Formidable PRO2PDF

Map web forms to PDF forms then with one simple shortcode - display a link on any post, page, form, or view the merged PDF on a PC or mobile device.

v3.24alexandre67frUpdated Added 1k+ installs94% rating
24
Score
218
Errors
477
Warnings
+0
Change

Category Scores

Security0
Repo91
Performance100
Maintainability0

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

695 findings

Maintainability

600

19 issue groups

Security

76

6 issue groups

WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$actual".184
Category
Maintainability
Occurrences
184
Severity
warning

Sample message

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$actual".

WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.99
Category
Maintainability
Occurrences
99
Severity
warning

Sample message

Use of a direct database call is discouraged.

WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().96
Category
Maintainability
Occurrences
96
Severity
warning

Sample message

Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().

ERRORMaintainabilitywp function not compatible with requires wpFunction "esc_textarea()" requires WordPress 3.1.0, but your plugin minimum supported version is WordPress 3.0.1.72
Category
Maintainability
Occurrences
72
Severity
error

Sample message

Function "esc_textarea()" requires WordPress 3.1.0, but your plugin minimum supported version is WordPress 3.0.1.

WARNINGMaintainabilitySchema ChangeAttempting a database schema change is discouraged.41
Category
Maintainability
Occurrences
41
Severity
warning

Sample message

Attempting a database schema change is discouraged.

ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"\n$debug\n"'.34
Category
Security
Occurrences
34
Severity
error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"\n$debug\n"'.

ERRORMaintainabilitydate datedate() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.21
Category
Maintainability
Occurrences
21
Severity
error

Sample message

date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.

ERRORSecuritySetting is missing a sanitization callbackSanitization missing for register_setting().16
Category
Security
Occurrences
16
Severity
error

Sample message

Sanitization missing for register_setting().

WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.14
Category
Security
Occurrences
14
Severity
warning

Sample message

Processing form data without nonce verification.

ERRORMaintainabilityunlink unlinkunlink() is discouraged. Use wp_delete_file() to delete a file.11
Category
Maintainability
Occurrences
11
Severity
error

Sample message

unlink() is discouraged. Use wp_delete_file() to delete a file.

Show 15 more
WARNINGMaintainabilityNon-prefixed class10
Category
Maintainability
Occurrences
10
Severity
warning

Sample message

Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "Doc2PdfConverter".

WARNINGMaintainabilityNon-prefixed function10
Category
Maintainability
Occurrences
10
Severity
warning

Sample message

Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "cache_entry".

ERRORMaintainabilityfile system operations fclose10
Category
Maintainability
Occurrences
10
Severity
error

Sample message

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fclose().

ERRORMaintainabilityfile system operations fopen10
Category
Maintainability
Occurrences
10
Severity
error

Sample message

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fopen().

ERRORMaintainabilityfile system operations fwrite10
Category
Maintainability
Occurrences
10
Severity
error

Sample message

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fwrite().

ERRORMaintainabilityfile system operations is writable7
Category
Maintainability
Occurrences
7
Severity
error

Sample message

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: is_writable().

ERRORMaintainabilityPlugin Directory Write4
Category
Maintainability
Occurrences
4
Severity
error

Sample message

Plugin folders are deleted when upgraded. Do not save data to the plugin folder using file_put_contents(). Detected usage of __FILE__ or __DIR__ magic constant. Use wp_upload_dir() to get the uploads directory path or save to the database instead.

ERRORSecuritySQL query is not prepared4
Category
Security
Occurrences
4
Severity
error

Sample message

Use placeholders and $wpdb->prepare(); found $prefix

WARNINGMaintainabilityNon-prefixed hook name4
Category
Maintainability
Occurrences
4
Severity
warning

Sample message

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "fpro2pdf_pdf_generated".

WARNINGSecurityMissing nonce verification4
Category
Security
Occurrences
4
Severity
warning

Sample message

Processing form data without nonce verification.

WARNINGSecurityInput is not sanitized4
Category
Security
Occurrences
4
Severity
warning

Sample message

Detected usage of a non-sanitized input variable: $_POST['address_field'][$index]

ERRORMaintainabilityfile system operations mkdir4
Category
Maintainability
Occurrences
4
Severity
error

Sample message

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: mkdir().

WARNINGMaintainabilityNon-prefixed constant3
Category
Maintainability
Occurrences
3
Severity
warning

Sample message

Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "PROPDF_TEMP_DIR".

ERRORMaintainabilityForbidden PHP function found2
Category
Maintainability
Occurrences
2
Severity
error

Sample message

The use of function move_uploaded_file() is forbidden

ERRORMaintainabilityfile system operations chmod2
Category
Maintainability
Occurrences
2
Severity
error

Sample message

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: chmod().

External Connections

Potential connections found in static code analysis.

8 domains

Outbound calls

77

External assets

0

Incoming endpoints

10

Notable Domains

tempuri.org47 · outbound
apis.pdfaid.com16 · outbound
pdfaid.com1 · outbound

Platform / Reference Domains

github.com4 · platform/reference

External Asset Domains

No external asset domains detected.

Incoming Endpoints

wp_ajax_nopriv_wpfx_generatepublic

wp_ajax

wp_ajax_nopriv_wpfx_preview_pdfpublic

wp_ajax

Admin AJAX endpoints8
wp_ajax_fpropdf_export_fileauthenticated

wp_ajax

wp_ajax_fpropdf_remove_pdfauthenticated

wp_ajax

wp_ajax_wpfx_del_layoutauthenticated

wp_ajax

wp_ajax_wpfx_dup_layoutauthenticated

wp_ajax

wp_ajax_wpfx_generateauthenticated

wp_ajax

wp_ajax_wpfx_get_datasetauthenticated

wp_ajax

wp_ajax_wpfx_get_layoutauthenticated

wp_ajax

wp_ajax_wpfx_preview_pdfauthenticated

wp_ajax

Score History

First score snapshot

v3.24

24

Latest

Findings
695
Errors
218
Warnings
477
Check
2.0.0

Relationship Map

Author, categories, issues, domains, and nearby plugins.

36 nodes

Related Plugins