PluginScore

Tutor LMS – Migration Tool

Move all your course, quiz, order data information and everything else from your LMS to the better Tutor LMS by simply clicking a button.

v2.4.1ThemeumUpdated Added 1k+ installs100% rating
courseeducationelearninglmsmigration
27
Score
139
Errors
341
Warnings
+0
Change

Category Scores

Security0
Repo83
Performance100
Maintainability23

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

480 findings

Maintainability

306

12 issue groups

Security

148

10 issue groups

I18n

16

3 issue groups

WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.112
Category
Maintainability
Occurrences
112
Severity
warning

Sample message

Use of a direct database call is discouraged.

WordPress.DB.DirectDatabaseQuery.DirectQuery
WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().78
Category
Maintainability
Occurrences
78
Severity
warning

Sample message

Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().

WordPress.DB.DirectDatabaseQuery.NoCaching
ERRORSecurityUnsafe printing functionAll output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.60
Category
Security
Occurrences
60
Severity
error

Sample message

All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.

WordPress.Security.EscapeOutput.UnsafePrintingFunctionReference
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$courses_count".31
Category
Maintainability
Occurrences
31
Severity
warning

Sample message

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$courses_count".

WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedVariableFound
WARNINGMaintainabilityslow db query meta keyDetected usage of meta_key, possible slow query.29
Category
Maintainability
Occurrences
29
Severity
warning

Sample message

Detected usage of meta_key, possible slow query.

WordPress.DB.SlowDBQuery.slow_db_query_meta_key
WARNINGMaintainabilityslow db query meta valueDetected usage of meta_value, possible slow query.22
Category
Maintainability
Occurrences
22
Severity
warning

Sample message

Detected usage of meta_value, possible slow query.

WordPress.DB.SlowDBQuery.slow_db_query_meta_value
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$items_count'.22
Category
Security
Occurrences
22
Severity
error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$items_count'.

WordPress.Security.EscapeOutput.OutputNotEscapedReference
WARNINGSecurityMissing nonce verificationProcessing form data without nonce verification.19
Category
Security
Occurrences
19
Severity
warning

Sample message

Processing form data without nonce verification.

WordPress.Security.NonceVerification.Missing
ERRORMaintainabilitydate datedate() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.13
Category
Maintainability
Occurrences
13
Severity
error

Sample message

date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.

WordPress.DateTime.RestrictedFunctions.date_date
ERRORSecurityException output is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '__'.11
Category
Security
Occurrences
11
Severity
error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '__'.

WordPress.Security.EscapeOutput.ExceptionNotEscapedReference
Show 15 more
ERRORI18nText Domain Mismatch11
Category
I18n
Occurrences
11
Severity
error

Sample message

Mismatched text domain. Expected 'tutor-lms-migration-tool' but got 'sample-text-domain'.

WordPress.WP.I18n.TextDomainMismatchReference
WARNINGSecurityInput is not sanitized10
Category
Security
Occurrences
10
Severity
warning

Sample message

Detected usage of a non-sanitized input variable: $_FILES['tutor_import_file']['tmp_name']

WordPress.Security.ValidatedSanitizedInput.InputNotSanitized
WARNINGSecurityInput is not validated10
Category
Security
Occurrences
10
Severity
warning

Sample message

Detected usage of a possibly undefined superglobal array index: $_FILES['tutor_import_file']['tmp_name']. Check that the array index exists before using it.

WordPress.Security.ValidatedSanitizedInput.InputNotValidated
WARNINGSecurityRequest data is not unslashed9
Category
Security
Occurrences
9
Severity
warning

Sample message

$_POST['migrate_type'] not unslashed before sanitization. Use wp_unslash() or similar

WordPress.Security.ValidatedSanitizedInput.MissingUnslash
WARNINGMaintainabilityNon-prefixed class5
Category
Maintainability
Occurrences
5
Severity
warning

Sample message

Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "LDtoTutorExport".

WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedClassFound
ERRORMaintainabilityMissing direct file access protection5
Category
Maintainability
Occurrences
5
Severity
error

Sample message

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

missing_direct_file_access_protectionReference
ERRORSecurityQuoted Simple Placeholder3
Category
Security
Occurrences
3
Severity
error

Sample message

Simple placeholders should not be quoted in the query string in $wpdb->prepare(). Found: '%d'.

