Save and manage Contact Form messages. Never lose important data.
24
Score
529
Errors
357
Warnings
+0
Change
Category Scores
Security0
Repo91
Performance100
Maintainability0
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
I18n
486
5 issue groups
Maintainability
269
15 issue groups
Security
108
5 issue groups
ERRORI18nText Domain MismatchMismatched text domain. Expected 'contact-form-to-db' but got 'bestwebsoft'.435
- Category
- I18n
- Occurrences
- 435
- Severity
- error
Sample message
Mismatched text domain. Expected 'contact-form-to-db' but got 'bestwebsoft'.
WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.54
- Category
- Maintainability
- Occurrences
- 54
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$bstwbsftwppdtplgns_active_plugins".54
- Category
- Maintainability
- Occurrences
- 54
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$bstwbsftwppdtplgns_active_plugins".
WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.51
- Category
- Security
- Occurrences
- 51
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGMaintainabilityNon-prefixed functionFunctions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "bws_add_buttons".50
- Category
- Maintainability
- Occurrences
- 50
- Severity
- warning
Sample message
Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "bws_add_buttons".
WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().46
- Category
- Maintainability
- Occurrences
- 46
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
WARNINGSecurityMissing nonce verificationProcessing form data without nonce verification.33
- Category
- Security
- Occurrences
- 33
- Severity
- warning
Sample message
Processing form data without nonce verification.
ERRORI18nMissing Translators CommentA function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.33
- Category
- I18n
- Occurrences
- 33
- Severity
- error
Sample message
A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.
WARNINGMaintainabilityDynamic hook nameHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "__CLASS__ . '_additional_import_export_options'".11
- Category
- Maintainability
- Occurrences
- 11
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "__CLASS__ . '_additional_import_export_options'".
WARNINGMaintainabilityMissing VersionResource version not set in call to wp_enqueue_script(). This means new versions of the script may not always be loaded due to browser caching.10
- Category
- Maintainability
- Occurrences
- 10
- Severity
- warning
Sample message
Resource version not set in call to wp_enqueue_script(). This means new versions of the script may not always be loaded due to browser caching.
Show 15 moreShow less
WARNINGMaintainabilityNot In Footer10
- Category
- Maintainability
- Occurrences
- 10
- Severity
- warning
Sample message
In footer ($in_footer) is not set explicitly wp_enqueue_script; It is recommended to load scripts in the footer. Please set this value to `true` to load it in the footer, or explicitly `false` if it should be loaded in the header.
ERRORSecuritySQL query is not prepared9
- Category
- Security
- Occurrences
- 9
- Severity
- error
Sample message
Use placeholders and $wpdb->prepare(); found $prefix
WARNINGSecurityRequest data is not unslashed8
- Category
- Security
- Occurrences
- 8
- Severity
- warning
Sample message
$_POST['cntctfrm_contact_dropdown'] not unslashed before sanitization. Use wp_unslash() or similar
ERRORI18nMissing Arg Domain8
- Category
- I18n
- Occurrences
- 8
- Severity
- error
Sample message
Missing $domain parameter in function call to __().
WARNINGSecurityInput is not sanitized7
- Category
- Security
- Occurrences
- 7
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_POST['cntctfrm_contact_dropdown']
WARNINGMaintainabilitySchema Change6
- Category
- Maintainability
- Occurrences
- 6
- Severity
- warning
Sample message
Attempting a database schema change is discouraged.
ERRORMaintainabilityfile system operations readfile5
- Category
- Maintainability
- Occurrences
- 5
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: readfile().
ERRORMaintainabilityunlink unlink5
- Category
- Maintainability
- Occurrences
- 5
- Severity
- error
Sample message
unlink() is discouraged. Use wp_delete_file() to delete a file.
ERRORI18nNon Singular String Literal Plural5
- Category
- I18n
- Occurrences
- 5
- Severity
- error
Sample message
The $plural parameter must be a single text string literal. Found: '%s ' . esc_html__( 'messages were marked as Spam.', 'contact-form-to-db' )
ERRORI18nNon Singular String Literal Single5
- Category
- I18n
- Occurrences
- 5
- Severity
- error
Sample message
The $single parameter must be a single text string literal. Found: esc_html__( 'One message was marked as Spam.', 'contact-form-to-db' )
ERRORMaintainabilityfile system operations fclose4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fclose().
ERRORMaintainabilityfile system operations fopen4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fopen().
ERRORMaintainabilityfile system operations fwrite4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fwrite().
WARNINGMaintainabilityerror log debug backtrace3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
debug_backtrace() found. Debug code should not normally be used in production.
ERRORMaintainabilityfile system operations rmdir3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: rmdir().
External Connections
Potential connections found in static code analysis.
Outbound calls
179
External assets
0
Incoming endpoints
5
Notable Domains
bestwebsoft.com138 · outbound
support.bestwebsoft.com23 · outbound
jqueryui.com7 · outbound
youtube.com3 · outbound
developer.mozilla.org2 · outbound
php.net1 · outbound
Platform / Reference Domains
wordpress.org2 · platform/reference
codex.wordpress.org1 · platform/reference
gnu.org1 · platform/reference
opensource.org1 · platform/reference
External Asset Domains
No external asset domains detected.
Incoming Endpoints
No public endpoints detected.
Admin AJAX endpoints5
wp_ajax_bws_submit_request_feature_actionauthenticated
wp_ajax
wp_ajax_bws_submit_uninstall_reason_actionauthenticated
wp_ajax
wp_ajax_cntctfrmtdb_change_stausauthenticated
wp_ajax
wp_ajax_cntctfrmtdb_read_messageauthenticated
wp_ajax
wp_ajax_cntctfrmtdb_show_attachmentauthenticated
wp_ajax
Score History
First score snapshot
v1.7.4
24
Latest
- Findings
- 886
- Errors
- 529
- Warnings
- 357
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 24 | 886 | 529 | 357 | v1.7.4 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Author
Category
Issue
Domain
Related
Button Generator – Easily Create Custom Buttons with Icons and Analytics96 scoreFloating Button – Easily Create Sticky, Fixed & Floating Buttons84 scoreBolt CTA Button – Floating Call Button for WordPress99 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder35 scoreLiteSpeed Cache35 scoreWooCommerce22 scoreAkismet Anti-spam: Spam Protection35 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreAll-in-One WP Migration and Backup34 scoreJetpack – WP Security, Backup, Speed, & Growth23 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 score
Author
Category
Issue
Domain
Related
Button Generator – Easily Create Custom Buttons with Icons and Analytics96 scoreFloating Button – Easily Create Sticky, Fixed & Floating Buttons84 scoreBolt CTA Button – Floating Call Button for WordPress99 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder35 scoreLiteSpeed Cache35 scoreWooCommerce22 scoreAkismet Anti-spam: Spam Protection35 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreAll-in-One WP Migration and Backup34 scoreJetpack – WP Security, Backup, Speed, & Growth23 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 score
Related Plugins
Floating Contact Button for MAX and Telegram
1k+ active installs
100
Bolt CTA Button – Floating Call Button for WordPress
1k+ active installs
99
Mobile Call Buttons
500 active installs
97
Button Generator – Easily Create Custom Buttons with Icons and Analytics
5k+ active installs
96
Nút Bấm Liên Hệ Dibrother
900 active installs
91
Floating Button – Easily Create Sticky, Fixed & Floating Buttons
4k+ active installs
84