WordPress.WP.DiscouragedConstants.PLUGINDIRUsageFound
Discouraged WordPress constant usage: PLUGINDIR
The plugin uses a PHP or WordPress pattern that coding standards discourage.
Why It Shows Up
Plugin Check found a discouraged function, forbidden function, goto, backtick operator, or similar construct.
Why It Matters
Discouraged patterns are often harder to review, less portable across hosts, or easier to misuse securely.
How to Fix
- Identify why the construct is used and whether WordPress provides a safer API.
- Replace shell execution, dynamic execution, or broad forbidden functions with constrained WordPress APIs.
- If a third-party library triggers the warning, isolate and document it.
References
Affected Plugins
| Rank | Plugin | Score | Errors | Warnings | Installs | Added | Updated | Top Issue |
|---|---|---|---|---|---|---|---|---|
| #1 | HeadSpace2 SEO | 22 | 940 | 360 | 3k+ | Text Domain Mismatch | ||
| #2 | FV Player 8 | 24 | 323 | 1,383 | 1k+ | Non-prefixed function | ||
| #3 | WPeMatico RSS Feed Fetcher | 24 | 1,378 | 587 | 10k+ | Output is not escaped | ||
| #4 | FV Antispam | 26 | 332 | 239 | 900 | Output is not escaped | ||
| #5 | Zibal Payment Gateway for Gravity Forms | 27 | 828 | 248 | 500 | Text Domain Mismatch | ||
| #6 | Custom Field Template | 29 | 568 | 530 | 30k+ | wp function not compatible with requires wp | ||
| #7 | Download Plugin | 31 | 78 | 102 | 60k+ | Output is not escaped | ||
| #8 | WP125 | 31 | 178 | 184 | 3k+ | Unsafe printing function | ||
| #9 | Freesoul Deactivate Plugins – Disable plugins on individual WordPress pages | 32 | 55 | 785 | 8k+ | Nonce verification recommended | ||
| #10 | Authors Widget | 35 | 170 | 19 | 1k+ | Output is not escaped | ||
| #11 | Currency Converter | 35 | 104 | 4 | 400 | Output is not escaped | ||
| #12 | Peter’s Post Notes | 36 | 224 | 102 | 3k+ | Output is not escaped | ||
| #13 | WP Flow Plus | 37 | 175 | 146 | 800 | Output is not escaped | ||
| #14 | WP PageNavi Style | 37 | 109 | 11 | 8k+ | Unsafe printing function | ||
| #15 | CF7 to Webhook | 38 | 102 | 72 | 30k+ | Unsafe printing function | ||
| #16 | Shutter Reloaded | 38 | 194 | 95 | 1k+ | Text Domain Mismatch | ||
| #17 | Simple Expires | 38 | 32 | 39 | 500 | Non Singular String Literal Domain | ||
| #18 | WP Reroute Email | 40 | 141 | 106 | 1k+ | Output is not escaped | ||
| #19 | wp-Monalisa | 48 | 56 | 94 | 700 | Direct Query | ||
| #20 | Live Chat by Formilla – Real-time Chat & Chatbots Plugin | 57 | 22 | 13 | 2k+ | Missing Arg Domain | ||
| #21 | Lime Connect (formerly Userlike) – WordPress Live Chat plugin | 65 | 22 | 3 | 900 | Output is not escaped | ||
| #22 | My-Plugins | 72 | 24 | 6 | 30k+ | Missing Arg Domain | ||
| #23 | FD Footnotes Plugin | 77 | 28 | 5 | 1k+ | Non Singular String Literal Domain | ||
| #24 | X-Currency – The Ultimate WooCommerce currency switcher for a smoother shopping experience | 77 | 17 | 77 | 1k+ | Non-prefixed global variable | ||
| #25 | Smartslider | 83 | 13 | 0 | 600 | Output is not escaped |
