Guide your customers with the animated progress bar. Generate dynamic multi step forms. Divide longer forms into small steps for better usability.
34
Score
277
Errors
139
Warnings
+0
Change
Category Scores
Security0
Repo86
Performance100
Maintainability54
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Security
308
9 issue groups
Maintainability
81
12 issue groups
I18n
19
4 issue groups
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$GLOBALS['wp_embed']'.177
- Category
- Security
- Occurrences
- 177
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$GLOBALS['wp_embed']'.
ERRORSecurityUnsafe printing functionAll output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.66
- Category
- Security
- Occurrences
- 66
- Severity
- error
Sample message
All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$block_types".22
- Category
- Maintainability
- Occurrences
- 22
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$block_types".
WARNINGSecurityRequest data is not unslashed$_GET['_wpnonce'] not unslashed before sanitization. Use wp_unslash() or similar22
- Category
- Security
- Occurrences
- 22
- Severity
- warning
Sample message
$_GET['_wpnonce'] not unslashed before sanitization. Use wp_unslash() or similar
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_GET['_wpnonce']19
- Category
- Security
- Occurrences
- 19
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_GET['_wpnonce']
WARNINGMaintainabilityNo PHP code foundNo PHP code was found in this file and short open tags are not allowed by this install of PHP. This file may be using short open tags but PHP does not allow them.15
- Category
- Maintainability
- Occurrences
- 15
- Severity
- warning
Sample message
No PHP code was found in this file and short open tags are not allowed by this install of PHP. This file may be using short open tags but PHP does not allow them.
WARNINGMaintainabilityNon-prefixed hook nameHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "'wsa_form_bottom_' . $form['id']".14
- Category
- Maintainability
- Occurrences
- 14
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "'wsa_form_bottom_' . $form['id']".
WARNINGSecurityMissing nonce verificationProcessing form data without nonce verification.9
- Category
- Security
- Occurrences
- 9
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.8
- Category
- Security
- Occurrences
- 8
- Severity
- warning
Sample message
Processing form data without nonce verification.
ERRORI18nMissing Arg DomainMissing $domain parameter in function call to __().8
- Category
- I18n
- Occurrences
- 8
- Severity
- error
Sample message
Missing $domain parameter in function call to __().
Show 15 moreShow less
WARNINGMaintainabilityDirect Query5
- Category
- Maintainability
- Occurrences
- 5
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
ERRORI18nNon Singular String Literal Text5
- Category
- I18n
- Occurrences
- 5
- Severity
- error
Sample message
The $text parameter must be a single text string literal. Found: 'If you changed these limits, make sure this change is shown in this page. '.\n 'Sometimes it is not possible to change these limits in .htaccess files or with '.\n 'ini_set() functions, as some webhosting providers block those changes. '.\n 'In that case contact your provider and ask for support or a higher upload limit.'
WARNINGMaintainabilityShort PHP open tag found4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- warning
Sample message
Possible use of short open tags detected; found: <? _e('Important System Information', 'mul...
WARNINGMaintainabilityNo Caching4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
WARNINGMaintainabilityNon-prefixed function4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- warning
Sample message
Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "activate_form_wizard".
ERRORI18nNon Singular String Literal Domain4
- Category
- I18n
- Occurrences
- 4
- Severity
- error
Sample message
The $domain parameter must be a single text string literal. Found: $this->_text_domain
ERRORMaintainabilityMissing direct file access protection4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
ERRORMaintainabilitydate date3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- error
Sample message
date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.
WARNINGSecurityInput is not validated3
- Category
- Security
- Occurrences
- 3
- Severity
- warning
Sample message
Detected usage of a possibly undefined superglobal array index: $_GET['wizard']. Check that the array index exists before using it.
WARNINGI18nDiscouraged text-domain loading2
- Category
- I18n
- Occurrences
- 2
- Severity
- warning
Sample message
load_plugin_textdomain() has been discouraged since WordPress version 4.6. When your plugin is hosted on WordPress.org, you no longer need to manually include this function call for translations under your plugin slug. WordPress will automatically load the translations for you as needed.
