PluginScore

WordPress.PHP.DevelopmentFunctions.prevent_path_disclosure_error_reporting

prevent path disclosure error reporting

Development or debugging behavior appears in code that may run in production.

medium weight

Why It Shows Up

The scan found logging, debugging, path disclosure, `phpinfo()`, error-reporting changes, or similar development-oriented functions.

Why It Matters

Debug output can leak paths, configuration, request data, stack details, or sensitive runtime information.

How to Fix

  • Remove temporary debugging calls before release.
  • If logging is required, guard it with `WP_DEBUG` or a plugin setting intended for administrators.
  • Never show debug details to unauthenticated visitors or normal front-end users.

Affected Plugins

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#151rtMedia for WordPress, BuddyPress and bbPress252932467k+Non-prefixed constant
#152Smart Online Order for Clover251,7441,1481k+Text Domain Mismatch
#153DecaLog259432361k+Exception output is not escaped
#154Demo Importer Plus255823910k+Non-prefixed hook name
#155Docket Cache – Object Cache Accelerator2533348120k+Output is not escaped
#156Events Made Easy255406,4131k+Non-prefixed function
#157Site Kit by Google – Analytics, Search Console, AdSense, Speed251,3182425m+Missing direct file access protection
#158Hardcore Google Fonts Localizer25331261800Text Domain Mismatch
#159Index WP MySQL For Speed2525025550k+Output is not escaped
#160Kadence Central – Site Management, Backups, Security, and Reporting2545121430k+Text Domain Mismatch
#161Joli Table Of Contents256481,7537k+Non-prefixed global variable
#162Knit Pay – Cashfree, Instamojo, Razorpay, PayPal and more254,0191,2652k+Text Domain Mismatch
#163MaxButtons – Create buttons2562640470k+Output is not escaped
#164Media Cloud Sync251,0972751k+Exception output is not escaped
#165Participants Database259418937k+SQL query is not prepared
#166PDF Importer for WPForms25332331400Non-prefixed global variable
#167PDF & Print by BestWebSoft – WordPress Posts and Pages PDF Generator Plugin251,0841,2969k+Non-prefixed global variable
#168Secure Copy Content Protection and Content Locking2564981420k+Output is not escaped
#169Spice Blocks255361,3001k+Non-prefixed global variable
#170Social Media Share Buttons & Social Sharing Icons252,4321,365100k+Unsafe printing function
#171Social Share Icons & Social Share Buttons252,3651,35710k+Output is not escaped
#172Vayu Blocks – Website Builder for the Gutenberg Block Editor251742331k+Text Domain Mismatch
#173VikAppointments Services Booking Calendar259,7595,209500Output is not escaped
#174VikBooking Hotel Booking Engine & PMS2513,2518,3168k+Output is not escaped
#175VikRentCar Car Rental Management System255,5375,0484k+Non-prefixed global variable
#176VikRentItems Flexible Rental Management System254,7674,640600Non-prefixed global variable
#177VikRestaurants Table Reservations and Take-Away2511,6444,932600Output is not escaped
#178weForms – Easy Drag & Drop Contact Form Builder For WordPress2591645010k+Output is not escaped
#179PDF Builder for WooCommerce. Create invoices,packing slips and more253725062k+Non-prefixed global variable
#180WPvivid — Backup, Migration & Staging259031,461900k+Non-prefixed namespace
#181YeeMail — Email Template Builder & Customizer25606222700wp function not compatible with requires wp
#182AfterShip Tracking – All-In-One WooCommerce Order Tracking (Free plan available)262662907k+Text Domain Mismatch
#183CheckView – Form & Checkout Testing26703411k+Direct Query
#184Translate WordPress – Google Language Translator26200317100k+Non-prefixed global variable
#185WP Flashy Marketing Automation264321862k+Text Domain Mismatch
#186BackUpWordPress2724527180k+Non-prefixed global variable
#187Contact Form Generator : Creative form builder for WordPress271,0761,510700Output is not escaped
#188Custom Scrollbar271841912k+Output is not escaped
#189FG PrestaShop to WooCommerce2725294900Unsafe printing function
#190Stream Video Player27220135600Output is not escaped
#191WP Events Manager2717236930k+Non-prefixed hook name
#192WP Activity Log2797218300k+Nonce verification recommended
#193AJAX Login and Registration modal popup + inline form281572613k+Output is not escaped
#194Code Engine – PHP Snippets, AI Functions & Automation for WordPress2812497700Non Singular String Literal Domain
#195Duplicate Post28445257300k+Unsafe printing function
#196FluentSMTP – WP SMTP Plugin with Amazon SES, SendGrid, Mailgun, Postmark, Cloudflare, toSend, Gmail and Any SMTP2811092600k+Missing Translators Comment
#197Pixel Gallery Addons for Elementor – Easy Grid, Creative Gallery, Drag and Drop Grid, Custom Grid Layout, Portfolio Gallery281462594k+Post Not In exclude
#198Jetpack VaultPress287136210k+Missing nonce verification
#199WP YouTube Lyte2820517820k+Non-prefixed global variable
#200WPO365 | SEAMLESS WORDPRESS + MICROSOFT INTEGRATION (WPO365 | LOGIN)2820921710k+Exception output is not escaped