Create a complete WordPress backup easily. Schedule automatic backups, store securely, and restore effortlessly with the best WordPress backup plugin!
Category Scores
Top Issues by Category
maintainability842
security7
supply_chain1
Issues Details
851 issues found in latest scan
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$abortUrl".
Function "current_datetime()" requires WordPress 5.3.0, but your plugin minimum supported version is WordPress 5.1.0.
trigger_error() found. Debug code should not normally be used in production.
Unescaped parameter $identifier used in $wpdb->get_row()\n$identifier assigned unsafely at line 567.
The use of function set_time_limit() is discouraged
The plugin name includes a restricted term. Your chosen plugin name - "BackWPup – WordPress Backup & Restore Plugin" - contains the restricted term "plugin" which cannot be used at all in your plugin name.
Processing form data without nonce verification.
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
error_log() found. Debug code should not normally be used in production.
$_GET['backwpup_action_nonce'] not unslashed before sanitization. Use wp_unslash() or similar
Plugin name "BackWPup – WordPress Backup & Restore Plugin" is different from the name declared in plugin header "BackWPup".
The "/vendor" directory using composer exists, but "composer.json" file is missing.
Mismatched Requires at least: 4.9 != 5.1. "Requires at least" needs to be exactly the same with that in your main plugin file's header.
| Code | Type | Message | Count |
|---|---|---|---|
| WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedVariableFound | WARNING | Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$abortUrl". | 739 |
| wp_function_not_compatible_with_requires_wp | ERROR | Function "current_datetime()" requires WordPress 5.3.0, but your plugin minimum supported version is WordPress 5.1.0. | 70 |
| WordPress.PHP.DevelopmentFunctions.error_log_trigger_error | WARNING | trigger_error() found. Debug code should not normally be used in production. | 19 |
| PluginCheck.Security.DirectDB.UnescapedDBParameter | WARNING | Unescaped parameter $identifier used in $wpdb->get_row()\n$identifier assigned unsafely at line 567. | 4 |
| Squiz.PHP.DiscouragedFunctions.Discouraged | WARNING | The use of function set_time_limit() is discouraged | 4 |
| trademarked_term | WARNING | The plugin name includes a restricted term. Your chosen plugin name - "BackWPup – WordPress Backup & Restore Plugin" - contains the restricted term "plugin" which cannot be used at all in your plugin name. | 3 |
| WordPress.Security.NonceVerification.Recommended | WARNING | Processing form data without nonce verification. | 2 |
| missing_direct_file_access_protection | ERROR | PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit; | 2 |
| WordPress.DB.DirectDatabaseQuery.DirectQuery | WARNING | Use of a direct database call is discouraged. | 1 |
| WordPress.DB.DirectDatabaseQuery.NoCaching | WARNING | Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete(). | 1 |
| WordPress.PHP.DevelopmentFunctions.error_log_error_log | WARNING | error_log() found. Debug code should not normally be used in production. | 1 |
| WordPress.Security.ValidatedSanitizedInput.MissingUnslash | WARNING | $_GET['backwpup_action_nonce'] not unslashed before sanitization. Use wp_unslash() or similar | 1 |
| hidden_files | ERROR | Hidden files are not permitted. | 1 |
| mismatched_plugin_name | WARNING | Plugin name "BackWPup – WordPress Backup & Restore Plugin" is different from the name declared in plugin header "BackWPup". | 1 |
| missing_composer_json_file | WARNING | The "/vendor" directory using composer exists, but "composer.json" file is missing. | 1 |
| readme_mismatched_header_requires | ERROR | Mismatched Requires at least: 4.9 != 5.1. "Requires at least" needs to be exactly the same with that in your main plugin file's header. | 1 |
Latest Snapshot
Findings
851
Errors
74
Warnings
777
Score History
First score snapshot
First scan completed Jun 19, 2026
v5.7.2 · Plugin Check 2.0.0 · Model 2026.06-mvp-static-v2
Jun 19, 2026
v5.7.2
35
Latest
- Findings
- 851
- Errors
- 74
- Warnings
- 777
- Plugin Check
- 2.0.0
- Model
- 2026.06-mvp-static-v2
| Scan | Score | Findings | Errors | Warnings | Plugin | Plugin Check | Model |
|---|---|---|---|---|---|---|---|
| Jun 19, 2026Latest | 35 | 851 | 74 | 777 | v5.7.2 | 2.0.0 | 2026.06-mvp-static-v2 |
