Everything you need to sell WordPress maintenance and manage multiple sites effortlessly: backup, update, uptime monitoring, and security.
22
Score
974
Errors
999
Warnings
+0
Change
Category Scores
Security0
Repo83
Performance100
Maintainability0
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Maintainability
842
14 issue groups
Security
644
10 issue groups
I18n
223
1 issue group
ERRORSecurityException output is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"The \"ignoreVCSIgnored\" option cannot be used by the Finder as the \"{$path}\" file is not readable."'.313
- Category
- Security
- Occurrences
- 313
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"The \"ignoreVCSIgnored\" option cannot be used by the Finder as the \"{$path}\" file is not readable."'.
ERRORI18nText Domain MismatchMismatched text domain. Expected 'wp-health' but got 'action-scheduler'.223
- Category
- I18n
- Occurrences
- 223
- Severity
- error
Sample message
Mismatched text domain. Expected 'wp-health' but got 'action-scheduler'.
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$$name".156
- Category
- Maintainability
- Occurrences
- 156
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$$name".
WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.130
- Category
- Maintainability
- Occurrences
- 130
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().122
- Category
- Maintainability
- Occurrences
- 122
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;72
- Category
- Maintainability
- Occurrences
- 72
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
WARNINGSecurityRequest data is not unslashed$_GET['action'] not unslashed before sanitization. Use wp_unslash() or similar70
- Category
- Security
- Occurrences
- 70
- Severity
- warning
Sample message
$_GET['action'] not unslashed before sanitization. Use wp_unslash() or similar
WARNINGMaintainabilityNon-prefixed hook nameHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "admin_memory_limit".63
- Category
- Maintainability
- Occurrences
- 63
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "admin_memory_limit".
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_FILES['file']['name']59
- Category
- Security
- Occurrences
- 59
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_FILES['file']['name']
WARNINGMaintainabilityNon-prefixed constantGlobal constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "DISALLOW_FILE_EDIT".58
- Category
- Maintainability
- Occurrences
- 58
- Severity
- warning
Sample message
Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "DISALLOW_FILE_EDIT".
Show 15 moreShow less
WARNINGMaintainabilityNon-prefixed function58
- Category
- Maintainability
- Occurrences
- 58
- Severity
- warning
Sample message
Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "as_enqueue_async_action".
WARNINGMaintainabilityNon-prefixed class52
- Category
- Maintainability
- Occurrences
- 52
- Severity
- warning
Sample message
Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "CronExpression".
ERRORSecurityOutput is not escaped45
- Category
- Security
- Occurrences
- 45
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$dump'.
WARNINGSecurityDatabase parameter is not escaped34
- Category
- Security
- Occurrences
- 34
- Severity
- warning
Sample message
Unescaped parameter $activityLogBufferTableName used in $wpdb->get_var()
WARNINGSecurityNonce verification recommended33
- Category
- Security
- Occurrences
- 33
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGSecurityInterpolated SQL is not prepared32
- Category
- Security
- Occurrences
- 32
- Severity
- warning
Sample message
Use placeholders and $wpdb->prepare(); found interpolated variable $placeholders at WHERE meta_key = %s AND user_id IN ($placeholders)"
ERRORMaintainabilityfile system operations fclose31
- Category
- Maintainability
- Occurrences
- 31
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fclose().
WARNINGSecuritywp redirect wp redirect30
- Category
- Security
- Occurrences
- 30
- Severity
- warning
Sample message
wp_redirect() found. Using wp_safe_redirect(), along with the "allowed_redirect_hosts" filter if needed, can help avoid any chances of malicious redirects within code. It is also important to remember to call exit() after a redirect so that no other unwanted code is executed.
ERRORMaintainabilityunlink unlink25
- Category
- Maintainability
- Occurrences
- 25
- Severity
- error
Sample message
unlink() is discouraged. Use wp_delete_file() to delete a file.
ERRORMaintainabilityfile system operations fopen23
- Category
- Maintainability
- Occurrences
- 23
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fopen().
ERRORMaintainabilityfile system operations fwrite18
- Category
- Maintainability
- Occurrences
- 18
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fwrite().
ERRORMaintainabilityfile system operations is writable17
- Category
- Maintainability
- Occurrences
- 17
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: is_writable().
ERRORMaintainabilitywp function not compatible with requires wp17
- Category
- Maintainability
- Occurrences
- 17
- Severity
- error
Sample message
Function "move_dir()" requires WordPress 6.2.0, but your plugin minimum supported version is WordPress 5.8.0.
