The official ActiveTrail email and multichannel marketing automation integration for Contact Form 7.
42
Score
16
Errors
106
Warnings
+0
Change
Category Scores
Security0
Repo100
Performance100
Maintainability83
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Security
79
5 issue groups
Maintainability
39
5 issue groups
I18n
4
3 issue groups
WARNINGSecurityMissing nonce verificationProcessing form data without nonce verification.47
- Category
- Security
- Occurrences
- 47
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$args".26
- Category
- Maintainability
- Occurrences
- 26
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$args".
WARNINGSecurityRequest data is not unslashed$_POST[$db_post_meta[$this->get_metakey($this->at_cf7_metafields['form']['required']['mobile'])][0]] not unslashed before sanitization. Use wp_unslash() or similar16
- Category
- Security
- Occurrences
- 16
- Severity
- warning
Sample message
$_POST[$db_post_meta[$this->get_metakey($this->at_cf7_metafields['form']['required']['mobile'])][0]] not unslashed before sanitization. Use wp_unslash() or similar
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$af_cf7_error'.10
- Category
- Security
- Occurrences
- 10
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$af_cf7_error'.
WARNINGMaintainabilityNon-prefixed constantGlobal constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "AT_ENDPOINT_ACCOUNT_BALANCE".7
- Category
- Maintainability
- Occurrences
- 7
- Severity
- warning
Sample message
Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "AT_ENDPOINT_ACCOUNT_BALANCE".
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_POST[$db_post_meta[$this->get_metakey($this->at_cf7_metafields['form']['required']['mobile'])][0]]4
- Category
- Security
- Occurrences
- 4
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_POST[$db_post_meta[$this->get_metakey($this->at_cf7_metafields['form']['required']['mobile'])][0]]
WARNINGMaintainabilityNon-prefixed functionFunctions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "activate_activetrail_cf7".3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "activate_activetrail_cf7".
WARNINGSecurityInput is not validatedDetected usage of a possibly undefined superglobal array index: $_POST[$db_post_meta[$this->get_metakey($this->at_cf7_metafields['form']['required']['mobile'])][0]]. Check that the array index exists before using it.2
- Category
- Security
- Occurrences
- 2
- Severity
- warning
Sample message
Detected usage of a possibly undefined superglobal array index: $_POST[$db_post_meta[$this->get_metakey($this->at_cf7_metafields['form']['required']['mobile'])][0]]. Check that the array index exists before using it.
ERRORI18nText Domain MismatchMismatched text domain. Expected 'activetrail-contact-form-7' but got 'mce_error'.2
- Category
- I18n
- Occurrences
- 2
- Severity
- error
Sample message
Mismatched text domain. Expected 'activetrail-contact-form-7' but got 'mce_error'.
ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
Show 3 moreShow less
ERRORI18nNon Singular String Literal Text1
- Category
- I18n
- Occurrences
- 1
- Severity
- error
Sample message
The $text parameter must be a single text string literal. Found: 'The Contact Form 7 plugin must be installed for the <b>ActiveTrail Extension</b> to work. <b><a href="' . admin_url('plugin-install.php?tab=plugin-information&plugin=contact-form-7&from=plugins&TB_iframe=true&width=600&height=550') . '" class="thickbox" title="Contact Form 7">Install Contact Form 7 Now.</a></b>'
ERRORMaintainabilityinvalid tested upto minor1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
Tested up to: 7.0.2 The version number should only include major versions 7.0.
WARNINGI18ntextdomain mismatch1
- Category
- I18n
- Occurrences
- 1
- Severity
- warning
Sample message
The "Text Domain" header in the plugin file does not match the slug. Found "activetrail-cf7", expected "activetrail-contact-form-7".
External Connections
Potential connections found in static code analysis.
Outbound calls
14
External assets
0
Incoming endpoints
3
Notable Domains
activetrail.com10 · outbound
webapi.mymarketing.co.il1 · outbound
Platform / Reference Domains
gnu.org2 · platform/reference
github.com1 · platform/reference
External Asset Domains
No external asset domains detected.
Incoming Endpoints
No public endpoints detected.
Admin AJAX endpoints3
wp_ajax_at_cf7_get_groupsauthenticated
wp_ajax
wp_ajax_at_cf7_get_mailing_listsauthenticated
wp_ajax
wp_ajax_at_cf7_test_tokenauthenticated
wp_ajax
Score History
3 score snapshots
v1.5
42
Latest
- Findings
- 122
- Errors
- 16
- Warnings
- 106
- Check
- 2.0.0
v1.4
42
Score
- Findings
- 126
- Errors
- 16
- Warnings
- 110
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 42 | 122 | 16 | 106 | v1.5 | 2.0.0 |
| 42 | 126 | 16 | 110 | v1.4 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Author
Issue
Related
Contact Form 769 scoreWooCommerce22 scoreAkismet Anti-spam: Spam Protection35 scoreElementor Website Builder – more than just a page builder39 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreLiteSpeed Cache35 scoreAll-in-One WP Migration and Backup34 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreDatabase Addon for Contact Form 7 – CFDB739 scoreReCaptcha v2 for Contact Form 744 scoreRedirection for Contact Form 727 scoreConditional Fields for Contact Form 741 scoreDTX – Dynamic Text Extension for Contact Form 740 score
Author
Issue
Related
Contact Form 769 scoreWooCommerce22 scoreAkismet Anti-spam: Spam Protection35 scoreElementor Website Builder – more than just a page builder39 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreLiteSpeed Cache35 scoreAll-in-One WP Migration and Backup34 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreDatabase Addon for Contact Form 7 – CFDB739 scoreReCaptcha v2 for Contact Form 744 scoreRedirection for Contact Form 727 scoreConditional Fields for Contact Form 741 scoreDTX – Dynamic Text Extension for Contact Form 740 score
Related Plugins
DS CF7 Math Captcha
10k+ active installs
100
Message Bridge for Contact Form 7 and Telegram
10k+ active installs
100
HTML Editor for Contact Form 7
2k+ active installs
100
Style Contact Form 7
1k+ active installs
100
TextMe SMS
600 active installs
100
Webheadcoder Multi-Step Forms for Contact Form 7
50k+ active installs
99