Prime Mover – Migrate WordPress Website & Backups

The simplest all-around WordPress migration tool/backup plugin. These support multisite backup/migration or clone WP site/multisite subsite.

v2.1.6CodexonicsUpdated 2026-06-06Added Jun 29, 201910k+ installs100% rating100% support resolved
22
Score
1,326
Errors
1,600
Warnings
+0
Change

Category Scores

Security0
Repo81
Performance100
Maintainability0

Top Issues by Category

maintainability1,635
security847
i18n303

Issues Details

2,926 issues found in latest scan

WARNING1,090
WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedVariableFound

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$account_addon_ids".

ERROR670
WordPress.Security.EscapeOutput.OutputNotEscaped

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '" <a href='{$skip_url}' class='button button-small button-secondary'>{$use_plugin_anonymously_text}</a>"'.

ERROR207
WordPress.WP.I18n.MissingTranslatorsComment

A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.

WARNING117
WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedFunctionFound

Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: &quot;_fs_text&quot;.

WARNING69
WordPress.DB.DirectDatabaseQuery.DirectQuery

Use of a direct database call is discouraged.

WARNING64
WordPress.DB.DirectDatabaseQuery.NoCaching

Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().

WARNING63
WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedClassFound

Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: &quot;FS_Admin_Menu_Manager&quot;.

ERROR63
WordPress.WP.I18n.UnorderedPlaceholdersText

Multiple placeholders in translatable strings should be ordered. Expected "%1$d, %2$d", but got "%d, %d" in '%d completed. %d metas processed.'.

ERROR42
WordPress.WP.AlternativeFunctions.file_system_operations_fopen

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fopen().

ERROR41
WordPress.WP.AlternativeFunctions.file_system_operations_fclose

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fclose().

ERROR40
WordPress.DB.PreparedSQL.NotPrepared

Use placeholders and $wpdb->prepare(); found $db_search

WARNING37
WordPress.DB.PreparedSQL.InterpolatedNotPrepared

Use placeholders and $wpdb-&gt;prepare(); found interpolated variable $column at &quot;SELECT $id_column FROM $table WHERE meta_key = %s AND $column = %d&quot;

ERROR33
WordPress.Security.EscapeOutput.ExceptionNotEscaped

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"Compression method ({$c}) is not defined yet"'.

ERROR33
WordPress.WP.I18n.MissingArgDomain

Missing $domain parameter in function call to __().

WARNING29
WordPress.PHP.DevelopmentFunctions.error_log_print_r

print_r() found. Debug code should not normally be used in production.

WARNING26
WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedConstantFound

Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: &quot;FS_API__ADDRESS&quot;.

ERROR24
WordPress.WP.AlternativeFunctions.file_system_operations_fread

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fread().

ERROR24
WordPress.WP.AlternativeFunctions.file_system_operations_fwrite

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fwrite().

ERROR21
wp_function_not_compatible_with_requires_wp

Function "get_dirsize()" requires WordPress 5.2.0, but your plugin minimum supported version is WordPress 4.9.8.

ERROR18
PluginCheck.Security.DirectDB.UnescapedDBParameter

Unescaped parameter $db_search used in $wpdb->get_col()\n$db_search assigned unsafely at line 3863.

WARNING18
WordPress.Security.ValidatedSanitizedInput.MissingUnslash

$_GET[&#039;orderby&#039;] not unslashed before sanitization. Use wp_unslash() or similar

WARNING17
WordPress.Security.ValidatedSanitizedInput.InputNotSanitized

Detected usage of a non-sanitized input variable: $_GET[&#039;orderby&#039;]

ERROR16
WordPress.WP.AlternativeFunctions.parse_url_parse_url

parse_url() is discouraged because of inconsistency in the output across PHP versions; use wp_parse_url() instead.

WARNING14
PluginCheck.Security.DirectDB.UnescapedDBParameter

Unescaped parameter $specific_site_prefix used in $wpdb-&gt;get_col()\n$specific_site_prefix assigned unsafely at line 3869.

ERROR9
WordPress.DB.RestrictedFunctions.mysql_mysqli_query

Accessing the database directly should be avoided. Please use the $wpdb object and associated functions instead. Found: mysqli_query.

Latest Snapshot

Findings

2,926

Errors

1,326

Warnings

1,600

Score History

First score snapshot

First scan completed Jun 20, 2026

v2.1.6 · Plugin Check 2.0.0 · Model 2026.06-mvp-static-v2

Jun 20, 2026

v2.1.6

22

Latest

Findings
2,926
Errors
1,326
Warnings
1,600
Plugin Check
2.0.0
Model
2026.06-mvp-static-v2

Related Plugins