WordPress.WP.DiscouragedConstants.STYLESHEETPATHUsageFound
Discouraged WordPress constant usage: STYLESHEETPATH
The plugin uses a PHP or WordPress pattern that coding standards discourage.
Why It Shows Up
Plugin Check found a discouraged function, forbidden function, goto, backtick operator, or similar construct.
Why It Matters
Discouraged patterns are often harder to review, less portable across hosts, or easier to misuse securely.
How to Fix
- Identify why the construct is used and whether WordPress provides a safer API.
- Replace shell execution, dynamic execution, or broad forbidden functions with constrained WordPress APIs.
- If a third-party library triggers the warning, isolate and document it.
References
Affected Plugins
| Rank | Plugin | Score | Errors | Warnings | Installs | Added | Updated | Top Issue |
|---|---|---|---|---|---|---|---|---|
| #1 | WPtouch – Make your WordPress Website Mobile-Friendly | 17 | 1,466 | 325 | 50k+ | Text Domain Mismatch | ||
| #2 | SendPress Newsletters | 19 | 2,293 | 1,422 | 2k+ | Output is not escaped | ||
| #3 | SpeakOut! Email Petitions | 20 | 850 | 994 | 3k+ | Missing nonce verification | ||
| #4 | WPJAM Basic | 20 | 328 | 356 | 4k+ | Output is not escaped | ||
| #5 | Store Locator WordPress | 21 | 2,372 | 1,572 | 10k+ | Text Domain Mismatch | ||
| #6 | Wordfence Security – Firewall, Malware Scan, and Login Security | 21 | 1,592 | 2,973 | 5m+ | Output is not escaped | ||
| #7 | Better WordPress Minify | 22 | 412 | 484 | 8k+ | Non Singular String Literal Domain | ||
| #8 | Directorist: AI-Powered Business Directory, Listings & Classified Ads | 22 | 443 | 2,129 | 20k+ | Non-prefixed global variable | ||
| #9 | Advanced AJAX Product Filters | 22 | 2,683 | 1,205 | 50k+ | Text Domain Mismatch | ||
| #10 | Advanced Custom Fields: Extended | 23 | 1,885 | 329 | 100k+ | Text Domain Mismatch | ||
| #11 | Front End PM | 23 | 978 | 2,264 | 5k+ | Non-prefixed global variable | ||
| #12 | MediaPress | 23 | 904 | 583 | 4k+ | Output is not escaped | ||
| #13 | Issues and Series for Newspapers, Magazines, Publishers, Writers | 23 | 346 | 710 | 2k+ | Nonce verification recommended | ||
| #14 | The Events Calendar | 23 | 3,512 | 3,848 | 700k+ | Text Domain Mismatch | ||
| #15 | All-In-One Security (AIOS) – Security and Firewall | 24 | 552 | 1,228 | 1m+ | Non-prefixed global variable | ||
| #16 | Event Tickets and Registration | 24 | 3,415 | 4,210 | 90k+ | Non-prefixed global variable | ||
| #17 | Co-Authors, Multiple Authors and Guest Authors in an Author Box with PublishPress Authors | 24 | 369 | 820 | 20k+ | Nonce verification recommended | ||
| #18 | WPeMatico RSS Feed Fetcher | 24 | 1,376 | 582 | 10k+ | Output is not escaped | ||
| #19 | BuddyPress Docs | 25 | 284 | 421 | 7k+ | Nonce verification recommended | ||
| #20 | Coupon Creator | 25 | 698 | 412 | 1k+ | Output is not escaped | ||
| #21 | YARPP – Yet Another Related Posts Plugin | 27 | 191 | 331 | 100k+ | Non-prefixed global variable | ||
| #22 | BuddyPress for LearnDash | 32 | 190 | 284 | 1k+ | Output is not escaped | ||
| #23 | Post and Page Builder by BoldGrid – Visual Drag and Drop Editor | 32 | 348 | 258 | 50k+ | Output is not escaped | ||
| #24 | PublishPress Checklists: Pre-Publishing Approval Checklist – Validate Post Requirements | 33 | 140 | 182 | 3k+ | Missing Translators Comment | ||
| #25 | WP-Paginate | 35 | 37 | 55 | 20k+ | Input is not validated | ||
| #26 | Custom Post Template | 37 | 48 | 30 | 10k+ | Output is not escaped | ||
| #27 | FakerPress | 53 | 66 | 152 | 10k+ | Non-prefixed global variable |
