WordPress.WP.DiscouragedConstants.STYLESHEETPATHUsageFound
Discouraged WordPress constant usage: STYLESHEETPATH
The plugin uses a PHP or WordPress pattern that coding standards discourage.
Why It Shows Up
Plugin Check found a discouraged function, forbidden function, goto, backtick operator, or similar construct.
Why It Matters
Discouraged patterns are often harder to review, less portable across hosts, or easier to misuse securely.
How to Fix
- Identify why the construct is used and whether WordPress provides a safer API.
- Replace shell execution, dynamic execution, or broad forbidden functions with constrained WordPress APIs.
- If a third-party library triggers the warning, isolate and document it.
References
Affected Plugins
| Rank | Plugin | Score | Errors | Warnings | Installs | Added | Updated | Top Issue |
|---|---|---|---|---|---|---|---|---|
| #1 | WPtouch – Make your WordPress Website Mobile-Friendly | 17 | 1,466 | 325 | 50k+ | Text Domain Mismatch | ||
| #2 | SendPress Newsletters | 19 | 2,293 | 1,422 | 1k+ | Output is not escaped | ||
| #3 | WPJAM Basic | 19 | 325 | 346 | 4k+ | Output is not escaped | ||
| #4 | AweBooking – Hotel Booking System | 20 | 309 | 514 | 1k+ | Non-prefixed global variable | ||
| #5 | SpeakOut! Email Petitions | 20 | 850 | 994 | 2k+ | Missing nonce verification | ||
| #6 | Store Locator WordPress | 21 | 2,494 | 1,628 | 10k+ | Text Domain Mismatch | ||
| #7 | BuddyPress WooCommerce My Account Integration. Create WooCommerce Member Pages | 21 | 668 | 1,569 | 800 | Non-prefixed global variable | ||
| #8 | Wordfence Security – Firewall, Malware Scan, and Login Security | 21 | 1,592 | 2,973 | 5m+ | Output is not escaped | ||
| #9 | Better WordPress Minify | 22 | 412 | 484 | 7k+ | Non Singular String Literal Domain | ||
| #10 | Directorist: AI-Powered Business Directory, Listings & Classified Ads | 22 | 560 | 2,202 | 20k+ | Non-prefixed global variable | ||
| #11 | Advanced AJAX Product Filters | 22 | 2,840 | 1,252 | 50k+ | Text Domain Mismatch | ||
| #12 | Advanced Custom Fields: Extended | 23 | 1,885 | 329 | 100k+ | Text Domain Mismatch | ||
| #13 | Coupon Creator | 23 | 633 | 421 | 1k+ | Output is not escaped | ||
| #14 | Front End PM | 23 | 978 | 2,264 | 4k+ | Non-prefixed global variable | ||
| #15 | MediaPress | 23 | 904 | 583 | 3k+ | Output is not escaped | ||
| #16 | Issues and Series for Newspapers, Magazines, Publishers, Writers | 23 | 346 | 710 | 2k+ | Nonce verification recommended | ||
| #17 | The Events Calendar | 23 | 3,507 | 3,849 | 600k+ | Text Domain Mismatch | ||
| #18 | All-In-One Security (AIOS) – Security and Firewall | 24 | 552 | 1,228 | 1m+ | Non-prefixed global variable | ||
| #19 | Event Tickets and Registration | 24 | 3,407 | 4,218 | 90k+ | Non-prefixed global variable | ||
| #20 | Co-Authors, Multiple Authors and Guest Authors in an Author Box with PublishPress Authors | 24 | 369 | 820 | 20k+ | Nonce verification recommended | ||
| #21 | WPeMatico RSS Feed Fetcher | 24 | 1,387 | 589 | 10k+ | Output is not escaped | ||
| #22 | BuddyPress Docs | 25 | 284 | 421 | 6k+ | Nonce verification recommended | ||
| #23 | YARPP – Yet Another Related Posts Plugin | 27 | 191 | 331 | 100k+ | Non-prefixed global variable | ||
| #24 | Query Wrangler | 28 | 628 | 229 | 700 | Output is not escaped | ||
| #25 | Post and Page Builder by BoldGrid – Visual Drag and Drop Editor | 31 | 353 | 253 | 50k+ | Text Domain Mismatch | ||
| #26 | BuddyPress for LearnDash | 32 | 190 | 284 | 1k+ | Output is not escaped | ||
| #27 | PublishPress Checklists: Pre-Publishing Approval Checklist – Validate Post Requirements | 33 | 140 | 182 | 3k+ | Missing Translators Comment | ||
| #28 | Issuu PDF Sync | 35 | 159 | 28 | 900 | Text Domain Mismatch | ||
| #29 | WP-Paginate | 35 | 37 | 55 | 20k+ | Input is not validated | ||
| #30 | Custom Post Template | 37 | 48 | 30 | 10k+ | Output is not escaped | ||
| #31 | FakerPress | 52 | 66 | 155 | 10k+ | Non-prefixed global variable | ||
| #32 | Post Template | 70 | 12 | 11 | 400 | Missing nonce verification |
