Export and import WordPress posts, pages, users, widgets, menus, themes & settings - real media files, no broken links or missing thumbnails.
36
Score
82
Errors
238
Warnings
+0
Change
Category Scores
Security0
Repo100
Performance100
Maintainability54
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Maintainability
147
12 issue groups
Security
110
11 issue groups
I18n
62
2 issue groups
WARNINGSecurityMissing nonce verificationProcessing form data without nonce verification.57
- Category
- Security
- Occurrences
- 57
- Severity
- warning
Sample message
Processing form data without nonce verification.
ERRORI18nMissing Translators CommentA function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.56
- Category
- I18n
- Occurrences
- 56
- Severity
- error
Sample message
A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.
WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.54
- Category
- Maintainability
- Occurrences
- 54
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().49
- Category
- Maintainability
- Occurrences
- 49
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
WARNINGMaintainabilityDiscouraged PHP functionThe use of function ini_set() is discouraged24
- Category
- Maintainability
- Occurrences
- 24
- Severity
- warning
Sample message
The use of function ini_set() is discouraged
WARNINGSecurityInterpolated SQL is not preparedUse placeholders and $wpdb->prepare(); found interpolated variable $placeholders at \t\t\t WHERE post_type IN ($placeholders)\n15
- Category
- Security
- Occurrences
- 15
- Severity
- warning
Sample message
Use placeholders and $wpdb->prepare(); found interpolated variable $placeholders at \t\t\t WHERE post_type IN ($placeholders)\n
ERRORSecuritySQL query is not preparedUse placeholders and $wpdb->prepare(); found $query8
- Category
- Security
- Occurrences
- 8
- Severity
- error
Sample message
Use placeholders and $wpdb->prepare(); found $query
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_POST['append']7
- Category
- Security
- Occurrences
- 7
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_POST['append']
ERRORI18nUnordered Placeholders TextMultiple placeholders in translatable strings should be ordered. Expected "%1$d, %2$d, %3$d", but got "%d, %d, %d" in 'Processed %d of %d media items (%d%%)'.6
- Category
- I18n
- Occurrences
- 6
- Severity
- error
Sample message
Multiple placeholders in translatable strings should be ordered. Expected "%1$d, %2$d, %3$d", but got "%d, %d, %d" in 'Processed %d of %d media items (%d%%)'.
WARNINGSecurityDatabase parameter is not escapedUnescaped parameter $table used in $wpdb->get_row()\n$table assigned unsafely at line 124.5
- Category
- Security
- Occurrences
- 5
- Severity
- warning
Sample message
Unescaped parameter $table used in $wpdb->get_row()\n$table assigned unsafely at line 124.
Show 15 moreShow less
WARNINGMaintainabilityNon-prefixed global variable5
- Category
- Maintainability
- Occurrences
- 5
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$available_tags".
ERRORSecurityOutput is not escaped5
- Category
- Security
- Occurrences
- 5
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$trashed_count'.
WARNINGSecurityRequest data is not unslashed5
- Category
- Security
- Occurrences
- 5
- Severity
- warning
Sample message
$_POST['append'] not unslashed before sanitization. Use wp_unslash() or similar
WARNINGSecurityNonce verification recommended4
- Category
- Security
- Occurrences
- 4
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGMaintainabilityNon-prefixed hook name3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "plugin_install_action_links".
WARNINGMaintainabilityerror log error log3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
error_log() found. Debug code should not normally be used in production.
ERRORSecurityDatabase parameter is not escaped2
- Category
- Security
- Occurrences
- 2
- Severity
- error
Sample message
Unescaped parameter $sql used in $wpdb->get_results()\n$sql assigned unsafely at line 195.
WARNINGMaintainabilityslow db query meta query2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
Detected usage of meta_query, possible slow query.
WARNINGMaintainabilityNon-prefixed class2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "PEIM_CPT_ACF_Exporter".
ERRORMaintainabilityfile system operations rmdir2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: rmdir().
ERRORMaintainabilityOffloaded Content1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
Offloading images, js, css, and other scripts to your servers or any remote service is disallowed.
ERRORSecurityLike Wildcards In Query1
- Category
- Security
- Occurrences
- 1
- Severity
- error
Sample message
SQL wildcards for a LIKE query should be passed in through a replacement parameter. Found: LIKE 'image%'.
