File Manager lets you manage your WordPress files easily right from your dashboard, no need for FTP or cPanel!
53
Score
41
Errors
68
Warnings
+3
Change
Category Scores
Security31
Repo97
Performance98
Maintainability59
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Maintainability
83
15 issue groups
Security
24
6 issue groups
Performance
1
1 issue group
Repo Compliance
1
1 issue group
ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;38
- Category
- Maintainability
- Occurrences
- 38
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.10
- Category
- Security
- Occurrences
- 10
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGMaintainabilityNot In FooterIn footer ($in_footer) is not set explicitly wp_enqueue_script; It is recommended to load scripts in the footer. Please set this value to `true` to load it in the footer, or explicitly `false` if it should be loaded in the header.9
- Category
- Maintainability
- Occurrences
- 9
- Severity
- warning
Sample message
In footer ($in_footer) is not set explicitly wp_enqueue_script; It is recommended to load scripts in the footer. Please set this value to `true` to load it in the footer, or explicitly `false` if it should be loaded in the header.
WARNINGMaintainabilityMissing VersionResource version not set in call to wp_enqueue_script(). This means new versions of the script may not always be loaded due to browser caching.7
- Category
- Maintainability
- Occurrences
- 7
- Severity
- warning
Sample message
Resource version not set in call to wp_enqueue_script(). This means new versions of the script may not always be loaded due to browser caching.
WARNINGMaintainabilityDynamic hook nameHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "Config::withPrefix('activate')".5
- Category
- Maintainability
- Occurrences
- 5
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "Config::withPrefix('activate')".
WARNINGSecurityInterpolated SQL is not preparedUse placeholders and $wpdb->prepare(); found interpolated variable {$newTable} at "RENAME TABLE `{$oldTable}` TO `{$newTable}`"4
- Category
- Security
- Occurrences
- 4
- Severity
- warning
Sample message
Use placeholders and $wpdb->prepare(); found interpolated variable {$newTable} at "RENAME TABLE `{$oldTable}` TO `{$newTable}`"
WARNINGMaintainabilityNon-prefixed functionFunctions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "bfmActivate".4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- warning
Sample message
Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "bfmActivate".
WARNINGMaintainabilityerror log trigger errortrigger_error() found. Debug code should not normally be used in production.4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- warning
Sample message
trigger_error() found. Debug code should not normally be used in production.
WARNINGSecurityDatabase parameter is not escapedUnescaped parameter $newTable used in $wpdb->get_var()\n$newTable assigned unsafely at line 79.3
- Category
- Security
- Occurrences
- 3
- Severity
- warning
Sample message
Unescaped parameter $newTable used in $wpdb->get_var()\n$newTable assigned unsafely at line 79.
WARNINGMaintainabilityDiscouraged PHP functionThe use of function ini_set() is discouraged3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
The use of function ini_set() is discouraged
Show 13 moreShow less
WARNINGMaintainabilityNon-prefixed global variable3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$assetUrl".
WARNINGSecurityRequest data is not unslashed3
- Category
- Security
- Occurrences
- 3
- Severity
- warning
Sample message
$_REQUEST['action'] not unslashed before sanitization. Use wp_unslash() or similar
ERRORMaintainabilitywp function not compatible with requires wp3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- error
Sample message
Function "str_contains()" requires WordPress 5.9.0, but your plugin minimum supported version is WordPress 5.0.0.
WARNINGMaintainabilityNon-prefixed class2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "BFMPluginOptions".
WARNINGSecurityInput is not sanitized2
- Category
- Security
- Occurrences
- 2
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_REQUEST['content']
WARNINGSecurityInput is not validated2
- Category
- Security
- Occurrences
- 2
- Severity
- warning
Sample message
Detected usage of a possibly undefined superglobal array index: $_REQUEST['cmd']. Check that the array index exists before using it.
WARNINGMaintainabilityDirect Query1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGMaintainabilityNo Caching1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
WARNINGMaintainabilityNon-prefixed hook name1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "https_local_ssl_verify".
WARNINGMaintainabilityerror log error log1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
error_log() found. Debug code should not normally be used in production.
WARNINGPerformancePost Not In exclude1
- Category
- Performance
- Occurrences
- 1
- Severity
- warning
Sample message
Using exclusionary parameters, like exclude, in calls to get_posts() should be done with caution, see https://wpvip.com/documentation/performance-improvements-by-removing-usage-of-post__not_in/ for more information.
WARNINGMaintainabilitymismatched plugin name1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Plugin name "File Manager" is different from the name declared in plugin header "Bit File Manager".
WARNINGRepo Compliancereadme parser warnings no short description present1
- Category
- Repo Compliance
- Occurrences
- 1
- Severity
- warning
Sample message
The "Short Description" section is missing. An excerpt was generated from your main plugin description.
External Connections
Potential connections found in static code analysis.
Outbound calls
296
External assets
4
Incoming endpoints
0
Notable Domains
bitapps.pro6 · outbound
apple.com4 · outbound
cdn.rawgit.com3 · outbound
apache.org2 · outbound
java.sun.com2 · outbound
octopress.org2 · outbound
Platform / Reference Domains
w3.org215 · platform/reference
github.com32 · platform/reference
ps.w.org5 · platform/reference
wordpress.org5 · platform/reference
External Asset Domains
cdnjs.cloudflare.com4 · asset
Incoming Endpoints
No public endpoints detected.
Score History
2 score snapshots
v6.9
53
Latest
- Findings
- 109
- Errors
- 41
- Warnings
- 68
- Check
- 2.0.0
v6.8.9
50
Score
- Findings
- 114
- Errors
- 42
- Warnings
- 72
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 53 | 109 | 41 | 68 | v6.9 | 2.0.0 |
| 50 | 114 | 42 | 72 | v6.8.9 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Plugin
Author
Category
Issue
Domain
Related
Contact Form 769 scoreElementor Website Builder – more than just a page builder35 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce22 scoreAkismet Anti-spam: Spam Protection35 scoreLiteSpeed Cache35 scoreAll-in-One WP Migration and Backup34 scoreFile Manager22 scoreFileBird – WordPress Media Library Folders & File Manager24 scoreFileOrganizer – WordPress File Manager21 scoreAdvanced File Manager – Ultimate File Manager for WordPress And Document Library Solution19 scoreDownload Manager22 scoreFile Manager Pro – Filester22 scoreFile Upload Types by WPForms98 score
Plugin
Author
Category
Issue
Domain
Related
Contact Form 769 scoreElementor Website Builder – more than just a page builder35 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce22 scoreAkismet Anti-spam: Spam Protection35 scoreLiteSpeed Cache35 scoreAll-in-One WP Migration and Backup34 scoreFile Manager22 scoreFileBird – WordPress Media Library Folders & File Manager24 scoreFileOrganizer – WordPress File Manager21 scoreAdvanced File Manager – Ultimate File Manager for WordPress And Document Library Solution19 scoreDownload Manager22 scoreFile Manager Pro – Filester22 scoreFile Upload Types by WPForms98 score
Related Plugins
Add From Server Reloaded
3k+ active installs
99
File Upload Types by WPForms
30k+ active installs
98
Overwrite Uploads
1k+ active installs
97
Bulk Media Register
8k+ active installs
95
Simple File List
3k+ active installs
93
Hotlink File Prevention
600 active installs
91