WordPress.WP.DiscouragedConstants.TEMPLATEPATHUsageFound
Discouraged WordPress constant usage: TEMPLATEPATH
The plugin uses a PHP or WordPress pattern that coding standards discourage.
Why It Shows Up
Plugin Check found a discouraged function, forbidden function, goto, backtick operator, or similar construct.
Why It Matters
Discouraged patterns are often harder to review, less portable across hosts, or easier to misuse securely.
How to Fix
- Identify why the construct is used and whether WordPress provides a safer API.
- Replace shell execution, dynamic execution, or broad forbidden functions with constrained WordPress APIs.
- If a third-party library triggers the warning, isolate and document it.
References
Affected Plugins
| Rank | Plugin | Score | Errors | Warnings | Installs | Added | Updated | Top Issue |
|---|---|---|---|---|---|---|---|---|
| #1 | MDTF – Meta Data and Taxonomies Filter | 16 | 1,550 | 1,956 | 1k+ | Non-prefixed global variable | ||
| #2 | WPtouch – Make your WordPress Website Mobile-Friendly | 17 | 1,466 | 325 | 50k+ | Text Domain Mismatch | ||
| #3 | SendPress Newsletters | 19 | 2,293 | 1,422 | 1k+ | Output is not escaped | ||
| #4 | AweBooking – Hotel Booking System | 20 | 309 | 514 | 1k+ | Non-prefixed global variable | ||
| #5 | BuddyPress WooCommerce My Account Integration. Create WooCommerce Member Pages | 21 | 668 | 1,569 | 800 | Non-prefixed global variable | ||
| #6 | Wordfence Security – Firewall, Malware Scan, and Login Security | 21 | 1,592 | 2,973 | 5m+ | Output is not escaped | ||
| #7 | WP Compress – Instant Performance & Speed Optimization | 21 | 3,367 | 3,253 | 10k+ | Non Singular String Literal Domain | ||
| #8 | Directorist: AI-Powered Business Directory, Listings & Classified Ads | 22 | 560 | 2,202 | 20k+ | Non-prefixed global variable | ||
| #9 | Events Maker by dFactory | 22 | 588 | 819 | 1k+ | Output is not escaped | ||
| #10 | HeadSpace2 SEO | 22 | 940 | 360 | 3k+ | Text Domain Mismatch | ||
| #11 | RabbitLoader Cache: Optimize your Website for Speed | 22 | 241 | 163 | 2k+ | Output is not escaped | ||
| #12 | Slim Jetpack | 22 | 2,586 | 1,947 | 2k+ | Text Domain Mismatch | ||
| #13 | Advanced AJAX Product Filters | 22 | 2,840 | 1,252 | 50k+ | Text Domain Mismatch | ||
| #14 | Advanced Custom Fields: Extended | 23 | 1,885 | 329 | 100k+ | Text Domain Mismatch | ||
| #15 | Front End PM | 23 | 978 | 2,264 | 4k+ | Non-prefixed global variable | ||
| #16 | MediaPress | 23 | 904 | 583 | 4k+ | Output is not escaped | ||
| #17 | Slider, Gallery, and Carousel by MetaSlider – Image Slider, Video Slider | 23 | 204 | 324 | 500k+ | Non-prefixed global variable | ||
| #18 | Issues and Series for Newspapers, Magazines, Publishers, Writers | 23 | 346 | 710 | 2k+ | Nonce verification recommended | ||
| #19 | The Events Calendar | 23 | 3,507 | 3,850 | 600k+ | Text Domain Mismatch | ||
| #20 | A2 Optimized WP – Turbocharge and secure your WordPress site | 24 | 271 | 231 | 60k+ | Missing Arg Domain | ||
| #21 | All-In-One Security (AIOS) – Security and Firewall | 24 | 552 | 1,228 | 1m+ | Non-prefixed global variable | ||
| #22 | Event Tickets and Registration | 24 | 3,407 | 4,217 | 90k+ | Non-prefixed global variable | ||
| #23 | Gallery by BestWebSoft – Customizable Image and Photo Galleries for WordPress | 24 | 536 | 322 | 10k+ | Text Domain Mismatch | ||
| #24 | Co-Authors, Multiple Authors and Guest Authors in an Author Box with PublishPress Authors | 24 | 369 | 820 | 20k+ | Nonce verification recommended | ||
| #25 | Sunshine Photo Cart – Client Photo Gallery & Photo Proofing for Photographers | 24 | 361 | 1,483 | 1k+ | Nonce verification recommended | ||
| #26 | WPeMatico RSS Feed Fetcher | 24 | 1,378 | 587 | 10k+ | Output is not escaped | ||
| #27 | BuddyPress Docs | 25 | 284 | 421 | 7k+ | Nonce verification recommended | ||
| #28 | Coupon Creator | 25 | 698 | 412 | 1k+ | Output is not escaped | ||
| #29 | Genesis Club Lite | 25 | 513 | 317 | 900 | Output is not escaped | ||
| #30 | FV Antispam | 26 | 332 | 239 | 900 | Output is not escaped | ||
| #31 | Live Composer – Free WordPress Website Builder | 26 | 1,211 | 427 | 10k+ | Output is not escaped | ||
| #32 | WP-DownloadManager | 26 | 593 | 508 | 3k+ | Unsafe printing function | ||
| #33 | Post and Page Builder by BoldGrid – Visual Drag and Drop Editor | 31 | 353 | 253 | 50k+ | Text Domain Mismatch | ||
| #34 | BuddyPress for LearnDash | 32 | 190 | 284 | 1k+ | Output is not escaped | ||
| #35 | Download Attachments | 32 | 69 | 188 | 8k+ | Non-prefixed hook name | ||
| #36 | More Types | 33 | 227 | 198 | 700 | Non-prefixed global variable | ||
| #37 | PublishPress Checklists: Pre-Publishing Approval Checklist – Validate Post Requirements | 33 | 140 | 182 | 3k+ | Missing Translators Comment | ||
| #38 | WP-Stats | 33 | 231 | 121 | 2k+ | Output is not escaped | ||
| #39 | Buckets | 34 | 68 | 76 | 500 | Output is not escaped | ||
| #40 | Advanced Permalinks | 35 | 94 | 76 | 400 | wp function not compatible with requires wp | ||
| #41 | Amministrazione Trasparente | 35 | 80 | 46 | 1k+ | Output is not escaped | ||
| #42 | Social Comments by Heateor | 35 | 285 | 35 | 700 | Unsafe printing function | ||
| #43 | Issuu PDF Sync | 35 | 159 | 28 | 900 | Text Domain Mismatch | ||
| #44 | Custom Post Template | 37 | 48 | 30 | 10k+ | Output is not escaped | ||
| #45 | PostLinks | 38 | 107 | 10 | 700 | Output is not escaped | ||
| #46 | WP-CommentNavi | 38 | 68 | 46 | 700 | Output is not escaped | ||
| #47 | Genesis Dambuster | 39 | 94 | 67 | 3k+ | Output is not escaped | ||
| #48 | SimpleModal Login | 39 | 50 | 12 | 700 | Unsafe printing function | ||
| #49 | TW Recent Posts Widget | 40 | 97 | 14 | 1k+ | Output is not escaped | ||
| #50 | Genesis Featured Page Advanced | 41 | 209 | 4 | 7k+ | Output is not escaped |
