WP Smart Import : Import any XML File to WordPress

The most powerful solution for importing any XML file to WordPress. Create Posts, Pages, and Custom Post Types with content from any XML file using an …

v2.0.0Xylus ThemesUpdated Added 1k+ installs78% rating
49
Score
28
Errors
302
Warnings
-35
Change

Category Scores

Security26
Repo94
Performance100
Maintainability51

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

330 findings

Maintainability

286

11 issue groups

Security

38

5 issue groups

I18n

4

2 issue groups

Repo Compliance

2

2 issue groups

WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$__CLASS__".233
Category
Maintainability
Occurrences
233
Severity
warning

Sample message

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$__CLASS__".

ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;20
Category
Maintainability
Occurrences
20
Severity
error

Sample message

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

WARNINGSecurityDatabase parameter is not escapedUnescaped parameter $querystr used in $wpdb->get_results()\n$querystr assigned unsafely at line 117.13
Category
Security
Occurrences
13
Severity
warning

Sample message

Unescaped parameter $querystr used in $wpdb->get_results()\n$querystr assigned unsafely at line 117.

WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.13
Category
Security
Occurrences
13
Severity
warning

Sample message

Processing form data without nonce verification.

WARNINGSecurityInterpolated SQL is not preparedUse placeholders and $wpdb->prepare(); found interpolated variable $table at "SELECT * FROM $table WHERE file_path = %s"10
Category
Security
Occurrences
10
Severity
warning

Sample message

Use placeholders and $wpdb->prepare(); found interpolated variable $table at "SELECT * FROM $table WHERE file_path = %s"

WARNINGMaintainabilityNon-prefixed classClasses declared by a theme/plugin should start with the theme/plugin prefix. Found: "wpSmartImport".8
Category
Maintainability
Occurrences
8
Severity
warning

Sample message

Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "wpSmartImport".

WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.7
Category
Maintainability
Occurrences
7
Severity
warning

Sample message

Use of a direct database call is discouraged.

WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().7
Category
Maintainability
Occurrences
7
Severity
warning

Sample message

Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().

ERRORMaintainabilityunlink unlinkunlink() is discouraged. Use wp_delete_file() to delete a file.3
Category
Maintainability
Occurrences
3
Severity
error

Sample message

unlink() is discouraged. Use wp_delete_file() to delete a file.

ERRORI18nMissing Translators CommentA function call to esc_html__() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.3
Category
I18n
Occurrences
3
Severity
error

Sample message

A function call to esc_html__() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.

Show 10 more
WARNINGMaintainabilitytrademarked term3
Category
Maintainability
Occurrences
3
Severity
warning

Sample message

The plugin name includes a restricted term. Your chosen plugin name - "WP Smart Import : Import any XML File to WordPress" - contains the restricted term "wordpress" which cannot be used at all in your plugin name.

WARNINGMaintainabilityNon-prefixed hook name2
Category
Maintainability
Occurrences
2
Severity
warning

Sample message

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "active_plugins".

WARNINGI18nDiscouraged text-domain loading1
Category
I18n
Occurrences
1
Severity
warning

Sample message

load_plugin_textdomain() has been discouraged since WordPress version 4.6. When your plugin is hosted on WordPress.org, you no longer need to manually include this function call for translations under your plugin slug. WordPress will automatically load the translations for you as needed.

WARNINGSecurityInput is not sanitized1
Category
Security
Occurrences
1
Severity
warning

Sample message

Detected usage of a non-sanitized input variable: $_GET['settings-updated']

WARNINGSecurityRequest data is not unslashed1
Category
Security
Occurrences
1
Severity
warning

Sample message

$_GET['settings-updated'] not unslashed before sanitization. Use wp_unslash() or similar

ERRORMaintainabilityfile system operations rmdir1
Category
Maintainability
Occurrences
1
Severity
error

Sample message

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: rmdir().

ERRORMaintainabilityNo Explicit Version1
Category
Maintainability
Occurrences
1
Severity
error

Sample message

Version parameter is not explicitly set or has been set to an equivalent of "false" for wp_enqueue_script; This means that the WordPress core version will be used which is not recommended for plugin or theme development.

WARNINGMaintainabilitymismatched plugin name1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

Plugin name "WP Smart Import : Import any XML File to WordPress" is different from the name declared in plugin header "WP Smart Import".

WARNINGRepo Compliancereadme parser warnings too many tags1
Category
Repo Compliance
Occurrences
1
Severity
warning

Sample message

One or more tags were ignored. Please limit your plugin to 5 tags.

WARNINGRepo Compliancereadme parser warnings trimmed short description1
Category
Repo Compliance
Occurrences
1
Severity
warning

Sample message

The "Short Description" section is too long and was truncated. A maximum of 150 characters is supported.

External Connections

Potential connections found in static code analysis.

8 domains

Outbound calls

16

External assets

1

Incoming endpoints

11

Notable Domains

xylusthemes.com3 · outbound
cdnjs.com2 · outbound
jqueryui.com2 · outbound

Platform / Reference Domains

w3.org6 · platform/reference
codex.wordpress.org1 · platform/reference
gnu.org1 · platform/reference
wordpress.org1 · platform/reference

External Asset Domains

Incoming Endpoints

wp_ajax_nopriv_wpsi_file_name_checkpublic

wp_ajax

Admin AJAX endpoints10
wp_ajax_get_total_batch_for_fileauthenticated

wp_ajax

wp_ajax_get_total_batch_for_importauthenticated

wp_ajax

wp_ajax_insert_termauthenticated

wp_ajax

wp_ajax_manage_import_filesauthenticated

wp_ajax

wp_ajax_manage_importsauthenticated

wp_ajax

wp_ajax_wpsi_file_name_checkauthenticated

wp_ajax

wp_ajax_wpsi_file_uploadauthenticated

wp_ajax

wp_ajax_wpsi_images_previewauthenticated

wp_ajax

wp_ajax_wpsi_runImportauthenticated

wp_ajax

wp_ajax_wpsi_xml_previewauthenticated

wp_ajax

Score History

2 score snapshots

-35
1007550250Jun 25, 2026, 11:13 AM UTC Score 84/100 Plugin v1.1.6 Plugin Check 2.0.0 25 errors, 207 warningsJun 25, 2026, 11:58 AM UTC Score 49/100 Plugin v2.0.0 Plugin Check 2.0.0 28 errors, 302 warningsJun 25, 2026Jun 25, 2026

v2.0.0

49

Latest

Findings
330
Errors
28
Warnings
302
Check
2.0.0

v1.1.6

84

Score

Findings
232
Errors
25
Warnings
207
Check
2.0.0

Relationship Map

Author, categories, issues, domains, and nearby plugins.

32 nodes

Related Plugins

Export Media URLs

7k+ active installs

100
Export All URLs

50k+ active installs

99
Export Users Data CSV

1k+ active installs

99
Widget Importer & Exporter

200k+ active installs

98