Import CSV, XML and Excel files into WordPress. Bulk import posts, pages, WooCommerce products, users, ACF fields, images, custom post types and more.
24
Score
1,196
Errors
3,898
Warnings
+1
Change
Category Scores
Security0
Repo94
Performance98
Maintainability0
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Maintainability
2,555
14 issue groups
Security
2,304
10 issue groups
I18n
58
1 issue group
WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.1,056
- Category
- Maintainability
- Occurrences
- 1,056
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGSecurityInterpolated SQL is not preparedUse placeholders and $wpdb->prepare(); found interpolated variable $ID at "SELECT post_status FROM {$wpdb->prefix}posts WHERE id = $ID"950
- Category
- Security
- Occurrences
- 950
- Severity
- warning
Sample message
Use placeholders and $wpdb->prepare(); found interpolated variable $ID at "SELECT post_status FROM {$wpdb->prefix}posts WHERE id = $ID"
WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().934
- Category
- Maintainability
- Occurrences
- 934
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
ERRORSecurityDatabase parameter is not escapedUnescaped parameter $ID used in $wpdb->get_var()\n$ID assigned unsafely at line 98.327
- Category
- Security
- Occurrences
- 327
- Severity
- error
Sample message
Unescaped parameter $ID used in $wpdb->get_var()\n$ID assigned unsafely at line 98.
WARNINGSecurityDatabase parameter is not escapedUnescaped parameter $acf_fields_table used in $wpdb->query()\n$acf_fields_table assigned unsafely at line 170.277
- Category
- Security
- Occurrences
- 277
- Severity
- warning
Sample message
Unescaped parameter $acf_fields_table used in $wpdb->query()\n$acf_fields_table assigned unsafely at line 170.
WARNINGSecurityMissing nonce verificationProcessing form data without nonce verification.255
- Category
- Security
- Occurrences
- 255
- Severity
- warning
Sample message
Processing form data without nonce verification.
ERRORMaintainabilitydate datedate() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.221
- Category
- Maintainability
- Occurrences
- 221
- Severity
- error
Sample message
date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.
ERRORSecuritySQL query is not preparedUse placeholders and $wpdb->prepare(); found $bundle_meta202
- Category
- Security
- Occurrences
- 202
- Severity
- error
Sample message
Use placeholders and $wpdb->prepare(); found $bundle_meta
WARNINGSecurityRequest data is not unslashed$_GET['page'] not unslashed before sanitization. Use wp_unslash() or similar85
- Category
- Security
- Occurrences
- 85
- Severity
- warning
Sample message
$_GET['page'] not unslashed before sanitization. Use wp_unslash() or similar
WARNINGSecurityInput is not validatedDetected usage of a possibly undefined superglobal array index: $_FILES['csvFile']['error']. Check that the array index exists before using it.68
- Category
- Security
- Occurrences
- 68
- Severity
- warning
Sample message
Detected usage of a possibly undefined superglobal array index: $_FILES['csvFile']['error']. Check that the array index exists before using it.
Show 15 moreShow less
ERRORSecurityOutput is not escaped62
- Category
- Security
- Occurrences
- 62
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$current_file'.
ERRORI18nMissing Arg Domain58
- Category
- I18n
- Occurrences
- 58
- Severity
- error
Sample message
Missing $domain parameter in function call to __().
ERRORMaintainabilityfile system operations fopen56
- Category
- Maintainability
- Occurrences
- 56
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fopen().
ERRORSecurityException output is not escaped50
- Category
- Security
- Occurrences
- 50
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"Expression of type {$expr->getType()} cannot be evaluated"'.
ERRORMaintainabilityfile system operations fclose49
- Category
- Maintainability
- Occurrences
- 49
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fclose().
ERRORMaintainabilityfile system operations chmod45
- Category
- Maintainability
- Occurrences
- 45
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: chmod().
WARNINGMaintainabilitySchema Change36
- Category
- Maintainability
- Occurrences
- 36
- Severity
- warning
Sample message
Attempting a database schema change is discouraged.
WARNINGMaintainabilityNon-prefixed global variable31
- Category
- Maintainability
- Occurrences
- 31
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$activate_plugin".
WARNINGSecurityNonce verification recommended28
- Category
- Security
- Occurrences
- 28
- Severity
- warning
Sample message
Processing form data without nonce verification.
ERRORMaintainabilityMissing direct file access protection24
- Category
- Maintainability
- Occurrences
- 24
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
WARNINGMaintainabilityslow db query meta key23
- Category
- Maintainability
- Occurrences
- 23
- Severity
- warning
Sample message
Detected usage of meta_key, possible slow query.
