Advanced form builder plugin for Gutenberg. Create forms from the ground up, customize the existing ones, and style them up – all in one editor.
19
Score
2,103
Errors
1,604
Warnings
+0
Change
Category Scores
Security0
Repo64
Performance96
Maintainability0
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
I18n
2,038
2 issue groups
Maintainability
1,593
14 issue groups
Security
56
7 issue groups
Supply Chain
6
1 issue group
ERRORI18nText Domain MismatchMismatched text domain. Expected 'jetformbuilder' but got 'jet-engine'.2,034
- Category
- I18n
- Occurrences
- 2,034
- Severity
- error
Sample message
Mismatched text domain. Expected 'jetformbuilder' but got 'jet-engine'.
WARNINGMaintainabilityNon-prefixed namespaceNamespaces declared by a theme/plugin should start with the theme/plugin prefix. Found: "JFB_Compatibility".1,074
- Category
- Maintainability
- Occurrences
- 1,074
- Severity
- warning
Sample message
Namespaces declared by a theme/plugin should start with the theme/plugin prefix. Found: "JFB_Compatibility".
WARNINGMaintainabilityNon-prefixed hook nameHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "'jet-form-builder/action/after-post-' . $this->get_id()".267
- Category
- Maintainability
- Occurrences
- 267
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "'jet-form-builder/action/after-post-' . $this->get_id()".
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$$global_key".136
- Category
- Maintainability
- Occurrences
- 136
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$$global_key".
ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;30
- Category
- Maintainability
- Occurrences
- 30
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
WARNINGMaintainabilityNo PHP code foundNo PHP code was found in this file and short open tags are not allowed by this install of PHP. This file may be using short open tags but PHP does not allow them.26
- Category
- Maintainability
- Occurrences
- 26
- Severity
- warning
Sample message
No PHP code was found in this file and short open tags are not allowed by this install of PHP. This file may be using short open tags but PHP does not allow them.
WARNINGSecurityDatabase parameter is not escapedUnescaped parameter $actions used in $wpdb->query()\n$actions assigned unsafely at line 16.19
- Category
- Security
- Occurrences
- 19
- Severity
- warning
Sample message
Unescaped parameter $actions used in $wpdb->query()\n$actions assigned unsafely at line 16.
WARNINGMaintainabilityNon-prefixed functionFunctions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "jet_fb_action_handler".18
- Category
- Maintainability
- Occurrences
- 18
- Severity
- warning
Sample message
Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "jet_fb_action_handler".
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"Parent control `$parent` not found in the controls stack."'.14
- Category
- Security
- Occurrences
- 14
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"Parent control `$parent` not found in the controls stack."'.
ERRORMaintainabilitybadly named filesFile and folder names must not contain spaces or special characters.13
- Category
- Maintainability
- Occurrences
- 13
- Severity
- error
Sample message
File and folder names must not contain spaces or special characters.
Show 15 moreShow less
WARNINGSecurityNonce verification recommended12
- Category
- Security
- Occurrences
- 12
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGMaintainabilityNon-prefixed constant7
- Category
- Maintainability
- Occurrences
- 7
- Severity
- warning
Sample message
Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "DOING_AJAX".
ERRORSupply ChainHidden files included6
- Category
- Supply Chain
- Occurrences
- 6
- Severity
- error
Sample message
Hidden files are not permitted.
WARNINGMaintainabilityDiscouraged PHP function5
- Category
- Maintainability
- Occurrences
- 5
- Severity
- warning
Sample message
The use of function ini_set() is discouraged
WARNINGMaintainabilityDirect Query4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGMaintainabilityslow db query meta key4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- warning
Sample message
Detected usage of meta_key, possible slow query.
WARNINGMaintainabilityNon-prefixed global symbol4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- warning
Sample message
The "jfb/bricks/form/after" prefix is not a valid namespace/function/class/variable/constant prefix in PHP.
ERRORI18nMissing Translators Comment4
- Category
- I18n
- Occurrences
- 4
- Severity
- error
Sample message
A function call to esc_html__() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.
WARNINGMaintainabilityNo Caching3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
WARNINGSecurityInput is not sanitized3
- Category
- Security
- Occurrences
- 3
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_REQUEST['_wpnonce']
WARNINGSecurityInput is not validated3
- Category
- Security
- Occurrences
- 3
- Severity
- warning
Sample message
Detected usage of a possibly undefined superglobal array index: $_REQUEST['_wpnonce']. Check that the array index exists before using it.
