PluginScore

WordPress.Security.EscapeOutput.OutputNotEscaped

Output is not escaped

Dynamic data is printed to the page without an escaping function for the output context.

critical weight

Why It Shows Up

WordPress Coding Standards detected a variable, option, request value, or function result reaching HTML output without a nearby escaping call.

Why It Matters

Unescaped output can become cross-site scripting when attackers control any part of the value being printed.

How to Fix

  • Use `esc_html()` for plain text, `esc_attr()` for attributes, and `esc_url()` for URLs.
  • Use `wp_kses()` or `wp_kses_post()` when limited HTML is intentionally allowed.
  • Escape as late as possible, right before output, so the selected escaping function matches the final context.

References

WordPress escaping functions

Affected Plugins

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#451AI Popup231,224636400Text Domain Mismatch
#452Post to Google My Business (Google Business Profile)238451,45210k+Non-prefixed global variable
#453Postie2340825910k+Output is not escaped
#454PowerPress Podcasting plugin by Blubrry234,8072,39420k+Output is not escaped
#455Pricing Table by Supsystic231,29944710k+Non Singular String Literal Domain
#456Primary Addon for Elementor237651,3067k+Non-prefixed global variable
#457Print Anywhere & Create PDFs of Order Receipts, Invoices, Labels & More.231,4854441k+Text Domain Mismatch
#458Print My Blog – Print, PDF, & eBook Converter WordPress Plugin231,0771,6608k+Non-prefixed global variable
#459Product Watermark for WooCommerce236964572k+Output is not escaped
#460Protect Admin236061,3002k+Non-prefixed global variable
#461Radio Station by netmix® – Manage and play your Show Schedule in WordPress!239343,6191k+Non-prefixed global variable
#462Read More Without Refresh239551,34720k+Non-prefixed global variable
#463Read More WP235701,3111k+Non-prefixed global variable
#464Real Estate Manager – Property Listing and Agent Management236062,301600Non-prefixed global variable
#465Real 3D Flipbook – 3D FlipBook, PDF FlipBook, PDF Viewer, PDF Embedder239081,37710k+Non-prefixed global variable
#466Redirection23523457100k+Non-prefixed global variable
#467Request a Quote – Quote Forms for Any WordPress Site232401,0991k+Non-prefixed hook name
#468Restaurant & Cafe Addon for Elementor238891,3261k+Non-prefixed global variable
#469Revive.so – Bulk Rewrite and Republish Blog Posts23332228700Text Domain Mismatch
#470Robo Gallery – Photo & Image Slider231,29153040k+Output is not escaped
#471Manago AI & Leadoo AI236444291k+Unsafe printing function
#472Schema231,17324540k+Text Domain Mismatch
#473SecuPress with Simple SSL – Simple and Performant Security231,6971,60140k+Non-prefixed global variable
#474Secure Custom Fields232401,37080k+Non-prefixed function
#475SEO Redirection Plugin – 301 Redirect Manager2327272710k+Non-prefixed global variable
#476Seraphinite Post .DOCX Source231,156110900Output is not escaped
#477Seriously Simple Podcasting2354862730k+Non-prefixed hook name
#478Shipment Tracker for Woocommerce234775762k+Missing Arg Domain
#479Local Google Analytics for WordPress – caches external requests235511993k+Output is not escaped
#480Tag, Category, and Taxonomy Manager – Autotagger Automatically Add Terms2340586950k+Nonce verification recommended
#481Simple URLs – Link Cloaking, Product Displays, and Affiliate Link Management232952984k+Non-prefixed global variable
#482Image Optimizer, Resizer and CDN – Sirv236161,0041k+Output is not escaped
#483Site Reviews231,62660460k+Output is not escaped
#484Slider Hero with Video Background, Animation231,5651,2533k+Text Domain Mismatch
#485Slider by 10Web – Responsive Image Slider235,81497610k+Output is not escaped
#486Smart Marketing SMS and Newsletters Forms232,2321,0151k+Text Domain Mismatch
#487Smart Slider 323261268800k+Non-prefixed global variable
#488SportsPress – Sports Club & League Manager234592,24610k+Non-prefixed global variable
#489StreamWeasels Twitch Integration235551,4651k+Non-prefixed global variable
#490Strong Testimonials2319439390k+Nonce verification recommended
#491Super Video player – Fully Customizable Video Player with Playlist231,1351,6342k+Non-prefixed global variable
#492teachPress237441,5872k+SQL query is not prepared
#493Legal Terms and Conditions Popup for User Login and WooCommerce Checkout23524237700Output is not escaped
#494The Events Calendar233,5093,850700k+Text Domain Mismatch
#495The Pack Elementor addon235561,1802k+Non-prefixed global variable
#496The Post Grid – Shortcode, Gutenberg Blocks and Elementor Addon for Post Grid231051,013100k+Non-prefixed global variable
#497ThemeHunk Customizer233,9685826k+Text Domain Mismatch
#498Travelpayouts237691106k+Output is not escaped
#499Trinity Audio – Text to Speech AI audio player to convert content into audio231192272k+Non-prefixed global variable
#500Directory Listings WordPress plugin – uListing239471,5731k+Non-prefixed global variable