PluginScore

WordPress.Security.EscapeOutput.ExceptionNotEscaped

Exception output is not escaped

An exception message or related exception value is printed without escaping.

critical weight

Why It Shows Up

The scan found exception data being displayed directly in HTML output.

Why It Matters

Exception messages can include file paths, request values, remote API responses, or database details. Printing them raw can expose information or create XSS risk.

How to Fix

  • Use `esc_html()` or another context-appropriate escaping function before displaying exception text.
  • Show a generic user-facing message and log the detailed exception for administrators or developers.
  • Do not print stack traces, paths, or raw remote responses on public pages.

References

WordPress escaping functions

Affected Plugins

RankPluginScoreErrorsWarningsInstallsUpdatedTop Issue
#551weForms – Easy Drag & Drop Contact Form Builder For WordPress2591645010k+Output Not Escaped
#552Secure Gateway for Authorize.net and WooCommerce by Pledged Plugins259071,41810k+Non Prefixed Variable Found
#553Digital Goods (Checkout Field Editor) for WooCommerce Checkout255391,4793k+Non Prefixed Variable Found
#554PDF Builder for WooCommerce. Create invoices,packing slips and more253725032k+Non Prefixed Variable Found
#555Pay with Vipps and MobilePay for WooCommerce258455095k+Output Not Escaped
#556Wordfence Login Security2524841870k+Output Not Escaped
#557WordPress Importer252381102m+Output Not Escaped
#558Super Page Cache – Cloudflare Cache, Page Speed & Core Web Vitals2513735360k+Input Not Sanitized
#559WP Coupons and Deals – WordPress Coupon Plugin259141,4601k+Non Prefixed Variable Found
#560WP Data Access – App Builder for Tables, Forms, Charts, Maps & Dashboards251,4311,27010k+Output Not Escaped
#561WP Review Slider251,1862,2796k+Non Prefixed Variable Found
#562WP Go Maps – Google Map, OpenStreetMap, Leaflet Map254,9961,008300k+Unsafe Printing Function
#563WP Google Review Slider251,3672,58230k+Non Prefixed Variable Found
#564WP Encryption – One Click Free SSL Certificate & SSL / HTTPS Redirect, Security & SSL Scan257271,55450k+Non Prefixed Variable Found
#565Nested Pages2567456090k+Non Prefixed Variable Found
#566WP-Polls2561863940k+Unsafe Printing Function
#567Perfect Images: Regenerate Thumbnails, Image Sizes, WebP & AVIF2515411860k+Non Prefixed Variable Found
#568Smush – Image Optimization, Compression, Lazy Load, WebP & CDN252525661m+Non Prefixed Hookname Found
#569WP Statistics – Simple, privacy-friendly Google Analytics alternative256102,465600k+Non Prefixed Variable Found
#570WP TripAdvisor Review Slider259582,0588k+Non Prefixed Variable Found
#571Team Members Showcase255911,4944k+Non Prefixed Variable Found
#572Backup, Restore and Migrate your sites with XCloner2523886410k+Input Not Sanitized
#573YT Player – Embed and Customize Video Players253,1632611k+Output Not Escaped
#574ActiveCampaign for WooCommerce265411906k+Exception Not Escaped
#575AfterShip Tracking – All-In-One WooCommerce Order Tracking (Free plan available)262862918k+Text Domain Mismatch
#576Blog Floating Button267052409k+Output Not Escaped
#577Booking Manager – Sync WP Booking Calendar – Import Events, Export Bookings to ICS Calendar265262635k+Output Not Escaped
#578Charitable – Donation Plugin for WordPress – Fundraising with Recurring Donations & More269727010k+error log error log
#579Translate WordPress with ConveyThis – AI Multilingual Plugin261592971k+Non Prefixed Variable Found
#580Easy Post Views Count265341,1802k+Non Prefixed Variable Found
#581ezCache2612726910k+Direct Query
#582FuseWP – WordPress User Sync to Email List & Marketing Automation (Mailchimp, Constant Contact, ActiveCampaign etc.)265914162k+Exception Not Escaped
#583Hide Admin Bar Based on User Roles265491,34520k+Non Prefixed Variable Found
#584Klarna for WooCommerce2628450030k+Dynamic Hookname Found
#585Loco Translate264542421m+Output Not Escaped
#586Media File Renamer: Rename for better SEO (AI-Powered)2614817040k+Direct Query
#587Omise Payments263582562k+Output Not Escaped
#588Pressidium Cookie Consent262039510k+Exception Not Escaped
#589Sliced Invoices – WordPress Invoice Plugin266844555k+Output Not Escaped
#590Carousel, Recent Post Slider and Banner Slider265281,4098k+Non Prefixed Variable Found
#591Subscriptions for WooCommerce264275610k+Non Prefixed Variable Found
#592Virtue/Ascend/Pinnacle Toolkit2660530030k+Output Not Escaped
#593Premmerce SEO for WooCommerce265501,2851k+Non Prefixed Variable Found
#594Shipping Method Display Style for WooCommerce265291,3082k+Non Prefixed Variable Found
#595XL NMI Gateway for WooCommerce266954361k+Text Domain Mismatch
#596WP Flashy Marketing Automation264321862k+Text Domain Mismatch
#597Accordions – Responsive Accordion & FAQ Plugin for WordPress275541581k+Text Domain Mismatch
#598Arconix FAQ275522016k+Text Domain Mismatch
#599Church Content – Sermons, Events and More271344104k+Non Prefixed Function Found
#600Custom Scrollbar271841912k+Output Not Escaped