Trusted by 60M+ sites: The gold standard for WordPress migration and backup. Migrate, backup, and restore your WordPress site with one click.
34
Score
47
Errors
69
Warnings
-6
Change
Category Scores
Security0
Repo97
Performance100
Maintainability46
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Maintainability
62
17 issue groups
Security
47
7 issue groups
I18n
3
1 issue group
WARNINGSecurityMissing nonce verificationProcessing form data without nonce verification.21
- Category
- Security
- Occurrences
- 21
- Severity
- warning
Sample message
Processing form data without nonce verification.
ERRORMaintainabilitywp function not compatible with requires wpFunction "register_rest_route()" requires WordPress 4.4.0, but your plugin minimum supported version is WordPress 3.3.0.19
- Category
- Maintainability
- Occurrences
- 19
- Severity
- error
Sample message
Function "register_rest_route()" requires WordPress 4.4.0, but your plugin minimum supported version is WordPress 3.3.0.
WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.11
- Category
- Security
- Occurrences
- 11
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$backup".9
- Category
- Maintainability
- Occurrences
- 9
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$backup".
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_FILES['upload_file']7
- Category
- Security
- Occurrences
- 7
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_FILES['upload_file']
ERRORMaintainabilityfile system operations is writableFile operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: is_writable().5
- Category
- Maintainability
- Occurrences
- 5
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: is_writable().
ERRORMaintainabilityfile system operations fopenFile operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fopen().4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fopen().
WARNINGMaintainabilityDiscouraged PHP functionThe use of function ini_set() is discouraged3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
The use of function ini_set() is discouraged
WARNINGSecurityRequest data is not unslashed$_SERVER['PHP_AUTH_PW'] not unslashed before sanitization. Use wp_unslash() or similar3
- Category
- Security
- Occurrences
- 3
- Severity
- warning
Sample message
$_SERVER['PHP_AUTH_PW'] not unslashed before sanitization. Use wp_unslash() or similar
ERRORMaintainabilityfile system operations fcloseFile operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fclose().3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fclose().
Show 15 moreShow less
ERRORI18nMissing Translators Comment3
- Category
- I18n
- Occurrences
- 3
- Severity
- error
Sample message
A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.
WARNINGMaintainabilitytrademarked term3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
The plugin name includes a restricted term. Your chosen plugin name - "All-in-One WP Migration and Backup" - contains the restricted term "all-in-one-wp-migration" which cannot be used at all in your plugin name.
WARNINGMaintainabilityDirect Query2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGMaintainabilityNo Caching2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
WARNINGMaintainabilityNon-prefixed constant2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "BANDAR_TEMPLATES_PATH".
ERRORSecurityOutput is not escaped2
- Category
- Security
- Occurrences
- 2
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$file_buffer'.
WARNINGSecurityInput is not validated2
- Category
- Security
- Occurrences
- 2
- Severity
- warning
Sample message
Detected usage of a possibly undefined superglobal array index: $_SERVER['SERVER_NAME']. Check that the array index exists before using it.
ERRORMaintainabilityfile system operations fread2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fread().
ERRORMaintainabilityplugin updater detected2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
Plugin Updater detected. These are not permitted in WordPress.org hosted plugins. Detected: site_transient_update_plugins
WARNINGMaintainabilityupdate modification detected2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
Plugin Updater detected. Detected code which may be altering WordPress update routines. Detected: _site_transient_update_plugins
ERRORSecuritySQL query is not prepared1
- Category
- Security
- Occurrences
- 1
- Severity
- error
Sample message
Use placeholders and $wpdb->prepare(); found $sql
WARNINGMaintainabilityerror log set error handler1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
set_error_handler() found. Debug code should not normally be used in production.
ERRORMaintainabilityfile system operations chmod1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: chmod().
ERRORMaintainabilityfile system operations fwrite1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fwrite().
ERRORMaintainabilityfile system operations mkdir1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: mkdir().
External Connections
Potential connections found in static code analysis.
