Import and export WordPress and WooCommerce users with full user meta, custom fields, billing & shipping details, and membership data.
Category Scores
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Maintainability
88
13 issue groups
Security
72
6 issue groups
Repo Compliance
4
4 issue groups
I18n
3
2 issue groups
WARNINGSecurityInterpolated Not PreparedUse placeholders and $wpdb->prepare(); found interpolated variable $created_count at "UPDATE $log_table_name SET created = $created_count WHERE hash_key = '$hash_key'"39
- Category
- Security
- Occurrences
- 39
- Severity
- warning
Sample message
Use placeholders and $wpdb->prepare(); found interpolated variable $created_count at "UPDATE $log_table_name SET created = $created_count WHERE hash_key = '$hash_key'"
WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.38
- Category
- Maintainability
- Occurrences
- 38
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().31
- Category
- Maintainability
- Occurrences
- 31
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
ERRORSecurityUnescaped DBParameterUnescaped parameter $attach_id used in $wpdb->get_results()\n$attach_id assigned unsafely at line 91.12
- Category
- Security
- Occurrences
- 12
- Severity
- error
Sample message
Unescaped parameter $attach_id used in $wpdb->get_results()\n$attach_id assigned unsafely at line 91.
WARNINGSecurityUnescaped DBParameterUnescaped parameter $log_table_name used in $wpdb->get_results()\n$log_table_name assigned unsafely at line 29.8
- Category
- Security
- Occurrences
- 8
- Severity
- warning
Sample message
Unescaped parameter $log_table_name used in $wpdb->get_results()\n$log_table_name assigned unsafely at line 29.
WARNINGSecurityInput Not ValidatedDetected usage of a possibly undefined superglobal array index: $_POST['image']. Check that the array index exists before using it.6
- Category
- Security
- Occurrences
- 6
- Severity
- warning
Sample message
Detected usage of a possibly undefined superglobal array index: $_POST['image']. Check that the array index exists before using it.
WARNINGSecurityMissing Unslash$_POST['image'] not unslashed before sanitization. Use wp_unslash() or similar6
- Category
- Security
- Occurrences
- 6
- Severity
- warning
Sample message
$_POST['image'] not unslashed before sanitization. Use wp_unslash() or similar
WARNINGMaintainabilityNon Prefixed Variable FoundGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$billing_class".5
- Category
- Maintainability
- Occurrences
- 5
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$billing_class".
ERRORMaintainabilitydate datedate() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- error
Sample message
date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.
WARNINGMaintainabilityNon Prefixed Hookname FoundHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "install_csv_importer".2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "install_csv_importer".
Show 15 moreShow less
ERRORI18nText Domain Mismatch2
- Category
- I18n
- Occurrences
- 2
- Severity
- error
Sample message
Mismatched text domain. Expected 'import-users' but got 'wp-ultimate-csv-importer'.
ERRORMaintainabilityFound1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
The use of function eval() is forbidden
ERRORSecurityNot Prepared1
- Category
- Security
- Occurrences
- 1
- Severity
- error
Sample message
Use placeholders and $wpdb->prepare(); found $update_query
ERRORMaintainabilityfile system operations fclose1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fclose().
ERRORMaintainabilityfile system operations fopen1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fopen().
ERRORMaintainabilityfile system operations fwrite1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fwrite().
ERRORMaintainabilityparse url parse url1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
parse_url() is discouraged because of inconsistency in the output across PHP versions; use wp_parse_url() instead.
ERRORMaintainabilityunlink unlink1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
unlink() is discouraged. Use wp_delete_file() to delete a file.
ERRORRepo Compliancelicense mismatch1
- Category
- Repo Compliance
- Occurrences
- 1
- Severity
- error
Sample message
Your plugin has a different license declared in the readme file and plugin header. Please update your readme with a valid GPL license identifier.
WARNINGMaintainabilitymismatched plugin name1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Plugin name "User Import with meta - WP Ultimate CSV Importer Add-on" is different from the name declared in plugin header "Import Users".
WARNINGRepo Complianceplugin header nonexistent domain path1
- Category
- Repo Compliance
- Occurrences
- 1
- Severity
- warning
Sample message
The "Domain Path" header in the plugin file must point to an existing folder. Found: "languages"
WARNINGRepo Compliancereadme parser warnings too many tags1
- Category
- Repo Compliance
- Occurrences
- 1
- Severity
- warning
Sample message
One or more tags were ignored. Please limit your plugin to 5 tags.
WARNINGRepo Compliancereadme parser warnings trimmed short description1
- Category
- Repo Compliance
- Occurrences
- 1
- Severity
- warning
Sample message
The "Short Description" section is too long and was truncated. A maximum of 150 characters is supported.
ERRORI18ntextdomain invalid format1
- Category
- I18n
- Occurrences
- 1
- Severity
- error
Sample message
The "Text Domain" header in the plugin file should only contain lowercase letters, numbers, and hyphens. Found "Import-Users".
WARNINGMaintainabilitytrademarked term1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
The plugin name includes a restricted term. Your chosen plugin name - "User Import with meta - WP Ultimate CSV Importer Add-on" - contains the restricted term "wp" which cannot be used at all in your plugin name.
Score History
First score snapshot
v1.7
35
Latest
- Findings
- 167
- Errors
- 27
- Warnings
- 140
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 35 | 167 | 27 | 140 | v1.7 | 2.0.0 |
Related Plugins
40k+ active installs
10k+ active installs
5k+ active installs
70k+ active installs
10k+ active installs
20k+ active installs