Use Advanced File Manager to manage WordPress files, create archives, and build document libraries—all directly from your WordPress dashboard!
18
Score
1,229
Errors
923
Warnings
-1
Change
Category Scores
Security0
Repo56
Performance97
Maintainability0
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Maintainability
959
18 issue groups
Security
944
7 issue groups
ERRORSecurityException output is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"'$directory' could not be created."'.463
- Category
- Security
- Occurrences
- 463
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"'$directory' could not be created."'.
WARNINGMaintainabilityNon-prefixed functionFunctions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "access".193
- Category
- Maintainability
- Occurrences
- 193
- Severity
- warning
Sample message
Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "access".
WARNINGMaintainabilityNon-prefixed classClasses declared by a theme/plugin should start with the theme/plugin prefix. Found: "FMA_Controller".192
- Category
- Maintainability
- Occurrences
- 192
- Severity
- warning
Sample message
Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "FMA_Controller".
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"{$image_path}/bottom-left.png"'.118
- Category
- Security
- Occurrences
- 118
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"{$image_path}/bottom-left.png"'.
ERRORSecurityUnsafe printing functionAll output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.111
- Category
- Security
- Occurrences
- 111
- Severity
- error
Sample message
All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$$key".90
- Category
- Maintainability
- Occurrences
- 90
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$$key".
ERRORMaintainabilityfile system operations fcloseFile operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fclose().83
- Category
- Maintainability
- Occurrences
- 83
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fclose().
WARNINGSecurityRequest data is not unslashed$_GET['code'] not unslashed before sanitization. Use wp_unslash() or similar79
- Category
- Security
- Occurrences
- 79
- Severity
- warning
Sample message
$_GET['code'] not unslashed before sanitization. Use wp_unslash() or similar
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_ENV['PHPUNIT_RESULT_CACHE']66
- Category
- Security
- Occurrences
- 66
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_ENV['PHPUNIT_RESULT_CACHE']
WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.65
- Category
- Security
- Occurrences
- 65
- Severity
- warning
Sample message
Processing form data without nonce verification.
Show 15 moreShow less
ERRORMaintainabilityfile system operations fopen53
- Category
- Maintainability
- Occurrences
- 53
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fopen().
ERRORMaintainabilityfile system operations fwrite44
- Category
- Maintainability
- Occurrences
- 44
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fwrite().
WARNINGSecurityInput is not validated42
- Category
- Security
- Occurrences
- 42
- Severity
- warning
Sample message
Detected usage of a possibly undefined superglobal array index: $_GET['host']. Check that the array index exists before using it.
ERRORMaintainabilitycurl curl setopt39
- Category
- Maintainability
- Occurrences
- 39
- Severity
- error
Sample message
Using cURL functions is highly discouraged. Use wp_remote_get() instead.
ERRORMaintainabilityfile system operations is writable34
- Category
- Maintainability
- Occurrences
- 34
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: is_writable().
ERRORMaintainabilityfile system operations fread33
- Category
- Maintainability
- Occurrences
- 33
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fread().
WARNINGMaintainabilityerror log var export28
- Category
- Maintainability
- Occurrences
- 28
- Severity
- warning
Sample message
var_export() found. Debug code should not normally be used in production.
ERRORMaintainabilityfile system operations mkdir27
- Category
- Maintainability
- Occurrences
- 27
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: mkdir().
WARNINGMaintainabilityprevent path disclosure error reporting26
- Category
- Maintainability
- Occurrences
- 26
- Severity
- warning
Sample message
error_reporting() can lead to full path disclosure.
ERRORMaintainabilityMissing direct file access protection25
- Category
- Maintainability
- Occurrences
- 25
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
WARNINGMaintainabilityDirect Error Reporting Call24
- Category
- Maintainability
- Occurrences
- 24
- Severity
- warning
Sample message
Detected production-time change to PHP error reporting: error_reporting().
