Easily move, duplicate, backup and copy paste content and designs between your WordPress websites in seconds.
24
Score
252
Errors
55
Warnings
+0
Change
Category Scores
Security0
Repo86
Performance100
Maintainability5
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Security
156
9 issue groups
Maintainability
112
15 issue groups
I18n
16
1 issue group
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$addSettingText'.90
- Category
- Security
- Occurrences
- 90
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$addSettingText'.
ERRORSecurityUnsafe printing functionAll output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.32
- Category
- Security
- Occurrences
- 32
- Severity
- error
Sample message
All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.
ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;28
- Category
- Maintainability
- Occurrences
- 28
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
ERRORMaintainabilitywp function not compatible with requires wpFunction "attachment_url_to_postid()" requires WordPress 4.0.0, but your plugin minimum supported version is WordPress 3.5.0.25
- Category
- Maintainability
- Occurrences
- 25
- Severity
- error
Sample message
Function "attachment_url_to_postid()" requires WordPress 4.0.0, but your plugin minimum supported version is WordPress 3.5.0.
ERRORI18nText Domain MismatchMismatched text domain. Expected 'doubly' but got "unlimited-elements-for-elementor".16
- Category
- I18n
- Occurrences
- 16
- Severity
- error
Sample message
Mismatched text domain. Expected 'doubly' but got "unlimited-elements-for-elementor".
ERRORSecurityException output is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"$name doesn't exists"'.10
- Category
- Security
- Occurrences
- 10
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"$name doesn't exists"'.
WARNINGMaintainabilityNon-prefixed classClasses declared by a theme/plugin should start with the theme/plugin prefix. Found: "GlobalsDOUBLY".9
- Category
- Maintainability
- Occurrences
- 9
- Severity
- warning
Sample message
Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "GlobalsDOUBLY".
WARNINGMaintainabilityDiscouraged PHP functionThe use of function ini_set() is discouraged6
- Category
- Maintainability
- Occurrences
- 6
- Severity
- warning
Sample message
The use of function ini_set() is discouraged
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$currentFolder".6
- Category
- Maintainability
- Occurrences
- 6
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$currentFolder".
WARNINGSecurityMissing nonce verificationProcessing form data without nonce verification.6
- Category
- Security
- Occurrences
- 6
- Severity
- warning
Sample message
Processing form data without nonce verification.
Show 15 moreShow less
WARNINGSecurityNonce verification recommended6
- Category
- Security
- Occurrences
- 6
- Severity
- warning
Sample message
Processing form data without nonce verification.
ERRORMaintainabilityfile system operations mkdir6
- Category
- Maintainability
- Occurrences
- 6
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: mkdir().
ERRORMaintainabilitydate date5
- Category
- Maintainability
- Occurrences
- 5
- Severity
- error
Sample message
date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.
ERRORMaintainabilityfile system operations fwrite5
- Category
- Maintainability
- Occurrences
- 5
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fwrite().
ERRORMaintainabilitystrip tags strip tags5
- Category
- Maintainability
- Occurrences
- 5
- Severity
- error
Sample message
strip_tags() is discouraged. Use the more comprehensive wp_strip_all_tags() instead.
WARNINGSecurityInput is not sanitized4
- Category
- Security
- Occurrences
- 4
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_GET[$name]
WARNINGSecurityRequest data is not unslashed4
- Category
- Security
- Occurrences
- 4
- Severity
- warning
Sample message
$_GET[$name] not unslashed before sanitization. Use wp_unslash() or similar
ERRORMaintainabilityfile system operations fclose4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fclose().
ERRORMaintainabilityfile system operations fopen4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fopen().
WARNINGMaintainabilityDirect Query3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
ERRORSecurityDatabase parameter is not escaped2
- Category
- Security
- Occurrences
- 2
- Severity
- error
Sample message
Unescaped parameter $query used in $wpdb->get_results()\n$query used without escaping.
ERRORSecuritySQL query is not prepared2
- Category
- Security
- Occurrences
- 2
- Severity
- error
Sample message
Use placeholders and $wpdb->prepare(); found $query
WARNINGMaintainabilityslow db query meta query2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
Detected usage of meta_query, possible slow query.
WARNINGMaintainabilityNon-prefixed hook name2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "code_snippets/create_snippet".
WARNINGMaintainabilityerror log print r2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
print_r() found. Debug code should not normally be used in production.
External Connections
Not analyzed yet.
Score History
First score snapshot
v1.0.47
24
Latest
- Findings
- 307
- Errors
- 252
- Warnings
- 55
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 24 | 307 | 252 | 55 | v1.0.47 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueRelated
Relationship links
Author
Issue
Output is not escaped90 findingsUnsafe printing function32 findingsMissing direct file access protection28 findingswp function not compatible with requires wp25 findingsText Domain Mismatch16 findingsException output is not escaped10 findingsNon-prefixed class9 findingsDiscouraged PHP function6 findings
Related
All-in-One WP Migration and Backup34 scoreClassic Editor63 scoreWooCommerce21 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreAkismet Anti-spam: Spam Protection35 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreDuplicate Page40 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreWordPress Importer25 scoreJetpack – WP Security, Backup, Speed, & Growth22 scoreUpdraftPlus: WP Backup & Migration Plugin59 scoreYoast Duplicate Post70 scoreDuplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More21 score
Author
Issue
Output is not escaped90 findingsUnsafe printing function32 findingsMissing direct file access protection28 findingswp function not compatible with requires wp25 findingsText Domain Mismatch16 findingsException output is not escaped10 findingsNon-prefixed class9 findingsDiscouraged PHP function6 findings
Related
All-in-One WP Migration and Backup34 scoreClassic Editor63 scoreWooCommerce21 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreAkismet Anti-spam: Spam Protection35 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreDuplicate Page40 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreWordPress Importer25 scoreJetpack – WP Security, Backup, Speed, & Growth22 scoreUpdraftPlus: WP Backup & Migration Plugin59 scoreYoast Duplicate Post70 scoreDuplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More21 score
Related Plugins
Export Media as ZIP
2k+ active installs
100
Aruba Migration Tool
600 active installs
100
zipaddr-jp
50k+ active installs
99
Copy/Paste FlexContent Blocks for ACF
1k+ active installs
99
Glow: maintenance & support management for agencies
700 active installs
99
Menu Backup & Restore + Import/Export
400 active installs
99