ZIP Archive Scanner

Old backups, migration exports, and duplicate plugin bundles pile up on every WordPress site — and a full-site archive sitting in a public folder can expose your database credentials to anyone who guesses its URL.

ZIP Archive Scanner walks your entire WordPress file system (not just uploads) and gives you a clean report of every ZIP archive it finds:

• Full file system scan — batched and timeout-safe, works on huge sites and slow shared hosting.
• Risk assessment — archives in the web root or with backup-like names (backup.zip, wp.zip, db.zip…) are flagged high risk.
• Review everything — file name, location, size, and last-modified date in a sortable, searchable table.
• One-click cleanup — delete an archive right from the dashboard, or copy its public URL to verify exposure.

Plugin Overview

How to Use – Step-by-Step Guide

Development & Source Code

The plugin’s admin dashboard is a React app compiled with @wordpress/scripts. The complete, uncompiled source is included in this plugin under the src/ directory, together with webpack.config.js and package.json.

To build from source:

1. The dashboard uses the shared open-source component library bpl-tools (GPL): https://github.com/bPlugins/bpl-tools — clone it as a sibling directory of this plugin (i.e. wp-content/plugins/bpl-tools).
2. Inside the plugin directory run npm install.
3. Run npm run build — the compiled files are written to build/.