Secure REST API endpoints for WordPress site migration — database export/import, file transfer, and search-replace.
31
Score
51
Errors
119
Warnings
+0
Change
Category Scores
Security0
Repo94
Performance100
Maintainability33
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Maintainability
129
16 issue groups
Security
40
7 issue groups
Repo Compliance
1
1 issue group
WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.32
- Category
- Maintainability
- Occurrences
- 32
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().32
- Category
- Maintainability
- Occurrences
- 32
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
WARNINGMaintainabilityDiscouraged PHP functionThe use of function ini_set() is discouraged17
- Category
- Maintainability
- Occurrences
- 17
- Severity
- warning
Sample message
The use of function ini_set() is discouraged
WARNINGSecurityDatabase parameter is not escapedUnescaped parameter $current_query used in $wpdb->query()\n$current_query assigned unsafely at line 2443.13
- Category
- Security
- Occurrences
- 13
- Severity
- warning
Sample message
Unescaped parameter $current_query used in $wpdb->query()\n$current_query assigned unsafely at line 2443.
WARNINGSecurityInterpolated SQL is not preparedUse placeholders and $wpdb->prepare(); found interpolated variable $safe_table at "SELECT * FROM `$safe_table` LIMIT %d OFFSET %d"12
- Category
- Security
- Occurrences
- 12
- Severity
- warning
Sample message
Use placeholders and $wpdb->prepare(); found interpolated variable $safe_table at "SELECT * FROM `$safe_table` LIMIT %d OFFSET %d"
ERRORMaintainabilityunlink unlinkunlink() is discouraged. Use wp_delete_file() to delete a file.7
- Category
- Maintainability
- Occurrences
- 7
- Severity
- error
Sample message
unlink() is discouraged. Use wp_delete_file() to delete a file.
ERRORMaintainabilityfile system operations fcloseFile operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fclose().6
- Category
- Maintainability
- Occurrences
- 6
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fclose().
ERRORMaintainabilitycurl curl closeUsing cURL functions is highly discouraged. Use wp_remote_get() instead.5
- Category
- Maintainability
- Occurrences
- 5
- Severity
- error
Sample message
Using cURL functions is highly discouraged. Use wp_remote_get() instead.
ERRORMaintainabilitycurl curl execUsing cURL functions is highly discouraged. Use wp_remote_get() instead.5
- Category
- Maintainability
- Occurrences
- 5
- Severity
- error
Sample message
Using cURL functions is highly discouraged. Use wp_remote_get() instead.
ERRORMaintainabilitycurl curl initUsing cURL functions is highly discouraged. Use wp_remote_get() instead.5
- Category
- Maintainability
- Occurrences
- 5
- Severity
- error
Sample message
Using cURL functions is highly discouraged. Use wp_remote_get() instead.
Show 14 moreShow less
ERRORMaintainabilitycurl curl setopt array5
- Category
- Maintainability
- Occurrences
- 5
- Severity
- error
Sample message
Using cURL functions is highly discouraged. Use wp_remote_get() instead.
WARNINGSecurityNonce verification recommended4
- Category
- Security
- Occurrences
- 4
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGSecurityInput is not sanitized4
- Category
- Security
- Occurrences
- 4
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_SERVER['SERVER_ADDR']
WARNINGSecurityRequest data is not unslashed4
- Category
- Security
- Occurrences
- 4
- Severity
- warning
Sample message
$_SERVER['SERVER_ADDR'] not unslashed before sanitization. Use wp_unslash() or similar
ERRORMaintainabilitycurl curl error4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- error
Sample message
Using cURL functions is highly discouraged. Use wp_remote_get() instead.
ERRORMaintainabilitycurl curl getinfo4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- error
Sample message
Using cURL functions is highly discouraged. Use wp_remote_get() instead.
ERRORSecurityOutput is not escaped2
- Category
- Security
- Occurrences
- 2
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$json'.
ERRORMaintainabilityfile system operations chmod2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: chmod().
ERRORMaintainabilityfile system operations fread2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fread().
ERRORSecurityDatabase parameter is not escaped1
- Category
- Security
- Occurrences
- 1
- Severity
- error
Sample message
Unescaped parameter $select_list used in $wpdb->get_results()\n$select_list assigned unsafely at line 2996.
WARNINGMaintainabilitySchema Change1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Attempting a database schema change is discouraged.
ERRORMaintainabilityfile system operations fopen1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fopen().
ERRORMaintainabilityfile system operations fwrite1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fwrite().
ERRORRepo Complianceoutdated tested upto header1
- Category
- Repo Compliance
- Occurrences
- 1
- Severity
- error
Sample message
Tested up to: 7.0 < 7.1. The "Tested up to" value in your plugin is not set to the current version of WordPress. This means your plugin will not show up in searches, as we require plugins to be compatible and documented as tested up to the most recent version of WordPress.
External Connections
Potential connections found in static code analysis.
Outbound calls
7
External assets
0
Incoming endpoints
3
Notable Domains
migrate.instawp.io3 · outbound
instawp.com1 · outbound
Platform / Reference Domains
downloads.wordpress.org1 · platform/reference
opensource.org1 · platform/reference
wordpress.org1 · platform/reference
External Asset Domains
No external asset domains detected.
Incoming Endpoints
No public endpoints detected.
Admin AJAX endpoints3
admin_post_instamigrate_bridge_discoverauthenticated
admin_post
admin_post_instamigrate_bridge_startauthenticated
admin_post
admin_post_instamigrate_bridge_stopauthenticated
admin_post
Score History
First score snapshot
v1.8.7
31
Latest
- Findings
- 170
- Errors
- 51
- Warnings
- 119
- Check
- 2.1.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 31 | 170 | 51 | 119 | v1.8.7 | 2.1.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Plugin
Author
Issue
Related
All-in-One WP Migration and Backup34 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder38 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce22 scoreAkismet Anti-spam: Spam Protection35 scoreLiteSpeed Cache35 scoreUpdraftPlus: WP Backup & Migration Plugin52 scoreJetpack – WP Security, Backup, Speed, & Growth22 scoreYoast Duplicate Post70 scoreDuplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More20 scoreManageWP Worker23 scoreString locator35 scoreInstaWP Connect – 1-click WP Staging & Migration23 score
Plugin
Author
Issue
Related
All-in-One WP Migration and Backup34 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder38 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce22 scoreAkismet Anti-spam: Spam Protection35 scoreLiteSpeed Cache35 scoreUpdraftPlus: WP Backup & Migration Plugin52 scoreJetpack – WP Security, Backup, Speed, & Growth22 scoreYoast Duplicate Post70 scoreDuplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More20 scoreManageWP Worker23 scoreString locator35 scoreInstaWP Connect – 1-click WP Staging & Migration23 score
Related Plugins
Plugins Garbage Collector (Database Cleanup)
10k+ active installs
100
Database Collation Fix
1k+ active installs
100
Easy Actions Scheduler Cleaner
900 active installs
100
Aruba Migration Tool
600 active installs
100
Menu Backup & Restore + Import/Export
500 active installs
100
Simple Table Manager
400 active installs
100