Database for Contact Form 7

Automatically save all data submitted via Contact Form 7 to your database

v3.0.9Ninja TeamUpdated Added 7k+ installs84% rating
38
Score
34
Errors
128
Warnings
+0
Change

Category Scores

Security0
Repo91
Performance100
Maintainability73

Top Issues by Category

security99
maintainability61
repo_compliance2

Issues Details

162 issues found in latest scan

WARNING45
WordPress.Security.NonceVerification.Missing

Processing form data without nonce verification.

WARNING20
WordPress.DB.DirectDatabaseQuery.DirectQuery

Use of a direct database call is discouraged.

WARNING20
WordPress.DB.DirectDatabaseQuery.NoCaching

Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().

ERROR16
WordPress.DB.PreparedSQL.NotPrepared

Use placeholders and $wpdb->prepare(); found !

ERROR11
PluginCheck.Security.DirectDB.UnescapedDBParameter

Unescaped parameter $del_id used in $wpdb->query()\n$del_id assigned unsafely at line 271.

WARNING9
WordPress.Security.ValidatedSanitizedInput.MissingUnslash

$_GET['fid'] not unslashed before sanitization. Use wp_unslash() or similar

WARNING8
WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedFunctionFound

Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "filter_cf7d_ad_before_printing_data".

WARNING5
WordPress.DB.PreparedSQL.InterpolatedNotPrepared

Use placeholders and $wpdb->prepare(); found interpolated variable $cf7d_table at "show tables like '$cf7d_table'"

WARNING5
WordPress.Security.ValidatedSanitizedInput.InputNotSanitized

Detected usage of a non-sanitized input variable: $_POST['del_id']

ERROR5
wp_function_not_compatible_with_requires_wp

Function "determine_locale()" requires WordPress 5.0.0, but your plugin minimum supported version is WordPress 3.5.0.

WARNING4
WordPress.Security.NonceVerification.Recommended

Processing form data without nonce verification.

WARNING3
PluginCheck.Security.DirectDB.UnescapedDBParameter

Unescaped parameter $cf7d_table used in $wpdb->get_var()\n$cf7d_table assigned unsafely at line 92.

WARNING2
WordPress.DB.DirectDatabaseQuery.SchemaChange

Attempting a database schema change is discouraged.

WARNING2
WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedHooknameFound

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "cf7-db-forms-order".

ERROR1
WordPress.DateTime.RestrictedFunctions.date_date

date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.

WARNING1
WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedVariableFound

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$njt_cf7d_hook_suffix".

WARNING1
WordPress.Security.ValidatedSanitizedInput.InputNotValidated

Detected usage of a possibly undefined superglobal array index: $_POST['nonce']. Check that the array index exists before using it.

WARNING1
mismatched_plugin_name

Plugin name "Database for Contact Form 7" is different from the name declared in plugin header "Contact Form 7 Database Lite".

ERROR1
plugin_header_no_license

Missing "License" in Plugin Header. Please update your Plugin Header with a valid GPLv2 (or later) compatible license.

WARNING1
readme_parser_warnings_too_many_tags

One or more tags were ignored. Please limit your plugin to 5 tags.

WARNING1
trademarked_term

The plugin name includes a restricted term. Your chosen plugin name - "Contact Form 7 Database Lite" - contains the restricted term "contact-form-7" and cannot be used to begin your plugin name. We disallow the use of certain terms in ways that are abused, or potentially infringe on and/or are misleading with regards to trademarks. You may use the term "contact-form-7" elsewhere in your plugin name, such as "... for contact-form-7".

Latest Snapshot

Findings

162

Errors

34

Warnings

128

Score History

First score snapshot

First scan completed

v3.0.9 · Plugin Check 2.0.0 · Model 2026.06-mvp-static-v2

v3.0.9

38

Latest

Findings
162
Errors
34
Warnings
128
Plugin Check
2.0.0
Model
2026.06-mvp-static-v2

Related Plugins