ERRORMaintainabilityForbidden PHP function found17
- Category
- Maintainability
- Occurrences
- 17
- Severity
- error
Sample message
The use of function eval() is forbidden
WARNINGMaintainabilityDiscouraged PHP function17
- Category
- Maintainability
- Occurrences
- 17
- Severity
- warning
Sample message
The use of function ini_set() is discouraged
ERRORMaintainabilitycurl curl init17
- Category
- Maintainability
- Occurrences
- 17
- Severity
- error
Sample message
Using cURL functions is highly discouraged. Use wp_remote_get() instead.
ERRORMaintainabilitycurl curl setopt array17
- Category
- Maintainability
- Occurrences
- 17
- Severity
- error
Sample message
Using cURL functions is highly discouraged. Use wp_remote_get() instead.
External Connections
Potential connections found in static code analysis.
Outbound calls
293
External assets
3
Incoming endpoints
4
Notable Domains
codemirror.net121 · outbound
advancedfilemanager.com21 · outbound
file-manager-advanced.test8 · outbound
en.wikipedia.org4 · outbound
boost.org2 · outbound
docbook.org2 · outbound
Platform / Reference Domains
github.com76 · platform/reference
schema.org6 · platform/reference
w3.org6 · platform/reference
wordpress.org2 · platform/reference
External Asset Domains
google.com3 · asset + outbound
fonts.googleapis.com2 · asset
Incoming Endpoints
No public endpoints detected.
Admin AJAX endpoints4
wp_ajax_fma_debug_phpauthenticated
wp_ajax
wp_ajax_fma_load_fma_uiauthenticated
wp_ajax
wp_ajax_fma_review_ajaxauthenticated
wp_ajax
wp_ajax_fma_save_php_fileauthenticated
wp_ajax
Score History
3 score snapshots
v5.4.14
18
Latest
- Findings
- 2,152
- Errors
- 1,229
- Warnings
- 923
- Check
- 2.1.0
v5.4.13
19
Score
- Findings
- 2,119
- Errors
- 1,227
- Warnings
- 892
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 18 | 2,152 | 1,229 | 923 | v5.4.14 | 2.1.0 |
| 19 | 2,119 | 1,227 | 892 | v5.4.13 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Plugin
Author
Category
Issue
Domain
Related
Yoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce22 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreElementor Website Builder – more than just a page builder39 scoreLiteSpeed Cache35 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreAkismet Anti-spam: Spam Protection35 scoreWP Mail SMTP by WPForms – The Most Popular SMTP and Email Log Plugin30 scoreJetpack – WP Security, Backup, Speed, & Growth22 scoreFile Manager22 scoreCF7 Apps – Honeypot, Database, Redirection, Webhook, and Addons for Contact Form 724 scorePassword Protected — Lock Entire Site, Pages, Posts, Categories, and Partial Content26 scorePost SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App22 scoreFileBird – WordPress Media Library Folders & File Manager24 score
Plugin
Author
Category
Issue
Domain
Related
Yoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce22 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreElementor Website Builder – more than just a page builder39 scoreLiteSpeed Cache35 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreAkismet Anti-spam: Spam Protection35 scoreWP Mail SMTP by WPForms – The Most Popular SMTP and Email Log Plugin30 scoreJetpack – WP Security, Backup, Speed, & Growth22 scoreFile Manager22 scoreCF7 Apps – Honeypot, Database, Redirection, Webhook, and Addons for Contact Form 724 scorePassword Protected — Lock Entire Site, Pages, Posts, Categories, and Partial Content26 scorePost SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App22 scoreFileBird – WordPress Media Library Folders & File Manager24 score
Related Plugins
Mediamatic – Media Library Folders
1k+ active installs
100
Kitgenix Document Manager
0 active installs
100
WP Document Revisions
2k+ active installs
99
Add From Server Reloaded
4k+ active installs
98
Bulk Media Register
8k+ active installs
95
Simple File List
3k+ active installs
93