PDF Builder for CF7, Divi, Elementor Forms, Everest, Fluent, Formidable, Forminator, Gravity, JFB, Ninja, WPForms, WooCommerce, Post Meta, ACF, etc.
22
Score
1,081
Errors
847
Warnings
+0
Change
Category Scores
Security0
Repo83
Performance98
Maintainability0
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Security
1,018
11 issue groups
Maintainability
805
12 issue groups
I18n
68
2 issue groups
ERRORSecurityUnsafe printing functionAll output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.289
- Category
- Security
- Occurrences
- 289
- Severity
- error
Sample message
All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.
WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.226
- Category
- Maintainability
- Occurrences
- 226
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
ERRORSecuritySQL query is not preparedUse placeholders and $wpdb->prepare(); found $collate198
- Category
- Security
- Occurrences
- 198
- Severity
- error
Sample message
Use placeholders and $wpdb->prepare(); found $collate
WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().195
- Category
- Maintainability
- Occurrences
- 195
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
ERRORSecurityDatabase parameter is not escapedUnescaped parameter $db_prefix used in $wpdb->get_row()\n$db_prefix used without escaping.156
- Category
- Security
- Occurrences
- 156
- Severity
- error
Sample message
Unescaped parameter $db_prefix used in $wpdb->get_row()\n$db_prefix used without escaping.
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"<script>window.location='{$location}';</script>"'.149
- Category
- Security
- Occurrences
- 149
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"<script>window.location='{$location}';</script>"'.
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$allchars".99
- Category
- Maintainability
- Occurrences
- 99
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$allchars".
WARNINGMaintainabilitySchema ChangeAttempting a database schema change is discouraged.90
- Category
- Maintainability
- Occurrences
- 90
- Severity
- warning
Sample message
Attempting a database schema change is discouraged.
ERRORSecurityException output is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"({$r},{$c}) out of range of "'.81
- Category
- Security
- Occurrences
- 81
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"({$r},{$c}) out of range of "'.
ERRORMaintainabilityForbidden PHP function foundThe use of function do_shortcode_tag() is forbidden78
- Category
- Maintainability
- Occurrences
- 78
- Severity
- error
Sample message
The use of function do_shortcode_tag() is forbidden
Show 15 moreShow less
WARNINGSecurityDatabase parameter is not escaped62
- Category
- Security
- Occurrences
- 62
- Severity
- warning
Sample message
Unescaped parameter $cfdb->prefix used in $wpdb->get_results()\n$cfdb->prefix used without escaping.
WARNINGMaintainabilityNon-prefixed hook name62
- Category
- Maintainability
- Occurrences
- 62
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "'ninja_forms_render_options_' . $field['type']".
ERRORI18nText Domain Mismatch47
- Category
- I18n
- Occurrences
- 47
- Severity
- error
Sample message
Mismatched text domain. Expected 'e2pdf' but got 'et_builder_5'.
WARNINGSecurityInput is not sanitized25
- Category
- Security
- Occurrences
- 25
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_GET['item_id']
ERRORI18nMissing Translators Comment21
- Category
- I18n
- Occurrences
- 21
- Severity
- error
Sample message
A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.
WARNINGSecurityNonce verification recommended20
- Category
- Security
- Occurrences
- 20
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGSecurityRequest data is not unslashed19
- Category
- Security
- Occurrences
- 19
- Severity
- warning
Sample message
$_GET['item_id'] not unslashed before sanitization. Use wp_unslash() or similar
ERRORMaintainabilitydate date13
- Category
- Maintainability
- Occurrences
- 13
- Severity
- error
Sample message
date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.
WARNINGSecurityMissing nonce verification13
- Category
- Security
- Occurrences
- 13
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGMaintainabilityNon-prefixed class11
- Category
- Maintainability
- Occurrences
- 11
- Severity
- warning
Sample message
Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "Controller_E2pdf".
ERRORMaintainabilityunlink unlink11
- Category
- Maintainability
- Occurrences
- 11
- Severity
- error
Sample message
unlink() is discouraged. Use wp_delete_file() to delete a file.
