PluginScore

File Upload For WPForms – Filenzo

Enhance WPForms with a secure file upload field, allowing users to upload files directly through forms.

v1.1.1wpdebuglogUpdated Added 1k+ installs100% rating0% support resolved
WPFormsattachmentsfile uploadforms
59
Score
8
Errors
16
Warnings
+0
Change

Category Scores

Security29
Repo94
Performance100
Maintainability95

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

24 findings

Security

17

6 issue groups

Maintainability

5

2 issue groups

I18n

1

1 issue group

Repo Compliance

1

1 issue group

ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$this'.4
Category
Security
Occurrences
4
Severity
error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$this'.

WordPress.Security.EscapeOutput.OutputNotEscapedReference
WARNINGSecurityMissing nonce verificationProcessing form data without nonce verification.3
Category
Security
Occurrences
3
Severity
warning

Sample message

Processing form data without nonce verification.

WordPress.Security.NonceVerification.Missing
WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.3
Category
Security
Occurrences
3
Severity
warning

Sample message

Processing form data without nonce verification.

WordPress.Security.NonceVerification.Recommended
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_FILES['wpforms']['name']['fields']3
Category
Security
Occurrences
3
Severity
warning

Sample message

Detected usage of a non-sanitized input variable: $_FILES['wpforms']['name']['fields']

WordPress.Security.ValidatedSanitizedInput.InputNotSanitized
WARNINGMaintainabilitytrademarked termThe plugin name includes a restricted term. Your chosen plugin name - "File Upload For WPForms - Filenzo" - contains the restricted term "wp" which cannot be used at all in your plugin name.3
Category
Maintainability
Occurrences
3
Severity
warning

Sample message

The plugin name includes a restricted term. Your chosen plugin name - "File Upload For WPForms - Filenzo" - contains the restricted term "wp" which cannot be used at all in your plugin name.

trademarked_term
ERRORMaintainabilitydate datedate() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.2
Category
Maintainability
Occurrences
2
Severity
error

Sample message

date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.

WordPress.DateTime.RestrictedFunctions.date_date
WARNINGSecurityInput is not validatedDetected usage of a possibly undefined superglobal array index: $_SERVER['HTTP_HOST']. Check that the array index exists before using it.2
Category
Security
Occurrences
2
Severity
warning

Sample message

Detected usage of a possibly undefined superglobal array index: $_SERVER['HTTP_HOST']. Check that the array index exists before using it.

WordPress.Security.ValidatedSanitizedInput.InputNotValidated
WARNINGSecurityRequest data is not unslashed$_SERVER['HTTP_HOST'] not unslashed before sanitization. Use wp_unslash() or similar2
Category
Security
Occurrences
2
Severity
warning

Sample message

$_SERVER['HTTP_HOST'] not unslashed before sanitization. Use wp_unslash() or similar

WordPress.Security.ValidatedSanitizedInput.MissingUnslash
ERRORI18nMissing Translators CommentA function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.1
Category
I18n
Occurrences
1
Severity
error

Sample message

A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.

WordPress.WP.I18n.MissingTranslatorsCommentReference
ERRORRepo Compliancereadme mismatched header requiresMismatched Requires at least: 5.6 != 6.6. "Requires at least" needs to be exactly the same with that in your main plugin file's header.1
Category
Repo Compliance
Occurrences
1
Severity
error

Sample message

Mismatched Requires at least: 5.6 != 6.6. "Requires at least" needs to be exactly the same with that in your main plugin file's header.

readme_mismatched_header_requiresReference

External Connections

Not analyzed yet.

Score History

First score snapshot

v1.1.1

59

Latest

Findings
24
Errors
8
Warnings
16
Check
2.0.0

Relationship Map

Author, categories, issues, domains, and nearby plugins.

28 nodes

Related

WooCommerce22 scoreAkismet Anti-spam: Spam Protection35 scoreAll-in-One WP Migration and Backup34 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreContact Form 769 scoreClassic Editor63 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreWPForms – AI Form Builder for WordPress – Contact Forms, Payment Forms, Survey Form, Quiz & More32 scoreFluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder22 scoreForminator Forms – Contact Form, Payment Form & Custom Form Builder24 scoreNinja Forms – The Contact Form Builder That Grows With You23 scoreSureForms – Drag & Drop Contact Form & Form Builder, Payment Form, Survey, Quiz & Calculator29 scoreCMB236 score

Related Plugins

Crowdsignal Forms

200k+ active installs

100
Email Marketing for WordPress and WooCommerce – Retainful

500 active installs

100
LeadConnector

20k+ active installs

100
Superb Addons: Blocks, Patterns, Pre-built Pages, Sliders, Popups, Free Forms, Animations & More

80k+ active installs

100
WS Form LITE – Drag & Drop Contact Form Builder

10k+ active installs

100
Online Forms — Customizable Payment, Contact, Quiz, Survey Form Builder – Jotform

20k+ active installs

99