Professional media download solution with bulk operations, smart management, and enterprise-grade security for WordPress
35
Score
19
Errors
15
Warnings
+0
Change
Category Scores
Security26
Repo79
Performance100
Maintainability85
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Security
19
6 issue groups
Maintainability
11
5 issue groups
Repo Compliance
2
2 issue groups
I18n
1
1 issue group
ERRORMaintainabilityunlink unlinkunlink() is discouraged. Use wp_delete_file() to delete a file.6
- Category
- Maintainability
- Occurrences
- 6
- Severity
- error
Sample message
unlink() is discouraged. Use wp_delete_file() to delete a file.
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$checked'.5
- Category
- Security
- Occurrences
- 5
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$checked'.
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_GET['nonce']4
- Category
- Security
- Occurrences
- 4
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_GET['nonce']
WARNINGSecurityRequest data is not unslashed$_GET['nonce'] not unslashed before sanitization. Use wp_unslash() or similar4
- Category
- Security
- Occurrences
- 4
- Severity
- warning
Sample message
$_GET['nonce'] not unslashed before sanitization. Use wp_unslash() or similar
WARNINGSecurityMissing nonce verificationProcessing form data without nonce verification.3
- Category
- Security
- Occurrences
- 3
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.2
- Category
- Security
- Occurrences
- 2
- Severity
- warning
Sample message
Processing form data without nonce verification.
ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
WARNINGI18nDiscouraged text-domain loadingload_plugin_textdomain() has been discouraged since WordPress version 4.6. When your plugin is hosted on WordPress.org, you no longer need to manually include this function call for translations under your plugin slug. WordPress will automatically load the translations for you as needed.1
- Category
- I18n
- Occurrences
- 1
- Severity
- warning
Sample message
load_plugin_textdomain() has been discouraged since WordPress version 4.6. When your plugin is hosted on WordPress.org, you no longer need to manually include this function call for translations under your plugin slug. WordPress will automatically load the translations for you as needed.
ERRORMaintainabilitydate datedate() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.
WARNINGSecurityInput is not validatedDetected usage of a possibly undefined superglobal array index: $_POST['_wpnonce']. Check that the array index exists before using it.1
- Category
- Security
- Occurrences
- 1
- Severity
- warning
Sample message
Detected usage of a possibly undefined superglobal array index: $_POST['_wpnonce']. Check that the array index exists before using it.
Show 5 moreShow less
ERRORMaintainabilityfile system operations readfile1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: readfile().
ERRORMaintainabilityfile system operations rmdir1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: rmdir().
ERRORSupply ChainHidden files included1
- Category
- Supply Chain
- Occurrences
- 1
- Severity
- error
Sample message
Hidden files are not permitted.
ERRORRepo Complianceplugin header invalid requires wp1
- Category
- Repo Compliance
- Occurrences
- 1
- Severity
- error
Sample message
The "Requires at least" header in the plugin file should only contain a WordPress version such as "7.0" or "6.9".
ERRORRepo Compliancereadme mismatched header requires1
- Category
- Repo Compliance
- Occurrences
- 1
- Severity
- error
Sample message
Mismatched Requires at least: 5.0 != 5.0 or higher. "Requires at least" needs to be exactly the same with that in your main plugin file's header.
External Connections
Potential connections found in static code analysis.
Outbound calls
5
External assets
0
Incoming endpoints
3
Platform / Reference Domains
gnu.org1 · platform/reference
wordpress.org1 · platform/reference
External Asset Domains
No external asset domains detected.
Incoming Endpoints
No public endpoints detected.
Admin AJAX endpoints3
wp_ajax_download_filesauthenticated
wp_ajax
wp_ajax_mld_cleanup_tempauthenticated
wp_ajax
wp_ajax_mld_serve_zipauthenticated
wp_ajax
Score History
2 score snapshots
v1.4.3
35
Latest
- Findings
- 34
- Errors
- 19
- Warnings
- 15
- Check
- 2.0.0
v1.4.2
35
Score
- Findings
- 37
- Errors
- 21
- Warnings
- 16
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 35 | 34 | 19 | 15 | v1.4.3 | 2.0.0 |
| 35 | 37 | 21 | 16 | v1.4.2 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Author
Issue
Related
File Upload Types by WPForms98 scoreWooCommerce21 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreElementor Website Builder – more than just a page builder39 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreClassic Editor63 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreAkismet Anti-spam: Spam Protection35 scoreAll-in-One WP Migration and Backup34 scoreWP Mail SMTP by WPForms – The Most Popular SMTP and Email Log Plugin30 scoreJetpack – WP Security, Backup, Speed, & Growth22 scoreMedia Cleaner: Clean your WordPress!25 scoreDownload Plugin31 scoreClean Image Filenames82 score
Author
Issue
Related
File Upload Types by WPForms98 scoreWooCommerce21 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreElementor Website Builder – more than just a page builder39 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreClassic Editor63 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreAkismet Anti-spam: Spam Protection35 scoreAll-in-One WP Migration and Backup34 scoreWP Mail SMTP by WPForms – The Most Popular SMTP and Email Log Plugin30 scoreJetpack – WP Security, Backup, Speed, & Growth22 scoreMedia Cleaner: Clean your WordPress!25 scoreDownload Plugin31 scoreClean Image Filenames82 score
Related Plugins
Media Library Enable Infinite Scrolling
8k+ active installs
99
KP Zip Downloader
3k+ active installs
99
File Upload Types by WPForms
40k+ active installs
98
Overwrite Uploads
1k+ active installs
97
Download List Block with Icons
400 active installs
97
Bulk Media Register
8k+ active installs
95