ERRORMaintainabilityfile system operations is writable10
- Category
- Maintainability
- Occurrences
- 10
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: is_writable().
ERRORMaintainabilityfile system operations chmod7
- Category
- Maintainability
- Occurrences
- 7
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: chmod().
WARNINGSecurityUnfinished Prepare6
- Category
- Security
- Occurrences
- 6
- Severity
- warning
Sample message
Replacement variables found, but no valid placeholders found in the query.
WARNINGMaintainabilityDiscouraged PHP function3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
The use of function ini_set() is discouraged
External Connections
Potential connections found in static code analysis.
Outbound calls
279
External assets
0
Incoming endpoints
21
Notable Domains
e2pdf.com124 · outbound
googleapis.com16 · outbound
apache.org4 · outbound
drive.google.com4 · outbound
memberpress.com4 · outbound
oauth2.googleapis.com4 · outbound
Platform / Reference Domains
wordpress.org52 · platform/reference
gnu.org35 · platform/reference
w3.org12 · platform/reference
github.com2 · platform/reference
opensource.org1 · platform/reference
External Asset Domains
No external asset domains detected.
Incoming Endpoints
No public endpoints detected.
Admin AJAX endpoints21
wp_ajax_e2pdf_activate_templateauthenticated
wp_ajax
wp_ajax_e2pdf_autoauthenticated
wp_ajax
wp_ajax_e2pdf_bulk_actionauthenticated
wp_ajax
wp_ajax_e2pdf_bulk_createauthenticated
wp_ajax
wp_ajax_e2pdf_bulk_progressauthenticated
wp_ajax
wp_ajax_e2pdf_datasetauthenticated
wp_ajax
wp_ajax_e2pdf_datasets_refreshauthenticated
wp_ajax
wp_ajax_e2pdf_deactivate_all_templatesauthenticated
wp_ajax
wp_ajax_e2pdf_deactivate_templateauthenticated
wp_ajax
wp_ajax_e2pdf_delete_fontauthenticated
wp_ajax
wp_ajax_e2pdf_delete_itemauthenticated
wp_ajax
wp_ajax_e2pdf_delete_itemsauthenticated
wp_ajax
9 more hidden
Score History
5 score snapshots
v1.32.43
22
Latest
- Findings
- 1,928
- Errors
- 1,081
- Warnings
- 847
- Check
- 2.0.0
v1.32.40
22
Score
- Findings
- 1,929
- Errors
- 1,082
- Warnings
- 847
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 22 | 1,928 | 1,081 | 847 | v1.32.43 | 2.0.0 |
| 22 | 1,929 | 1,082 | 847 | v1.32.40 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Author
Issue
Domain
Related
WooCommerce21 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder39 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreClassic Editor63 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreAkismet Anti-spam: Spam Protection35 scoreAll-in-One WP Migration and Backup34 scoreDuplicate Page40 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreWordPress Importer25 scoreWPForms – AI Form Builder for WordPress – Contact Forms, Payment Forms, Survey Form, Quiz & More31 scoreWP Mail SMTP by WPForms – The Most Popular SMTP and Email Log Plugin30 scoreMC4WP: Mailchimp for WordPress57 score
Author
Issue
Domain
Related
WooCommerce21 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder39 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreClassic Editor63 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreAkismet Anti-spam: Spam Protection35 scoreAll-in-One WP Migration and Backup34 scoreDuplicate Page40 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreWordPress Importer25 scoreWPForms – AI Form Builder for WordPress – Contact Forms, Payment Forms, Survey Form, Quiz & More31 scoreWP Mail SMTP by WPForms – The Most Popular SMTP and Email Log Plugin30 scoreMC4WP: Mailchimp for WordPress57 score
Related Plugins
Crowdsignal Forms
200k+ active installs
100
100
LeadConnector
20k+ active installs
100
Block for Mailchimp – grow your email list with signup forms
2k+ active installs
100
SurveyX Builder – Easy Feedback, Poll, Quiz & Survey
2k+ active installs
100
Contact Form Query
1k+ active installs
100