Free WordPress migration plugin for backup, restore, clone, and site transfer with zero downtime. Migrate WordPress site easily.
24
Score
140
Errors
193
Warnings
+0
Change
Category Scores
Security0
Repo91
Performance100
Maintainability0
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Maintainability
197
17 issue groups
Security
92
8 issue groups
WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.38
- Category
- Maintainability
- Occurrences
- 38
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().38
- Category
- Maintainability
- Occurrences
- 38
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
WARNINGSecurityInterpolated SQL is not preparedUse placeholders and $wpdb->prepare(); found interpolated variable $end at "SELECT * FROM `$table` LIMIT $start, $end"38
- Category
- Security
- Occurrences
- 38
- Severity
- warning
Sample message
Use placeholders and $wpdb->prepare(); found interpolated variable $end at "SELECT * FROM `$table` LIMIT $start, $end"
WARNINGMaintainabilityDiscouraged PHP functionThe use of function ini_set() is discouraged18
- Category
- Maintainability
- Occurrences
- 18
- Severity
- warning
Sample message
The use of function ini_set() is discouraged
WARNINGMaintainabilityprevent path disclosure error reportingerror_reporting() can lead to full path disclosure.16
- Category
- Maintainability
- Occurrences
- 16
- Severity
- warning
Sample message
error_reporting() can lead to full path disclosure.
ERRORMaintainabilityfile system operations fcloseFile operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fclose().15
- Category
- Maintainability
- Occurrences
- 15
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fclose().
ERRORMaintainabilitycurl curl setoptUsing cURL functions is highly discouraged. Use wp_remote_get() instead.13
- Category
- Maintainability
- Occurrences
- 13
- Severity
- error
Sample message
Using cURL functions is highly discouraged. Use wp_remote_get() instead.
ERRORSecurityDatabase parameter is not escapedUnescaped parameter $column used in $wpdb->get_results()\n$column assigned unsafely at line 16.12
- Category
- Security
- Occurrences
- 12
- Severity
- error
Sample message
Unescaped parameter $column used in $wpdb->get_results()\n$column assigned unsafely at line 16.
ERRORMaintainabilityfile system operations fopenFile operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fopen().12
- Category
- Maintainability
- Occurrences
- 12
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fopen().
WARNINGSecurityRequest data is not unslashed$_GET['_wpnonce'] not unslashed before sanitization. Use wp_unslash() or similar10
- Category
- Security
- Occurrences
- 10
- Severity
- warning
Sample message
$_GET['_wpnonce'] not unslashed before sanitization. Use wp_unslash() or similar
Show 15 moreShow less
ERRORMaintainabilitywp function not compatible with requires wp10
- Category
- Maintainability
- Occurrences
- 10
- Severity
- error
Sample message
Function "get_rest_url()" requires WordPress 4.4.0, but your plugin minimum supported version is WordPress 4.0.0.
WARNINGSecurityNonce verification recommended9
- Category
- Security
- Occurrences
- 9
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGSecurityDatabase parameter is not escaped7
- Category
- Security
- Occurrences
- 7
- Severity
- warning
Sample message
Unescaped parameter $table used in $wpdb->get_results()
ERRORSecuritySQL query is not prepared6
- Category
- Security
- Occurrences
- 6
- Severity
- error
Sample message
Use placeholders and $wpdb->prepare(); found $query
WARNINGSecurityInput is not sanitized6
- Category
- Security
- Occurrences
- 6
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_GET['_wpnonce']
ERRORMaintainabilityfile system operations mkdir6
- Category
- Maintainability
- Occurrences
- 6
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: mkdir().
ERRORMaintainabilityrename rename6
- Category
- Maintainability
- Occurrences
- 6
- Severity
- error
Sample message
rename() is discouraged. Use WP_Filesystem::move() to rename a file.
ERRORMaintainabilityfile system operations chmod5
- Category
- Maintainability
- Occurrences
- 5
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: chmod().