WARNINGMaintainabilityslow db query meta value23
- Category
- Maintainability
- Occurrences
- 23
- Severity
- warning
Sample message
Detected usage of meta_value, possible slow query.
WARNINGMaintainabilityNon-prefixed hook name22
- Category
- Maintainability
- Occurrences
- 22
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "debug_bar_title".
WARNINGMaintainabilityMissing Version18
- Category
- Maintainability
- Occurrences
- 18
- Severity
- warning
Sample message
Resource version not set in call to wp_enqueue_style(). This means new versions of the style may not always be loaded due to browser caching.
WARNINGMaintainabilityDiscouraged PHP function17
- Category
- Maintainability
- Occurrences
- 17
- Severity
- warning
Sample message
The use of function ini_set() is discouraged
External Connections
Potential connections found in static code analysis.
Outbound calls
129
External assets
105
Incoming endpoints
66
Notable Domains
smackcoders.com27 · outbound
drive.google.com10 · outbound
php.net4 · outbound
dropbox.com3 · outbound
fontawesome.com2 · outbound
getbootstrap.com2 · outbound
Platform / Reference Domains
github.com21 · platform/reference
w3.org19 · platform/reference
downloads.wordpress.org6 · platform/reference
opensource.org2 · platform/reference
wordpress.org1 · platform/reference
External Asset Domains
Incoming Endpoints
No public endpoints detected.
Admin AJAX endpoints66
wp_ajax_active_addonsauthenticated
wp_ajax
wp_ajax_BarChartauthenticated
wp_ajax
wp_ajax_bulk_file_importauthenticated
wp_ajax
wp_ajax_bulk_importauthenticated
wp_ajax
wp_ajax_check_exportauthenticated
wp_ajax
wp_ajax_check_importauthenticated
wp_ajax
wp_ajax_checkmain_modeauthenticated
wp_ajax
wp_ajax_close_notification_actionauthenticated
wp_ajax
wp_ajax_dashboard_content_distributionauthenticated
wp_ajax
wp_ajax_dashboard_import_volumeauthenticated
wp_ajax
wp_ajax_dashboard_kpi_statsauthenticated
wp_ajax
wp_ajax_dashboard_quick_statsauthenticated
wp_ajax
54 more hidden
Score History
4 score snapshots
v9.1
24
Latest
- Findings
- 5,094
- Errors
- 1,196
- Warnings
- 3,898
- Check
- 2.0.0
v9.0
23
Score
- Findings
- 5,158
- Errors
- 1,220
- Warnings
- 3,938
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 24 | 5,094 | 1,196 | 3,898 | v9.1 | 2.0.0 |
| 23 | 5,158 | 1,220 | 3,938 | v9.0 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Author
Category
Issue
Domain
Related
Import WooCommerce Suite for Products, Orders, Coupons, Reviews, and Customers | WP Ultimate CSV Importer30 scoreProduct Import Export for WooCommerce – Import Export Product CSV Suite64 scoreWP All Import – Import Add-On for ACF85 scoreWP All Import – Product Import for WooCommerce23 scoreWP Smart Import : Import any XML File to WordPress49 scoreProduct Sync for WooCommerce – Supplier API Import, Dropshipping & Inventory Sync26 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce22 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder39 scoreAkismet Anti-spam: Spam Protection35 scoreAll-in-One WP Migration and Backup34 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreRank Math SEO – AI SEO Tools to Dominate SEO Rankings29 score
Author
Category
Issue
Domain
Related
Import WooCommerce Suite for Products, Orders, Coupons, Reviews, and Customers | WP Ultimate CSV Importer30 scoreProduct Import Export for WooCommerce – Import Export Product CSV Suite64 scoreWP All Import – Import Add-On for ACF85 scoreWP All Import – Product Import for WooCommerce23 scoreWP Smart Import : Import any XML File to WordPress49 scoreProduct Sync for WooCommerce – Supplier API Import, Dropshipping & Inventory Sync26 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce22 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder39 scoreAkismet Anti-spam: Spam Protection35 scoreAll-in-One WP Migration and Backup34 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreRank Math SEO – AI SEO Tools to Dominate SEO Rankings29 score
Related Plugins
WP All Import – Import Add-On for ACF
50k+ active installs
85
Product Import Export for WooCommerce – Import Export Product CSV Suite
80k+ active installs
64
WP Smart Import : Import any XML File to WordPress
900 active installs
49
30
26
WP All Import – Product Import for WooCommerce
20k+ active installs
23