Backup, restore or migrate your WordPress website to another host or domain. Schedule backups or run manually. Migrate in minutes.
24
Score
277
Errors
299
Warnings
+0
Change
Category Scores
Security0
Repo94
Performance98
Maintainability0
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Maintainability
420
18 issue groups
Security
94
6 issue groups
I18n
27
1 issue group
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$accept".146
- Category
- Maintainability
- Occurrences
- 146
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$accept".
ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;91
- Category
- Maintainability
- Occurrences
- 91
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
ERRORMaintainabilitywp function not compatible with requires wpFunction "_load_image_to_edit_path()" requires WordPress 3.4.0, but your plugin minimum supported version is WordPress 3.2.0.72
- Category
- Maintainability
- Occurrences
- 72
- Severity
- error
Sample message
Function "_load_image_to_edit_path()" requires WordPress 3.4.0, but your plugin minimum supported version is WordPress 3.2.0.
WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.44
- Category
- Security
- Occurrences
- 44
- Severity
- warning
Sample message
Processing form data without nonce verification.
ERRORI18nMissing Translators CommentA function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.27
- Category
- I18n
- Occurrences
- 27
- Severity
- error
Sample message
A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.
ERRORSecuritySQL query is not preparedUse placeholders and $wpdb->prepare(); found $query26
- Category
- Security
- Occurrences
- 26
- Severity
- error
Sample message
Use placeholders and $wpdb->prepare(); found $query
WARNINGMaintainabilityerror log error logerror_log() found. Debug code should not normally be used in production.24
- Category
- Maintainability
- Occurrences
- 24
- Severity
- warning
Sample message
error_log() found. Debug code should not normally be used in production.
WARNINGMaintainabilityNon-prefixed hook nameHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "admin_comment_types_dropdown".21
- Category
- Maintainability
- Occurrences
- 21
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "admin_comment_types_dropdown".
WARNINGSecurityDatabase parameter is not escapedUnescaped parameter $escaped_table_name used in $wpdb->query()\n$escaped_table_name assigned unsafely at line 6403.12
- Category
- Security
- Occurrences
- 12
- Severity
- warning
Sample message
Unescaped parameter $escaped_table_name used in $wpdb->query()\n$escaped_table_name assigned unsafely at line 6403.
WARNINGMaintainabilityNot In FooterIn footer ($in_footer) is not set explicitly wp_enqueue_script; It is recommended to load scripts in the footer. Please set this value to `true` to load it in the footer, or explicitly `false` if it should be loaded in the header.12
- Category
- Maintainability
- Occurrences
- 12
- Severity
- warning
Sample message
In footer ($in_footer) is not set explicitly wp_enqueue_script; It is recommended to load scripts in the footer. Please set this value to `true` to load it in the footer, or explicitly `false` if it should be loaded in the header.
Show 15 moreShow less
WARNINGMaintainabilityDynamic hook name7
- Category
- Maintainability
- Occurrences
- 7
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "$action".
WARNINGSecurityInterpolated SQL is not prepared6
- Category
- Security
- Occurrences
- 6
- Severity
- warning
Sample message
Use placeholders and $wpdb->prepare(); found interpolated variable $random_table_name at "CREATE TABLE $random_table_name (test INT)"
ERRORMaintainabilitymysql mysql unbuffered query6
- Category
- Maintainability
- Occurrences
- 6
- Severity
- error
Sample message
Accessing the database directly should be avoided. Please use the $wpdb object and associated functions instead. Found: mysql_unbuffered_query.
ERRORMaintainabilitydate date6
- Category
- Maintainability
- Occurrences
- 6
- Severity
- error
Sample message
date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.
WARNINGMaintainabilityDeprecated function: current_user_can_for_blog6
- Category
- Maintainability
- Occurrences
- 6
- Severity
- warning
Sample message
current_user_can_for_blog() has been deprecated since WordPress version 6.7.0. Use current_user_can_for_site() instead.
ERRORMaintainabilityfile system operations is writable5
- Category
- Maintainability
- Occurrences
- 5
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: is_writable().
ERRORMaintainabilityrand rand5
- Category
- Maintainability
- Occurrences
- 5
- Severity
- error
Sample message
rand() is discouraged. Use the far less predictable wp_rand() instead.
