Connect WPForms to Google Sheets and automatically send form entries to a google sheet in real-time. No manual exports, no coding required.
Category Scores
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Maintainability
138
15 issue groups
Security
59
5 issue groups
I18n
57
5 issue groups
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$activate_the_plugin".90
- Category
- Maintainability
- Occurrences
- 90
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$activate_the_plugin".
ERRORI18nMissing Arg DomainMissing $domain parameter in function call to __().47
- Category
- I18n
- Occurrences
- 47
- Severity
- error
Sample message
Missing $domain parameter in function call to __().
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$builder_panel_settings'.22
- Category
- Security
- Occurrences
- 22
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$builder_panel_settings'.
ERRORSecurityException output is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"($name) missing required param: '$paramName'"'.17
- Category
- Security
- Occurrences
- 17
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"($name) missing required param: '$paramName'"'.
WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.9
- Category
- Security
- Occurrences
- 9
- Severity
- warning
Sample message
Processing form data without nonce verification.
ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;8
- Category
- Maintainability
- Occurrences
- 8
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
WARNINGSecurityRequest data is not unslashed$_GET['tab'] not unslashed before sanitization. Use wp_unslash() or similar7
- Category
- Security
- Occurrences
- 7
- Severity
- warning
Sample message
$_GET['tab'] not unslashed before sanitization. Use wp_unslash() or similar
ERRORMaintainabilitydate datedate() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.5
- Category
- Maintainability
- Occurrences
- 5
- Severity
- error
Sample message
date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.
WARNINGMaintainabilityNon-prefixed functionFunctions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "get_activated_plugins_for_site".4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- warning
Sample message
Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "get_activated_plugins_for_site".
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_POST['wpform-gs']4
- Category
- Security
- Occurrences
- 4
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_POST['wpform-gs']
Show 15 moreShow less
ERRORMaintainabilityrand mt rand4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- error
Sample message
mt_rand() is discouraged. Use the far less predictable wp_rand() instead.
ERRORI18nText Domain Mismatch4
- Category
- I18n
- Occurrences
- 4
- Severity
- error
Sample message
Mismatched text domain. Expected 'gsheetconnector-wpforms' but got ''.
WARNINGMaintainabilityDirect Query3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGMaintainabilityNo Caching3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
WARNINGMaintainabilityNon-prefixed constant3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "CRYPT_RSA_MODE".
WARNINGMaintainabilityNon-prefixed hook name3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "gcgf_filter_sheet_info".
ERRORMaintainabilityrand rand3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- error
Sample message
rand() is discouraged. Use the far less predictable wp_rand() instead.
WARNINGMaintainabilityNot In Footer3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
In footer ($in_footer) is not set explicitly wp_enqueue_script; It is recommended to load scripts in the footer. Please set this value to `true` to load it in the footer, or explicitly `false` if it should be loaded in the header.
WARNINGMaintainabilitytrademarked term3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
The plugin name includes a restricted term. Your chosen plugin name - "GSheetConnector For WPForms - WPForms Google Sheets Integration (Real-Time Sync)" - contains the restricted term "wp" which cannot be used at all in your plugin name.
WARNINGMaintainabilityNon-prefixed class2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "WPGS_FormBuilder".
WARNINGMaintainabilityerror log error log2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
error_log() found. Debug code should not normally be used in production.
WARNINGMaintainabilityerror log trigger error2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
trigger_error() found. Debug code should not normally be used in production.
ERRORI18nMissing Translators Comment2
- Category
- I18n
- Occurrences
- 2
- Severity
- error
Sample message
A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.
ERRORI18nNo Empty Strings2
- Category
- I18n
- Occurrences
- 2
- Severity
- error
Sample message
The $text text string should have translatable content. Found: ' '
ERRORI18nNon Singular String Literal Text2
- Category
- I18n
- Occurrences
- 2
- Severity
- error
Sample message
The $text parameter must be a single text string literal. Found: $active_tab_name
Score History
First score snapshot
v4.0.3
32
Latest
- Findings
- 265
- Errors
- 120
- Warnings
- 145
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 32 | 265 | 120 | 145 | v4.0.3 | 2.0.0 |
Related Plugins
1k+ active installs
1k+ active installs
4k+ active installs
1k+ active installs
1k+ active installs