Outbound calls
280
External assets
0
Incoming endpoints
20
Notable Domains
help.servmask.com57 · outbound
servmask.com35 · outbound
redirect.wp-migration.com22 · outbound
plugin-updates.wp-migration.com21 · outbound
raw.github.com4 · outbound
vuejs.org2 · outbound
Platform / Reference Domains
gnu.org123 · platform/reference
github.com4 · platform/reference
w3.org4 · platform/reference
wordpress.org1 · platform/reference
External Asset Domains
No external asset domains detected.
Incoming Endpoints
wp_ajax_nopriv_ai1wm_backup_add_labelpublic
wp_ajax
wp_ajax_nopriv_ai1wm_backup_deletepublic
wp_ajax
wp_ajax_nopriv_ai1wm_backup_listpublic
wp_ajax
wp_ajax_nopriv_ai1wm_exportpublic
wp_ajax
wp_ajax_nopriv_ai1wm_feedbackpublic
wp_ajax
wp_ajax_nopriv_ai1wm_importpublic
wp_ajax
Admin AJAX endpoints13
wp_ajax_ai1wm_backup_add_labelauthenticated
wp_ajax
wp_ajax_ai1wm_backup_check_encryptionauthenticated
wp_ajax
wp_ajax_ai1wm_backup_cleanauthenticated
wp_ajax
wp_ajax_ai1wm_backup_deleteauthenticated
wp_ajax
wp_ajax_ai1wm_backup_download_backupauthenticated
wp_ajax
wp_ajax_ai1wm_backup_download_fileauthenticated
wp_ajax
wp_ajax_ai1wm_backup_get_configauthenticated
wp_ajax
wp_ajax_ai1wm_backup_listauthenticated
wp_ajax
wp_ajax_ai1wm_backup_list_contentauthenticated
wp_ajax
wp_ajax_ai1wm_exportauthenticated
wp_ajax
wp_ajax_ai1wm_feedbackauthenticated
wp_ajax
wp_ajax_ai1wm_importauthenticated
wp_ajax
1 more hidden
Score History
2 score snapshots
v7.106
34
Latest
- Findings
- 116
- Errors
- 47
- Warnings
- 69
- Check
- 2.0.0
v7.105
40
Score
- Findings
- 89
- Errors
- 28
- Warnings
- 61
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 34 | 116 | 47 | 69 | v7.106 | 2.0.0 |
| 40 | 89 | 28 | 61 | v7.105 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Author
Issue
Missing nonce verification21 findingswp function not compatible with requires wp19 findingsNonce verification recommended11 findingsNon-prefixed global variable9 findingsInput is not sanitized7 findingsfile system operations is writable5 findingsfile system operations fopen4 findingsDiscouraged PHP function3 findings
Domain
Related
Akismet Anti-spam: Spam Protection35 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder35 scoreClassic Editor63 scoreWooCommerce22 scoreLiteSpeed Cache35 scoreRank Math SEO – AI SEO Tools to Dominate SEO Rankings30 scoreYoast Duplicate Post70 scoreJetpack – WP Security, Backup, Speed, & Growth22 scoreUpdraftPlus: WP Backup & Migration Plugin24 scoreDuplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More21 scoreManageWP Worker23 score
Author
Issue
Missing nonce verification21 findingswp function not compatible with requires wp19 findingsNonce verification recommended11 findingsNon-prefixed global variable9 findingsInput is not sanitized7 findingsfile system operations is writable5 findingsfile system operations fopen4 findingsDiscouraged PHP function3 findings
Domain
Related
Akismet Anti-spam: Spam Protection35 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder35 scoreClassic Editor63 scoreWooCommerce22 scoreLiteSpeed Cache35 scoreRank Math SEO – AI SEO Tools to Dominate SEO Rankings30 scoreYoast Duplicate Post70 scoreJetpack – WP Security, Backup, Speed, & Growth22 scoreUpdraftPlus: WP Backup & Migration Plugin24 scoreDuplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More21 scoreManageWP Worker23 score
Related Plugins
Aruba Migration Tool
600 active installs
100
Export Media as ZIP
1k+ active installs
100
Clone / Duplicate Orders for WooCommerce
1k+ active installs
99
Glow: maintenance & support management for agencies
700 active installs
99
Machete
6k+ active installs
99
Menu Backup & Restore + Import/Export
400 active installs
99