WARNINGSecurityRequest data is not unslashed3
- Category
- Security
- Occurrences
- 3
- Severity
- warning
Sample message
$_REQUEST['_wpnonce'] not unslashed before sanitization. Use wp_unslash() or similar
WARNINGPerformancePost Not In exclude3
- Category
- Performance
- Occurrences
- 3
- Severity
- warning
Sample message
Using exclusionary parameters, like exclude, in calls to get_posts() should be done with caution, see https://wpvip.com/documentation/performance-improvements-by-removing-usage-of-post__not_in/ for more information.
WARNINGSecurityInterpolated SQL is not prepared2
- Category
- Security
- Occurrences
- 2
- Severity
- warning
Sample message
Use placeholders and $wpdb->prepare(); found interpolated variable $limit at "SELECT post_id, meta_value FROM {$wpdb->postmeta} WHERE meta_key = '_jet_sm_controls_values' LIMIT $limit OFFSET $offset"
WARNINGMaintainabilityNon-prefixed class2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "CX_Vue_UI".
External Connections
Potential connections found in static code analysis.
Outbound calls
278
External assets
0
Incoming endpoints
9
Notable Domains
jetformbuilder.com22 · outbound
php.net7 · outbound
en.wikipedia.org5 · outbound
google.com5 · outbound
vuejs.org5 · outbound
actionscheduler.org4 · outbound
Platform / Reference Domains
w3.org92 · platform/reference
github.com57 · platform/reference
wordpress.org4 · platform/reference
core.trac.wordpress.org2 · platform/reference
gnu.org2 · platform/reference
External Asset Domains
No external asset domains detected.
Incoming Endpoints
wp_ajax_nopriv_public
wp_ajax
wp_ajax_nopriv_jet_fb_ssr_validation_ajaxpublic
wp_ajax
Admin AJAX endpoints6
wp_ajax_jet_fb_save_tab__{$this->slug()}authenticated
wp_ajax
wp_ajax_jet_fb_ssr_validation_ajaxauthenticated
wp_ajax
wp_ajax_jfb_addon_actionauthenticated
wp_ajax
wp_ajax_jfb_addon_activate_actionauthenticated
wp_ajax
wp_ajax_jfb_addon_deactivate_actionauthenticated
wp_ajax
wp_ajax_jfb_license_service_actionauthenticated
wp_ajax
Score History
8 score snapshots
v3.6.5
19
Latest
- Findings
- 3,707
- Errors
- 2,103
- Warnings
- 1,604
- Check
- 2.0.0
v3.6.4.2
19
Score
- Findings
- 3,711
- Errors
- 2,104
- Warnings
- 1,607
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 19 | 3,707 | 2,103 | 1,604 | v3.6.5 | 2.0.0 |
| 19 | 3,711 | 2,104 | 1,607 | v3.6.4.2 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Author
Issue
Domain
Related
Spectra Legacy – Gutenberg Blocks25 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreLiteSpeed Cache35 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreJetpack – WP Security, Backup, Speed, & Growth22 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreAdvanced Custom Fields (ACF®)23 scoreUltimate Addons for Elementor33 scoreWordPress Importer25 scoreStarter Templates – AI-Powered Templates for Elementor & Gutenberg24 scoreSmash Balloon Social Photo Feed – Easy Social Feeds Plugin25 scoreContact Form 769 scoreAkismet Anti-spam: Spam Protection35 score
Author
Issue
Domain
Related
Spectra Legacy – Gutenberg Blocks25 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreLiteSpeed Cache35 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreJetpack – WP Security, Backup, Speed, & Growth22 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreAdvanced Custom Fields (ACF®)23 scoreUltimate Addons for Elementor33 scoreWordPress Importer25 scoreStarter Templates – AI-Powered Templates for Elementor & Gutenberg24 scoreSmash Balloon Social Photo Feed – Easy Social Feeds Plugin25 scoreContact Form 769 scoreAkismet Anti-spam: Spam Protection35 score
Related Plugins
Crowdsignal Forms
200k+ active installs
100
100
LeadConnector
20k+ active installs
100
No Gutenberg? – Choose Where to Use the Block Editor or the Classic Editor
9k+ active installs
100
Add Password Field for Contact Form 7
3k+ active installs
100
Contact Form Query
1k+ active installs
100