ERRORMaintainabilityPlugin Directory Write4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- error
Sample message
Plugin folders are deleted when upgraded. Do not save data to the plugin folder using copy(). Detected usage of constant WP_CONTENT_DIR. Use wp_upload_dir() to get the uploads directory path or save to the database instead.
ERRORMaintainabilitymysql mysql errno3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- error
Sample message
Accessing the database directly should be avoided. Please use the $wpdb object and associated functions instead. Found: mysql_errno.
ERRORMaintainabilitymysql mysql error3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- error
Sample message
Accessing the database directly should be avoided. Please use the $wpdb object and associated functions instead. Found: mysql_error.
ERRORMaintainabilitymysql mysql query3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- error
Sample message
Accessing the database directly should be avoided. Please use the $wpdb object and associated functions instead. Found: mysql_query.
ERRORSecuritymysql mysql real escape string3
- Category
- Security
- Occurrences
- 3
- Severity
- error
Sample message
Accessing the database directly should be avoided. Please use the $wpdb object and associated functions instead. Found: mysql_real_escape_string.
ERRORMaintainabilitymysql mysqli errno3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- error
Sample message
Accessing the database directly should be avoided. Please use the $wpdb object and associated functions instead. Found: mysqli_errno.
ERRORSecuritymysql mysqli real escape string3
- Category
- Security
- Occurrences
- 3
- Severity
- error
Sample message
Accessing the database directly should be avoided. Please use the $wpdb object and associated functions instead. Found: mysqli_real_escape_string.
WARNINGMaintainabilityNon-prefixed constant3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "APP_GCAL_DISABLE".
External Connections
Not analyzed yet.
Score History
First score snapshot
v1.26.5
24
Latest
- Findings
- 576
- Errors
- 277
- Warnings
- 299
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 24 | 576 | 277 | 299 | v1.26.5 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueRelated
Relationship links
Category
Issue
Non-prefixed global variable146 findingsMissing direct file access protection91 findingswp function not compatible with requires wp72 findingsNonce verification recommended44 findingsMissing Translators Comment27 findingsSQL query is not prepared26 findingserror log error log24 findingsNon-prefixed hook name21 findings
Related
Contact Form 769 scoreElementor Website Builder – more than just a page builder35 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreLiteSpeed Cache35 scoreWooCommerce22 scoreAkismet Anti-spam: Spam Protection35 scoreAll-in-One WP Migration and Backup34 scoreJetpack – WP Security, Backup, Speed, & Growth23 scoreDuplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More21 scoreManageWP Worker22 scoreAll-In-One Security (AIOS) – Security and Firewall24 scoreWP-Optimize – Cache, Compress images, Minify & Clean database to boost page speed & performance56 scoreWPvivid — Backup, Migration & Staging25 scoreRedux Framework100 score
Category
Issue
Non-prefixed global variable146 findingsMissing direct file access protection91 findingswp function not compatible with requires wp72 findingsNonce verification recommended44 findingsMissing Translators Comment27 findingsSQL query is not prepared26 findingserror log error log24 findingsNon-prefixed hook name21 findings
Related
Contact Form 769 scoreElementor Website Builder – more than just a page builder35 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreLiteSpeed Cache35 scoreWooCommerce22 scoreAkismet Anti-spam: Spam Protection35 scoreAll-in-One WP Migration and Backup34 scoreJetpack – WP Security, Backup, Speed, & Growth23 scoreDuplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More21 scoreManageWP Worker22 scoreAll-In-One Security (AIOS) – Security and Firewall24 scoreWP-Optimize – Cache, Compress images, Minify & Clean database to boost page speed & performance56 scoreWPvivid — Backup, Migration & Staging25 scoreRedux Framework100 score
Related Plugins
Aruba Migration Tool
600 active installs
100
Export Media as ZIP
1k+ active installs
100
Glow: maintenance & support management for agencies
600 active installs
99
Menu Backup & Restore + Import/Export
400 active installs
99
Exclude Image Thumbnails From UpdraftPlus Backups
4k+ active installs
98
Remote Website Management by Watchful
3k+ active installs
97