PluginScore

WordPress.WP.DiscouragedFunctions.query_posts_query_posts

Discouraged PHP function

The plugin uses a PHP or WordPress pattern that coding standards discourage.

medium weight

Why It Shows Up

Plugin Check found a discouraged function, forbidden function, goto, backtick operator, or similar construct.

Why It Matters

Discouraged patterns are often harder to review, less portable across hosts, or easier to misuse securely.

How to Fix

  • Identify why the construct is used and whether WordPress provides a safer API.
  • Replace shell execution, dynamic execution, or broad forbidden functions with constrained WordPress APIs.
  • If a third-party library triggers the warning, isolate and document it.

References

WordPress Coding Standards

Affected Plugins

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#1Themify Builder95,3342,1715k+Text Domain Mismatch
#2SendPress Newsletters192,2931,4221k+Output is not escaped
#3Brizy – Page Builder2058572660k+Output is not escaped
#4Event Organiser201,10454420k+Text Domain Mismatch
#5Forumax – AI Powered Advanced Community Forum Plugin214,9314,352600Text Domain Mismatch
#6Formidable Forms – WordPress Form Builder for Contact Forms, Calculators, Quizzes & More21562,148300k+Non-prefixed global variable
#7LA-Studio Element Kit for Elementor218,4031,88210k+Text Domain Mismatch
#8Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program – myCred211,4363,34510k+Non-prefixed global variable
#9ANAC XML Bandi di Gara22294244500Output is not escaped
#10IMPress for IDX Broker221,0956367k+Text Domain Mismatch
#11Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin229362,941200k+Non-prefixed global variable
#12Knowledge Base documentation & wiki plugin – BasePress Docs236711,7672k+Non-prefixed global variable
#13Business Directory Plugin – Easy Listing & Member Directories for WordPress236111,07710k+Non-prefixed global variable
#14Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder234,7401,27930k+Non Singular String Literal Domain
#15Hummingbird Performance – Cache & Page Speed Optimization for Core Web Vitals | Critical CSS | Minify CSS | Defer CSS Javascript | CDN233,42887770k+Text Domain Mismatch
#16Media Library Assistant231,1053,14470k+Nonce verification recommended
#17WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell236,2722,7795k+Text Domain Mismatch
#18Xpro Addons For Beaver Builder – Lite233,454640700Text Domain Mismatch
#19Gallery by BestWebSoft – Customizable Image and Photo Galleries for WordPress2454032210k+Text Domain Mismatch
#20Podlove Podcast Publisher242,1071,3993k+Output is not escaped
#21Tutor LMS – eLearning and online course solution243334,519100k+Non-prefixed global variable
#22WP RSS Aggregator – RSS Import, Feed to Post, Autoblogging, AI Content241,77339940k+Text Domain Mismatch
#23WPMobile.App – Android and iOS App Builder242,9821,5353k+Output is not escaped
#24XT Quick View for WooCommerce241,0581,799300Non-prefixed global variable
#25PDF & Print by BestWebSoft – WordPress Posts and Pages PDF Generator Plugin251,0841,2969k+Non-prefixed global variable
#26Quick Event Manager251513881k+Non-prefixed function
#27WP Crowdfunding251901,6002k+Non-prefixed global variable
#28A WP Life Companion261,6954686k+Text Domain Mismatch
#29WPFrank Companion262,3568651k+Text Domain Mismatch
#30Events Calendar for GeoDirectory271,2624622k+Text Domain Mismatch
#31Memberful – Membership Plugin273583621k+Text Domain Mismatch
#32MStore API – Create Native Android & iOS Apps On The Cloud278432k+Direct Query
#33PublishPress Permissions: Access Control, Content Permissions, User Access2743032410k+Missing Translators Comment
#34wp-mpdf271233821k+Non-prefixed global variable
#35YARPP – Yet Another Related Posts Plugin27191331100k+Non-prefixed global variable
#36Vertex Addons for Elementor28232413300Output is not escaped
#37Product Sort and Display for WooCommerce281902292k+Output is not escaped
#38WP ADA Compliance Check Basic287851773k+Text Domain Mismatch
#39Geo Mashup297742321k+Text Domain Mismatch
#40Slider by BestWebSoft29478336400Text Domain Mismatch
#41Themify – WooCommerce Product Filter2959114620k+Output is not escaped
#42Arile Extra3055158410k+Non-prefixed global variable
#43Post Grid, Slider & Carousel Ultimate – with Shortcode, Gutenberg Block & Elementor Widget302281021k+Non Singular String Literal Domain
#44Page Builder by SiteOrigin31236214400k+Output is not escaped
#45ACME Divi Modules3257335400Text Domain Mismatch
#46Arile Super323283513k+Non-prefixed global variable
#47Avadanta Companion321,318542k+Text Domain Mismatch
#48Premium Portfolio Features for Phlox theme3320413730k+Output is not escaped
#49IssueM3356173600Request data is not unslashed
#50Telegram Bot & Channel33182113500Unsafe printing function