WordPress.DB.PreparedSQLPlaceholders.QuotedSimplePlaceholder
WARNINGMaintainabilityslow db query meta query3
Category
Maintainability
Occurrences
3
Severity
warning

Sample message

Detected usage of meta_query, possible slow query.

WordPress.DB.SlowDBQuery.slow_db_query_meta_query
WARNINGMaintainabilityDeprecated function: seems_utf83
Category
Maintainability
Occurrences
3
Severity
warning

Sample message

seems_utf8() has been deprecated since WordPress version 6.9.0. Use wp_is_valid_utf8() instead.

WordPress.WP.DeprecatedFunctions.seems_utf8Found
ERRORI18nMissing Arg Domain3
Category
I18n
Occurrences
3
Severity
error

Sample message

Missing $domain parameter in function call to __().

WordPress.WP.I18n.MissingArgDomainReference
ERRORMaintainabilitywp function not compatible with requires wp3
Category
Maintainability
Occurrences
3
Severity
error

Sample message

Function "utf8_encode()" requires WordPress 6.9.0, but your plugin minimum supported version is WordPress 5.3.0.

wp_function_not_compatible_with_requires_wpReference
WARNINGMaintainabilityNon-prefixed function2
Category
Maintainability
Occurrences
2
Severity
warning

Sample message

Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "get_media_ids_from_content".

WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedFunctionFound
WARNINGSecurityNonce verification recommended2
Category
Security
Occurrences
2
Severity
warning

Sample message

Processing form data without nonce verification.

WordPress.Security.NonceVerification.Recommended
WARNINGSecurityInput is not validated or sanitized2
Category
Security
Occurrences
2
Severity
warning

Sample message

Detected usage of a non-sanitized, non-validated input variable _SERVER: "://$_SERVER[HTTP_HOST]$_SERVER[REQUEST_URI]"

WordPress.Security.ValidatedSanitizedInput.InputNotValidatedNotSanitized
ERRORI18nNon Singular String Literal Text2
Category
I18n
Occurrences
2
Severity
error

Sample message

The $text parameter must be a single text string literal. Found: TLMT_URL . 'assets/img/error-modal-icon.jpg'

WordPress.WP.I18n.NonSingularStringLiteralTextReference

External Connections

Potential connections found in static code analysis.

6 domains

Outbound calls

72

External assets

0

Incoming endpoints

19

Notable Domains

themeum.com62 · outbound
php-fig.org2 · outbound
getcomposer.org1 · outbound

Platform / Reference Domains

w3.org3 · platform/reference
github.com2 · platform/reference
wordpress.org2 · platform/reference

External Asset Domains

No external asset domains detected.

Incoming Endpoints

No public endpoints detected.

Admin AJAX endpoints16
wp_ajax_insert_tutor_migration_dataauthenticated

wp_ajax

wp_ajax_tlmt_reset_migrated_items_countauthenticated

wp_ajax

wp_ajax__get_ld_live_progress_course_migrating_infoauthenticated

wp_ajax

wp_ajax__get_lif_live_progress_course_migrating_infoauthenticated

wp_ajax

wp_ajax__get_lp_live_progress_course_migrating_infoauthenticated

wp_ajax

wp_ajax_install_tutor_pluginauthenticated

wp_ajax

wp_ajax_ld_migrate_all_data_to_tutorauthenticated

wp_ajax

wp_ajax_ld_reset_migrated_items_countauthenticated

wp_ajax

wp_ajax_lif_migrate_all_data_to_tutorauthenticated

wp_ajax

wp_ajax_lp_migrate_all_data_to_tutorauthenticated

wp_ajax

wp_ajax_tlmt_delete_sales_data_historyauthenticated

wp_ajax

wp_ajax_tlmt_migrate_sales_dataauthenticated

wp_ajax

4 more hidden

Score History

First score snapshot

v2.4.1

27

Latest

Findings
480
Errors
139
Warnings
341
Check
2.0.0

Relationship Map

Author, categories, issues, domains, and nearby plugins.

32 nodes

Related Plugins

FluentCommunity – Ultra-Fast High-Performance Social Network, Community, LMS & Online Courses

8k+ active installs

98
Widget Areas for LearnDash

700 active installs

98
Design Upgrade for LearnDash

7k+ active installs

97
PowerPack for LearnDash

1k+ active installs

97
Tutor LMS BunnyNet Integration

1k+ active installs

97
Cool Integration for LearnPress & WooCommerce

1k+ active installs

96