debug Log Manager – Conveniently Monitor and Inspect Errors | 66 | 33 | 44 | 10k+ | Input is not validated | ||
| #406 | News Magazine X Core | 68 | 63 | 30 | 5k+ | Missing Translators Comment | ||
| #407 | Automatic Domain Changer | 69 | 37 | 14 | 10k+ | Text Domain Mismatch | ||
| #408 | Black Bar | 69 | 78 | 39 | 500 | Short PHP open tag found | ||
| #409 | Starter Templates & Sites Pack by ThemeGrill | 72 | 28 | 51 | 70k+ | Non-prefixed hook name | ||
| #410 | EXMAGE – WordPress Image Links | 73 | 14 | 34 | 7k+ | Missing Arg Domain | ||
| #411 | Pelecard Gateway | 76 | 295 | 54 | 400 | Text Domain Mismatch | ||
| #412 | Responsive Mobile-Friendly Tooltip | 79 | 25 | 14 | 600 | Missing Arg Domain | ||
| #413 | Post Meta Inspector | 83 | 6 | 1 | 2k+ | Unsafe printing function | ||
| #414 | Debug Bar Actions and Filters Addon | 86 | 6 | 4 | 400 | Forbidden PHP function found | ||
| #415 | Object Cache 4 everyone | 87 | 2 | 65 | 5k+ | Non-prefixed function | ||
| #416 | RateMyAgent Official | 89 | 1 | 158 | 400 | Non-prefixed namespace | ||
| #417 | Conditional Blocks – Advanced Content Visibility Control for WordPress | 90 | 10 | 22 | 2k+ | Missing direct file access protection | ||
| #418 | LLMs.txt and LLMs-Full.txt Generator | 94 | 14 | 9 | 4k+ | Non-prefixed global variable | ||
| #419 | Wufoo Shortcode | 97 | 3 | 3 | 10k+ | Missing direct file access protection |