ERRORSecuritySQL query is not prepared14
- Category
- Security
- Occurrences
- 14
- Severity
- error
Sample message
Use placeholders and $wpdb->prepare(); found $postTypes
WARNINGSecurityMissing nonce verification14
- Category
- Security
- Occurrences
- 14
- Severity
- warning
Sample message
Processing form data without nonce verification.
External Connections
Potential connections found in static code analysis.
Outbound calls
119
External assets
0
Incoming endpoints
22
Notable Domains
php.net24 · outbound
bugs.php.net11 · outbound
wp-umbrella.com7 · outbound
en.wikipedia.org5 · outbound
actionscheduler.org4 · outbound
support.wp-umbrella.com4 · outbound
Platform / Reference Domains
w3.org13 · platform/reference
github.com9 · platform/reference
api.wordpress.org4 · platform/reference
opensource.org3 · platform/reference
profiles.wordpress.org3 · platform/reference
core.trac.wordpress.org2 · platform/reference
wordpress.org2 · platform/reference
codex.wordpress.org1 · platform/reference
downloads.wordpress.org1 · platform/reference
gnu.org1 · platform/reference
External Asset Domains
No external asset domains detected.
Incoming Endpoints
wp_ajax_nopriv_public
wp_ajax
wp_ajax_nopriv_umbrella_scantestpublic
wp_ajax
wp_ajax_nopriv_wp_umbrella_snapshot_datapublic
wp_ajax
wp_ajax_nopriv_wp_umbrella_update_admin_requestpublic
wp_ajax
Admin AJAX endpoints17
admin_post_wp_umbrella_clean_activity_log_bufferauthenticated
admin_post
admin_post_wp_umbrella_clean_redirect_tableauthenticated
admin_post
admin_post_wp_umbrella_clean_transientsauthenticated
admin_post
admin_post_wp_umbrella_regenerate_secret_tokenauthenticated
admin_post
admin_post_wp_umbrella_support_optionauthenticated
admin_post
wp_ajax_wp_health_allow_trackingauthenticated
wp_ajax
wp_ajax_wp_health_disallow_trackingauthenticated
wp_ajax
wp_ajax_wp_health_loginauthenticated
wp_ajax
wp_ajax_wp_health_proxyauthenticated
wp_ajax
wp_ajax_wp_umbrella_allow_one_click_accessauthenticated
wp_ajax
wp_ajax_wp_umbrella_check_api_keyauthenticated
wp_ajax
wp_ajax_wp_umbrella_disallow_one_click_accessauthenticated
wp_ajax
5 more hidden
Score History
7 score snapshots
v2.26.2
22
Latest
- Findings
- 1,973
- Errors
- 974
- Warnings
- 999
- Check
- 2.0.0
v2.26.1
22
Score
- Findings
- 1,969
- Errors
- 970
- Warnings
- 999
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 22 | 1,973 | 974 | 999 | v2.26.2 | 2.0.0 |
| 22 | 1,969 | 970 | 999 | v2.26.1 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Issue
Domain
Related
Jetpack – WP Security, Backup, Speed, & Growth22 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreWooCommerce21 scoreWP Mail SMTP by WPForms – The Most Popular SMTP and Email Log Plugin30 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreAdvanced Custom Fields (ACF®)23 scoreAll-in-One WP Migration and Backup34 scoreUpdraftPlus: WP Backup & Migration Plugin59 scoreDuplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More21 scoreManageWP Worker23 scoreWPvivid — Backup, Migration & Staging25 scoreExclude Image Thumbnails From UpdraftPlus Backups98 score
Issue
Domain
Related
Jetpack – WP Security, Backup, Speed, & Growth22 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreWooCommerce21 scoreWP Mail SMTP by WPForms – The Most Popular SMTP and Email Log Plugin30 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreAdvanced Custom Fields (ACF®)23 scoreAll-in-One WP Migration and Backup34 scoreUpdraftPlus: WP Backup & Migration Plugin59 scoreDuplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More21 scoreManageWP Worker23 scoreWPvivid — Backup, Migration & Staging25 scoreExclude Image Thumbnails From UpdraftPlus Backups98 score
Related Plugins
Export Media as ZIP
2k+ active installs
100
Aruba Migration Tool
600 active installs
100
Glow: maintenance & support management for agencies
700 active installs
99
Menu Backup & Restore + Import/Export
400 active installs
99
Exclude Image Thumbnails From UpdraftPlus Backups
4k+ active installs
98
Remote Website Management by Watchful
3k+ active installs
97