WARNINGSecurityReplacements Wrong Number1
- Category
- Security
- Occurrences
- 1
- Severity
- warning
Sample message
Incorrect number of replacements passed to $wpdb->prepare(). Found 1 replacement parameters, expected 3.
WARNINGMaintainabilityslow db query meta key1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Detected usage of meta_key, possible slow query.
WARNINGMaintainabilityerror log set error handler1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
set_error_handler() found. Debug code should not normally be used in production.
External Connections
Potential connections found in static code analysis.
Outbound calls
190
External assets
2
Incoming endpoints
105
Notable Domains
wpazleen.com32 · outbound
freemius.com8 · outbound
youtube.com7 · outbound
php.net6 · outbound
benalman.com2 · outbound
checkout.freemius-local.com2 · outbound
Platform / Reference Domains
gnu.org83 · platform/reference
w3.org13 · platform/reference
wordpress.org8 · platform/reference
api.wordpress.org2 · platform/reference
github.com2 · platform/reference
make.wordpress.org2 · platform/reference
core.trac.wordpress.org1 · platform/reference
profiles.wordpress.org1 · platform/reference
s.w.org1 · platform/reference
External Asset Domains
No external asset domains detected.
Incoming Endpoints
No public endpoints detected.
Admin AJAX endpoints100
wp_ajax_peiwm_import_widgets_menusauthenticated
wp_ajax
wp_ajax_peiwm_get_content_statsauthenticated
wp_ajax
wp_ajax_peiwm_import_nav_menusauthenticated
wp_ajax
wp_ajax_peiwm_import_widgetsauthenticated
wp_ajax
admin_post_fs_clone_resolutionauthenticated
admin_post
admin_post_peiwm_download_cpt_exportauthenticated
admin_post
admin_post_peiwm_download_users_exportauthenticated
admin_post
admin_post_peiwm_export_media_downloadauthenticated
admin_post
admin_post_peiwm_export_posts_downloadauthenticated
admin_post
wp_ajax_fetch_recommendationsauthenticated
wp_ajax
wp_ajax_fs_dismiss_notice_action_{$ajax_action_suffix}authenticated
wp_ajax
wp_ajax_fs_toggle_debug_modeauthenticated
wp_ajax
88 more hidden
Score History
11 score snapshots
v1.17.1
36
Latest
- Findings
- 320
- Errors
- 82
- Warnings
- 238
- Check
- 2.1.0
v1.17.0
36
Score
- Findings
- 310
- Errors
- 83
- Warnings
- 227
- Check
- 2.1.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 36 | 320 | 82 | 238 | v1.17.1 | 2.1.0 |
| 36 | 310 | 83 | 227 | v1.17.0 | 2.1.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Author
Issue
Domain
Related
WooCommerce22 scoreAll-in-One WP Migration and Backup34 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreContact Form 769 scoreLiteSpeed Cache35 scoreAkismet Anti-spam: Spam Protection35 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWP Mail SMTP by WPForms – The Most Popular SMTP and Email Log Plugin30 scoreWPCode – Insert Headers and Footers + Custom Code Snippets – WordPress Code Manager88 scoreUpdraftPlus: WP Backup & Migration Plugin52 scoreDuplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More20 scoreOne Click Demo Import38 scoreMigrate Guru – Site Migration & Cloning82 scoreWidget Importer & Exporter98 score
Author
Issue
Domain
Related
WooCommerce22 scoreAll-in-One WP Migration and Backup34 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreContact Form 769 scoreLiteSpeed Cache35 scoreAkismet Anti-spam: Spam Protection35 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWP Mail SMTP by WPForms – The Most Popular SMTP and Email Log Plugin30 scoreWPCode – Insert Headers and Footers + Custom Code Snippets – WordPress Code Manager88 scoreUpdraftPlus: WP Backup & Migration Plugin52 scoreDuplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More20 scoreOne Click Demo Import38 scoreMigrate Guru – Site Migration & Cloning82 scoreWidget Importer & Exporter98 score
Related Plugins
Solace Extra
10k+ active installs
100
Catch Themes Demo Import
5k+ active installs
100
Database Collation Fix
1k+ active installs
100
Import Shopify To WP
900 active installs
100
Aruba Migration Tool
600 active installs
100
Menu Backup & Restore + Import/Export
500 active installs
100