Build fast and powerful contact forms in WordPress with an intuitive drag-and-drop builder packed with smart features.
67
Score
2
Errors
35
Warnings
+0
Change
Category Scores
Security43
Repo100
Performance100
Maintainability93
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Security
25
4 issue groups
Maintainability
12
2 issue groups
WARNINGSecurityDatabase parameter is not escapedUnescaped parameter $table_name used in $wpdb->get_results()\n$table_name assigned unsafely at line 127.10
- Category
- Security
- Occurrences
- 10
- Severity
- warning
Sample message
Unescaped parameter $table_name used in $wpdb->get_results()\n$table_name assigned unsafely at line 127.
WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().10
- Category
- Maintainability
- Occurrences
- 10
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
WARNINGSecurityInterpolated SQL is not preparedUse placeholders and $wpdb->prepare(); found interpolated variable $table_name at "SELECT display_meta FROM $table_name WHERE form_id = %d"10
- Category
- Security
- Occurrences
- 10
- Severity
- warning
Sample message
Use placeholders and $wpdb->prepare(); found interpolated variable $table_name at "SELECT display_meta FROM $table_name WHERE form_id = %d"
WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.3
- Category
- Security
- Occurrences
- 3
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_POST['fields']2
- Category
- Security
- Occurrences
- 2
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_POST['fields']
ERRORMaintainabilitywp function not compatible with requires wpFunction "serialize_blocks()" requires WordPress 5.3.1, but your plugin minimum supported version is WordPress 5.0.0.2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
Function "serialize_blocks()" requires WordPress 5.3.1, but your plugin minimum supported version is WordPress 5.0.0.
External Connections
Potential connections found in static code analysis.
Outbound calls
14
External assets
1
Incoming endpoints
9
Notable Domains
formlayer.net4 · outbound
discord.com1 · outbound
hcaptcha.com1 · outbound
hooks.slack.com1 · outbound
softaculous.com1 · outbound
wpformlayer.com1 · outbound
Platform / Reference Domains
w3.org5 · platform/reference
External Asset Domains
js.hcaptcha.com1 · asset
Incoming Endpoints
wp_ajax_nopriv_formlayer_submit_formpublic
wp_ajax
Admin AJAX endpoints8
wp_ajax_formlayer_create_gutenberg_templateauthenticated
wp_ajax
wp_ajax_formlayer_delete_formauthenticated
wp_ajax
wp_ajax_formlayer_get_migration_source_formsauthenticated
wp_ajax
wp_ajax_formlayer_load_formauthenticated
wp_ajax
wp_ajax_formlayer_run_form_migrationauthenticated
wp_ajax
wp_ajax_formlayer_save_formauthenticated
wp_ajax
wp_ajax_formlayer_save_settingsauthenticated
wp_ajax
wp_ajax_formlayer_submit_formauthenticated
wp_ajax
Score History
7 score snapshots
v1.1.1
67
Latest
- Findings
- 37
- Errors
- 2
- Warnings
- 35
- Check
- 2.1.0
v1.1.0
67
Score
- Findings
- 37
- Errors
- 2
- Warnings
- 35
- Check
- 2.1.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 67 | 37 | 2 | 35 | v1.1.1 | 2.1.0 |
| 67 | 37 | 2 | 35 | v1.1.0 | 2.1.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Plugin
Author
Issue
Domain
Related
Akismet Anti-spam: Spam Protection35 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder38 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreLiteSpeed Cache35 scoreWooCommerce22 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWPForms – AI Form Builder for WordPress – Contact Forms, Payment Forms, Survey Form, Quiz & More29 scoreLoginizer25 scoreFluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder26 scoreForminator Forms – Contact Form, Payment Form & Custom Form Builder24 scoreMetForm – Contact Form, Survey, Quiz, Conditional Forms, Form Templates & Custom Form Builder for Elementor29 scoreBackuply – Backup, Restore, Migrate and Clone24 scoreSpeedyCache – Cache, Optimization, Performance29 score
Plugin
Author
Issue
Domain
Related
Akismet Anti-spam: Spam Protection35 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder38 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreLiteSpeed Cache35 scoreWooCommerce22 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWPForms – AI Form Builder for WordPress – Contact Forms, Payment Forms, Survey Form, Quiz & More29 scoreLoginizer25 scoreFluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder26 scoreForminator Forms – Contact Form, Payment Form & Custom Form Builder24 scoreMetForm – Contact Form, Survey, Quiz, Conditional Forms, Form Templates & Custom Form Builder for Elementor29 scoreBackuply – Backup, Restore, Migrate and Clone24 scoreSpeedyCache – Cache, Optimization, Performance29 score
Related Plugins
Crowdsignal Forms
200k+ active installs
100
100
Ultra Addons for Contact Form 7
60k+ active installs
100
100
WS Form LITE – Drag & Drop Contact Form Builder
10k+ active installs
100
Add Password Field for Contact Form 7
3k+ active installs
100