WordPress.PHP.DevelopmentFunctions.error_log_error_log

error log error log

Development or debugging behavior appears in code that may run in production.

medium weight

Why It Shows Up

The scan found logging, debugging, path disclosure, `phpinfo()`, error-reporting changes, or similar development-oriented functions.

Why It Matters

Debug output can leak paths, configuration, request data, stack details, or sensitive runtime information.

How to Fix

  • Remove temporary debugging calls before release.
  • If logging is required, guard it with `WP_DEBUG` or a plugin setting intended for administrators.
  • Never show debug details to unauthenticated visitors or normal front-end users.

Affected Plugins

RankPluginScoreErrorsWarningsInstallsUpdatedTop Issue
#1JetBackup – Backup, Restore & Migrate101,559145100k+2026-05-03Exception Not Escaped
#2JetFormBuilder — Dynamic Blocks Form Builder172,0941,58890k+2026-06-17Text Domain Mismatch
#3Download Monitor194251,36480k+2026-06-16Non Prefixed Hookname Found
#4Matomo Analytics – Powerful, Privacy-First Insights for WordPress191,909878100k+2026-06-16Exception Not Escaped
#5Search Atlas SEO – Premier SEO Plugin for One-Click WP Publishing & Integrated AI Optimization191,2952,6799k+2026-06-15Output Not Escaped
#6Really Simple Security – Simple and Performant Security (formerly Really Simple SSL)195413853m+2026-06-17Missing Translators Comment
#7Membership Plugin – Kadence Memberships195,0822,9829k+2026-05-26Text Domain Mismatch
#8SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments195261,11990k+2026-06-16Non Prefixed Variable Found
#9GiveWP – Donation Plugin and Fundraising Platform203,4353,580100k+2026-06-15Output Not Escaped
#10Link Library201,9411,39710k+2026-04-26Unsafe Printing Function
#11Brevo – Email, SMS, Web Push, Chat, and more.20460646100k+2026-04-10Missing Unslash
#12Microthemer Lite – Visual Editor to Customize CSS201,0041,69910k+2026-04-15Non Prefixed Variable Found
#13Nimble Page Builder201,5911,68430k+2025-03-24Missing Arg Domain
#14Razorpay for WooCommerce20974855100k+2026-06-19Non Prefixed Function Found
#15Backup Migration219811,09380k+2026-06-05Non Prefixed Variable Found
#16CartFlows – Funnel Builder & Checkout Plugin for WooCommerce21461614200k+2026-06-02Text Domain Mismatch
#17Smart Grid-Layout Design for Contact Form 7211,12673410k+2026-05-08Output Not Escaped
#18Duplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More212,5721,2771m+2026-05-22Output Not Escaped
#19eRoom – Webinar & Meeting Plugin for Zoom, Google Meet, Microsoft Teams211864379k+2026-04-13Non Prefixed Variable Found
#20EventPrime – Events Calendar, Bookings and Tickets218724,2977k+2026-06-20Non Prefixed Variable Found
#21Feeds for YouTube (YouTube video, channel, and gallery plugin)21558978100k+2026-06-10Output Not Escaped
#22Formidable Forms – WordPress Form Builder for Contact Forms, Calculators, Quizzes & More21521,959300k+2026-06-16Non Prefixed Variable Found
#23If-So Dynamic Content – Elementor & All Page Builders Personalization218897257k+2026-05-28Unsafe Printing Function
#24Modular DS: Monitor, update, and backup multiple websites211618140k+2026-05-22Exception Not Escaped
#25MotoPress Hotel Booking213,0611,03710k+2026-06-15Text Domain Mismatch
#26Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction211,9185,06510k+2026-06-02Non Prefixed Hookname Found
#27PublishPress Planner – Editorial Calendar, Marketing Content, Kanban Board216038906k+2026-05-21Output Not Escaped
#28Five Star Restaurant Reservations – WordPress Booking Plugin211,0991,14710k+2026-06-19Output Not Escaped
#29Professional Social Sharing Buttons, Icons & Related Posts – Shareaholic2132718110k+2024-11-05Output Not Escaped
#30Accept Stripe Payments2137388220k+2026-05-07Missing
#31ThirstyAffiliates – Affiliate Links, Link Branding, Link Tracking & Marketing Plugin2119066030k+2026-05-27Non Prefixed Variable Found
#32WebP Express21160427300k+2026-06-19Non Prefixed Variable Found
#33Paysera Payment Gateway for WooCommerce211,8661957k+2026-06-04Exception Not Escaped
#34Wordfence Security – Firewall, Malware Scan, and Login Security211,5922,9735m+2026-05-13Output Not Escaped
#35WP phpMyAdmin214,5286,43550k+2025-10-17Missing Arg Domain
#36wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin211,3541,14070k+2026-06-08Output Not Escaped
#37WPScan – WordPress Security Scanner215272658k+2026-01-12Text Domain Mismatch
#38Frontend Admin by DynamiApps225,9223,20810k+2026-06-17Text Domain Mismatch
#39Advanced Form Integration — Connect Forms to 200+ Apps225,7714,67810k+2026-06-18wp function not compatible with requires wp
#40Booking for Appointments and Events Calendar – Amelia221,48948090k+2026-06-18Exception Not Escaped
#41Shortcodes and extra features for Phlox theme2241342690k+2026-05-09Output Not Escaped
#42Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots221,6042,01910k+2026-06-10Direct Query
#43BuddyPress225839,008100k+2025-09-24Non Prefixed Function Found
#44Clearfy Cache – WordPress optimization plugin, Minify HTML, CSS & JS, Defer222,8581,27050k+2026-04-23Text Domain Mismatch
#45RegistrationMagic – User Registration Forms Plugin223,6545,0628k+2026-06-20Non Prefixed Variable Found
#46WP Customer Area223,30894110k+2026-04-16Text Domain Mismatch
#47Directorist: AI-Powered Business Directory, Listings & Classified Ads224432,12920k+2026-06-09Non Prefixed Variable Found
#48Download Manager222,2901,301100k+2026-06-16Output Not Escaped
#49Dynamic QR Code – generator222382086k+2024-12-29missing direct file access protection
#50Easy Social Feed – Social Photos Gallery and Post Feed for WordPress221,5671,27730k+2026-05-07Non Prefixed Variable Found