ZIP Archive Scanner – Free Up Disk Space and Reduce Security Risks

Find every forgotten ZIP archive on your WordPress site – old backups, migration exports, duplicate plugin bundles – before they eat your disk space or leak your data.

Why ZIP Archive Scanner?

Old backups, migration exports, and duplicate plugin bundles pile up on every WordPress site – and a full-site archive sitting in a public folder can expose your database credentials to anyone who guesses its URL.

ZIP Archive Scanner walks your entire WordPress file system (not just uploads) and gives you a clean report of every ZIP archive it finds, so you can review each one and remove what you no longer need. The scan runs in small, timeout-safe batches, so it works even on huge sites and slow shared hosting.

Free Features

• Full file system scan: Batched and timeout-safe – works on huge sites and slow shared hosting.
• Risk assessment: Archives in the web root or with backup-like names (backup.zip, wp.zip, db.zip…) are flagged high risk.
• Review everything: File name, location, size, and last-modified date in a sortable, searchable table.
• One-click cleanup: Delete an archive right from the dashboard, or copy its public URL to verify exposure.
• Export & bulk actions: Export the report as CSV or Markdown and bulk delete unwanted archives.

Pro Version

The Pro version adds Save Result – save scan reports as named snapshots and review them anytime (up to 20 snapshots).

How to Use – Quick Start

1. Install and activate ZIP Archive Scanner.
2. Open the plugin’s dashboard in wp-admin.
3. Click to start a full, timeout-safe scan of your file system.
4. Review the report – every archive with its location, size, and risk badge.
5. Delete unwanted archives with one click, or export the report as CSV/Markdown.

Use Cases

• Post-migration cleanup: Remove leftover migration exports and duplicate plugin bundles.
• Security review: Spot full-site backups sitting in publicly accessible folders.
• Disk space recovery: Find and delete large forgotten archives on crowded hosting plans.

Development & Source Code

The plugin’s admin dashboard is a React app compiled with @wordpress/scripts. The complete, uncompiled source is included in this plugin under the src/ directory, together with webpack.config.js and package.json.

To build from source:

1. The dashboard uses the shared open-source component library bpl-tools (GPL): https://github.com/bPlugins/bpl-tools — clone it as a sibling directory of this plugin (i.e. wp-content/plugins/bpl-tools).
2. Inside the plugin directory run npm install.
3. Run npm run build — the compiled files are written to build/.