Add country drop down with flags and phone number with country phone extension fields in contact form 7.
39
Score
117
Errors
34
Warnings
+0
Change
Category Scores
Security0
Repo89
Performance100
Maintainability76
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
I18n
85
6 issue groups
Security
51
7 issue groups
Maintainability
13
6 issue groups
Repo Compliance
2
2 issue groups
ERRORI18nText Domain MismatchMismatched text domain. Expected 'country-phone-field-contact-form-7' but got 'nb-cpf'.75
- Category
- I18n
- Occurrences
- 75
- Severity
- error
Sample message
Mismatched text domain. Expected 'country-phone-field-contact-form-7' but got 'nb-cpf'.
ERRORSecurityUnsafe printing functionAll output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.11
- Category
- Security
- Occurrences
- 11
- Severity
- error
Sample message
All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$args['description']'.10
- Category
- Security
- Occurrences
- 10
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$args['description']'.
WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.8
- Category
- Security
- Occurrences
- 8
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_GET['tab']8
- Category
- Security
- Occurrences
- 8
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_GET['tab']
WARNINGSecurityRequest data is not unslashed$_GET['tab'] not unslashed before sanitization. Use wp_unslash() or similar6
- Category
- Security
- Occurrences
- 6
- Severity
- warning
Sample message
$_GET['tab'] not unslashed before sanitization. Use wp_unslash() or similar
WARNINGSecurityMissing nonce verificationProcessing form data without nonce verification.5
- Category
- Security
- Occurrences
- 5
- Severity
- warning
Sample message
Processing form data without nonce verification.
ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;5
- Category
- Maintainability
- Occurrences
- 5
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
ERRORI18nMissing Arg DomainMissing $domain parameter in function call to _e().4
- Category
- I18n
- Occurrences
- 4
- Severity
- error
Sample message
Missing $domain parameter in function call to _e().
WARNINGSecurityInput is not validatedDetected usage of a possibly undefined superglobal array index: $_POST[$name.'-country-code']. Check that the array index exists before using it.3
- Category
- Security
- Occurrences
- 3
- Severity
- warning
Sample message
Detected usage of a possibly undefined superglobal array index: $_POST[$name.'-country-code']. Check that the array index exists before using it.
Show 11 moreShow less
ERRORI18nMissing Translators Comment3
- Category
- I18n
- Occurrences
- 3
- Severity
- error
Sample message
A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.
ERRORMaintainabilitystrip tags strip tags2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
strip_tags() is discouraged. Use the more comprehensive wp_strip_all_tags() instead.
WARNINGMaintainabilityMissing Version2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
Resource version not set in call to wp_enqueue_style(). This means new versions of the style may not always be loaded due to browser caching.
ERRORMaintainabilityNo Explicit Version2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
Version parameter is not explicitly set or has been set to an equivalent of "false" for wp_enqueue_script; This means that the WordPress core version will be used which is not recommended for plugin or theme development.
WARNINGI18nDiscouraged text-domain loading1
- Category
- I18n
- Occurrences
- 1
- Severity
- warning
Sample message
load_plugin_textdomain() has been discouraged since WordPress version 4.6. When your plugin is hosted on WordPress.org, you no longer need to manually include this function call for translations under your plugin slug. WordPress will automatically load the translations for you as needed.
ERRORI18nNon Singular String Literal Text1
- Category
- I18n
- Occurrences
- 1
- Severity
- error
Sample message
The $text parameter must be a single text string literal. Found: 'Countries code must two character length and comma separated.\r\n Wrong Value: '.esc_attr($input[$key])
ERRORMaintainabilitybadly named files1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
File and folder names must not contain spaces or special characters.
ERRORRepo Compliancelicense mismatch1
- Category
- Repo Compliance
- Occurrences
- 1
- Severity
- error
Sample message
Your plugin has a different license declared in the readme file and plugin header. Please update your readme with a valid GPL license identifier.
ERRORRepo Complianceoutdated tested upto header1
- Category
- Repo Compliance
- Occurrences
- 1
- Severity
- error
Sample message
Tested up to: 6.9 < 7.0. The "Tested up to" value in your plugin is not set to the current version of WordPress. This means your plugin will not show up in searches, as we require plugins to be compatible and documented as tested up to the most recent version of WordPress.
ERRORMaintainabilitystable tag mismatch1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
Mismatched Stable Tag: 2.6.4 != 2.6.5. Your Stable Tag is meant to be the stable version of your plugin and it needs to be exactly the same with the Version in your main plugin file's header. Any mismatch can prevent users from downloading the correct plugin files from WordPress.org.
WARNINGI18ntextdomain mismatch1
- Category
- I18n
- Occurrences
- 1
- Severity
- warning
Sample message
The "Text Domain" header in the plugin file does not match the slug. Found "nb-cpf", expected "country-phone-field-contact-form-7".
External Connections
Not analyzed yet.
Score History
First score snapshot
v2.6.5
39
Latest
- Findings
- 151
- Errors
- 117
- Warnings
- 34
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 39 | 151 | 117 | 34 | v2.6.5 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueRelated
Relationship links
Author
Category
Issue
Related
Wordfence Security – Firewall, Malware Scan, and Login Security21 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreClassic Editor63 scoreLiteSpeed Cache35 scoreWooCommerce21 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreJetpack – WP Security, Backup, Speed, & Growth22 scoreDuplicate Page40 scoreWordPress Importer25 scoreDatabase Addon for Contact Form 7 – CFDB739 scoreReCaptcha v2 for Contact Form 744 scoreRedirection for Contact Form 727 scoreConditional Fields for Contact Form 741 score
Author
Category
Issue
Related
Wordfence Security – Firewall, Malware Scan, and Login Security21 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreClassic Editor63 scoreLiteSpeed Cache35 scoreWooCommerce21 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreJetpack – WP Security, Backup, Speed, & Growth22 scoreDuplicate Page40 scoreWordPress Importer25 scoreDatabase Addon for Contact Form 7 – CFDB739 scoreReCaptcha v2 for Contact Form 744 scoreRedirection for Contact Form 727 scoreConditional Fields for Contact Form 741 score
Related Plugins
DS CF7 Math Captcha
10k+ active installs
100
Message Bridge for Contact Form 7 and Telegram
10k+ active installs
100
HTML Editor for Contact Form 7
2k+ active installs
100
Style Contact Form 7
1k+ active installs
100
TextMe SMS
600 active installs
100
Masks Form Fields
9k+ active installs
99