ERRORMaintainabilityfile system operations fwrite5
- Category
- Maintainability
- Occurrences
- 5
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fwrite().
ERRORSecurityException output is not escaped4
- Category
- Security
- Occurrences
- 4
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$error_msg'.
ERRORMaintainabilityfile system operations fread4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fread().
ERRORMaintainabilityfile system operations rmdir4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: rmdir().
WARNINGMaintainabilityerror log error log3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
error_log() found. Debug code should not normally be used in production.
ERRORMaintainabilityPlugin Directory Write2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
Plugin folders are deleted when upgraded. Do not save data to the plugin folder using copy(). Detected usage of constant WP_CONTENT_DIR. Use wp_upload_dir() to get the uploads directory path or save to the database instead.
WARNINGMaintainabilitySchema Change2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
Attempting a database schema change is discouraged.
External Connections
Potential connections found in static code analysis.
Outbound calls
291
External assets
1
Incoming endpoints
8
Notable Domains
php.net72 · outbound
tools.ietf.org56 · outbound
en.wikipedia.org29 · outbound
phpseclib.sourceforge.net12 · outbound
pkware.cachefly.net11 · outbound
bugs.php.net7 · outbound
Platform / Reference Domains
github.com18 · platform/reference
opensource.org9 · platform/reference
wordpress.org3 · platform/reference
gnu.org1 · platform/reference
w3.org1 · platform/reference
External Asset Domains
fonts.googleapis.com1 · asset
Incoming Endpoints
/wp-json/ocm/v1/progress/REST
register_rest_route
wp_ajax_nopriv_public
wp_ajax
wp_ajax_nopriv_ocm_loopback_checkpublic
wp_ajax
Admin AJAX endpoints5
admin_post_cancel_actionsauthenticated
admin_post
admin_post_start_backupauthenticated
admin_post
admin_post_start_restoreauthenticated
admin_post
wp_ajax_ocm_loopback_checkauthenticated
wp_ajax
wp_ajax_ocm_restart_failed_processauthenticated
wp_ajax
Score History
First score snapshot
v3.1.5
24
Latest
- Findings
- 333
- Errors
- 140
- Warnings
- 193
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 24 | 333 | 140 | 193 | v3.1.5 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Plugin
Author
Category
Issue
Domain
Related
BackWPup – WordPress Backup & Restore Plugin35 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder35 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce22 scoreAkismet Anti-spam: Spam Protection35 scoreLiteSpeed Cache35 scoreAll-in-One WP Migration and Backup34 scoreUpdraftPlus: WP Backup & Migration Plugin24 scoreDuplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More21 scoreBackuply – Backup, Restore, Migrate and Clone24 scoreWP STAGING – WordPress Backup, Restore, Migration & Clone23 scoreTotal Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid25 scoreWP Database Backup – Unlimited Database & Files Backup by Backup for WP89 score
Plugin
Author
Category
Issue
Domain
Related
BackWPup – WordPress Backup & Restore Plugin35 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder35 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce22 scoreAkismet Anti-spam: Spam Protection35 scoreLiteSpeed Cache35 scoreAll-in-One WP Migration and Backup34 scoreUpdraftPlus: WP Backup & Migration Plugin24 scoreDuplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More21 scoreBackuply – Backup, Restore, Migrate and Clone24 scoreWP STAGING – WordPress Backup, Restore, Migration & Clone23 scoreTotal Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid25 scoreWP Database Backup – Unlimited Database & Files Backup by Backup for WP89 score
Related Plugins
WP Database Backup – Unlimited Database & Files Backup by Backup for WP
30k+ active installs
89
Transferito: WP Migration
500 active installs
88
53
BackWPup – WordPress Backup & Restore Plugin
500k+ active installs
35
WebToffee WP Backup and Migration
5k+ active installs
33
FastDup – Fastest WordPress Migration & Duplicator
5k+ active installs
31