ERRORSecurityDatabase parameter is not escaped2
- Category
- Security
- Occurrences
- 2
- Severity
- error
Sample message
Unescaped parameter $sql used in $wpdb->get_results()\n$sql assigned unsafely at line 28.
ERRORSecuritySQL query is not prepared2
- Category
- Security
- Occurrences
- 2
- Severity
- error
Sample message
Use placeholders and $wpdb->prepare(); found $sql
WARNINGMaintainabilityerror log error log2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
error_log() found. Debug code should not normally be used in production.
WARNINGMaintainabilityerror log print r2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
print_r() found. Debug code should not normally be used in production.
WARNINGMaintainabilityNot In Footer2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
In footer ($in_footer) is not set explicitly wp_register_script; It is recommended to load scripts in the footer. Please set this value to `true` to load it in the footer, or explicitly `false` if it should be loaded in the header.
External Connections
Potential connections found in static code analysis.
Outbound calls
23
External assets
0
Incoming endpoints
7
Notable Domains
mondula.com6 · outbound
fontawesome.io4 · outbound
google.com2 · outbound
jqueryui.com1 · outbound
stackoverflow.com1 · outbound
t1m0n.name1 · outbound
Platform / Reference Domains
wordpress.org7 · platform/reference
External Asset Domains
No external asset domains detected.
Incoming Endpoints
wp_ajax_nopriv_fw_delete_filespublic
wp_ajax
wp_ajax_nopriv_fw_send_emailpublic
wp_ajax
wp_ajax_nopriv_fw_upload_filepublic
wp_ajax
Admin AJAX endpoints4
wp_ajax_fw_delete_filesauthenticated
wp_ajax
wp_ajax_fw_send_emailauthenticated
wp_ajax
wp_ajax_fw_upload_fileauthenticated
wp_ajax
wp_ajax_fw_wizard_saveauthenticated
wp_ajax
Score History
2 score snapshots
v1.7.28
34
Latest
- Findings
- 416
- Errors
- 277
- Warnings
- 139
- Check
- 2.0.0
v1.7.27
34
Score
- Findings
- 413
- Errors
- 277
- Warnings
- 136
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 34 | 416 | 277 | 139 | v1.7.28 | 2.0.0 |
| 34 | 413 | 277 | 136 | v1.7.27 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Plugin
Author
Issue
Domain
Related
Classic Editor63 scoreWooCommerce21 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreAkismet Anti-spam: Spam Protection35 scoreAll-in-One WP Migration and Backup34 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreDuplicate Page40 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreWordPress Importer25 scoreWPForms – AI Form Builder for WordPress – Contact Forms, Payment Forms, Survey Form, Quiz & More31 scoreFluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder23 scoreForminator Forms – Contact Form, Payment Form & Custom Form Builder24 scoreMetForm – Contact Form, Survey, Quiz, & Custom Form Builder for Elementor28 score
Plugin
Author
Issue
Domain
Related
Classic Editor63 scoreWooCommerce21 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreAkismet Anti-spam: Spam Protection35 scoreAll-in-One WP Migration and Backup34 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreDuplicate Page40 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreWordPress Importer25 scoreWPForms – AI Form Builder for WordPress – Contact Forms, Payment Forms, Survey Form, Quiz & More31 scoreFluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder23 scoreForminator Forms – Contact Form, Payment Form & Custom Form Builder24 scoreMetForm – Contact Form, Survey, Quiz, & Custom Form Builder for Elementor28 score
Related Plugins
Crowdsignal Forms
200k+ active installs
100
100
LeadConnector
20k+ active installs
100
WS Form LITE – Drag & Drop Contact Form Builder
10k+ active installs
100
Email Marketing for WordPress and WooCommerce – Retainful
500 active installs
100
99