WordPress.WP.DiscouragedConstants.STYLESHEETPATHUsageFound
Discouraged WordPress constant usage: STYLESHEETPATH
The plugin uses a PHP or WordPress pattern that coding standards discourage.
Why It Shows Up
Plugin Check found a discouraged function, forbidden function, goto, backtick operator, or similar construct.
Why It Matters
Discouraged patterns are often harder to review, less portable across hosts, or easier to misuse securely.
How to Fix
- Identify why the construct is used and whether WordPress provides a safer API.
- Replace shell execution, dynamic execution, or broad forbidden functions with constrained WordPress APIs.
- If a third-party library triggers the warning, isolate and document it.
References
Affected Plugins
| Rank | Plugin | Score | Errors | Warnings | Installs | Added | Updated | Top Issue |
|---|---|---|---|---|---|---|---|---|
| #1 | WPtouch – Make your WordPress Website Mobile-Friendly | 17 | 1,466 | 325 | 50k+ | Text Domain Mismatch | ||
| #2 | SendPress Newsletters | 19 | 2,293 | 1,422 | 1k+ | Output is not escaped | ||
| #3 | AweBooking – Hotel Booking System | 20 | 309 | 514 | 1k+ | Non-prefixed global variable | ||
| #4 | BuddyPress WooCommerce My Account Integration. Create WooCommerce Member Pages | 21 | 668 | 1,569 | 800 | Non-prefixed global variable | ||
| #5 | Wordfence Security – Firewall, Malware Scan, and Login Security | 21 | 1,893 | 3,292 | 5m+ | Output is not escaped | ||
| #6 | Better WordPress Minify | 22 | 412 | 484 | 7k+ | Non Singular String Literal Domain | ||
| #7 | Directorist: AI-Powered Business Directory, Listings & Classified Ads | 22 | 486 | 2,327 | 20k+ | Non-prefixed global variable | ||
| #8 | SpeakOut! Email Petitions | 22 | 849 | 998 | 2k+ | Missing nonce verification | ||
| #9 | WPJAM Basic | 22 | 278 | 343 | 4k+ | Output is not escaped | ||
| #10 | Advanced Custom Fields: Extended | 23 | 1,885 | 329 | 100k+ | Text Domain Mismatch | ||
| #11 | Coupon Creator | 23 | 602 | 424 | 1k+ | Output is not escaped | ||
| #12 | MediaPress | 23 | 904 | 583 | 3k+ | Output is not escaped | ||
| #13 | The Events Calendar | 23 | 3,478 | 3,846 | 600k+ | Text Domain Mismatch | ||
| #14 | Advanced AJAX Product Filters | 23 | 2,850 | 1,254 | 50k+ | Text Domain Mismatch | ||
| #15 | All-In-One Security (AIOS) – Security and Firewall | 24 | 555 | 1,226 | 1m+ | Non-prefixed global variable | ||
| #16 | Event Tickets and Registration | 24 | 3,368 | 4,206 | 90k+ | Non-prefixed global variable | ||
| #17 | Co-Authors, Multiple Authors and Guest Authors in an Author Box with PublishPress Authors | 24 | 338 | 872 | 20k+ | Nonce verification recommended | ||
| #18 | WPeMatico RSS Feed Fetcher | 24 | 1,370 | 599 | 10k+ | Output is not escaped | ||
| #19 | Agile Store Locator | 25 | 3,348 | 1,834 | 10k+ | Text Domain Mismatch | ||
| #20 | BuddyPress Docs | 25 | 284 | 421 | 6k+ | Nonce verification recommended | ||
| #21 | Front End PM | 25 | 971 | 2,264 | 4k+ | Non-prefixed global variable | ||
| #22 | YARPP – Yet Another Related Posts Plugin | 27 | 191 | 331 | 100k+ | Non-prefixed global variable | ||
| #23 | Query Wrangler | 28 | 626 | 232 | 700 | Output is not escaped | ||
| #24 | Post and Page Builder by BoldGrid – Visual Drag and Drop Editor | 30 | 353 | 263 | 50k+ | Text Domain Mismatch | ||
| #25 | BuddyPress for LearnDash | 32 | 190 | 284 | 1k+ | Output is not escaped | ||
| #26 | PublishPress Checklists: Pre-Publishing Approval Checklist – Validate Post Requirements | 34 | 141 | 182 | 3k+ | Missing Translators Comment | ||
| #27 | Issuu PDF Sync | 35 | 159 | 28 | 800 | Text Domain Mismatch | ||
| #28 | WP-Paginate | 35 | 37 | 55 | 20k+ | Input is not validated | ||
| #29 | Custom Post Template | 37 | 48 | 30 | 10k+ | Output is not escaped | ||
| #30 | FakerPress | 52 | 66 | 155 | 10k+ | Non-prefixed global variable | ||
| #31 | Post Template | 70 | 12 | 11 | 400 | Missing nonce verification |
