Build beautiful responsive forms for WordPress. Contact forms, surveys, quizzes, booking forms, payments, popups & more with NEX-Forms...
24
Score
1,950
Errors
1,112
Warnings
+0
Change
Category Scores
Security0
Repo94
Performance100
Maintainability0
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
I18n
1,706
1 issue group
Security
1,184
8 issue groups
Maintainability
156
16 issue groups
ERRORI18nText Domain MismatchMismatched text domain. Expected 'nex-forms-express-wp-form-builder' but got 'nex-forms'.1,706
- Category
- I18n
- Occurrences
- 1,706
- Severity
- error
Sample message
Mismatched text domain. Expected 'nex-forms-express-wp-form-builder' but got 'nex-forms'.
WARNINGSecurityRequest data is not unslashed$_GET['open_form'] not unslashed before sanitization. Use wp_unslash() or similar318
- Category
- Security
- Occurrences
- 318
- Severity
- warning
Sample message
$_GET['open_form'] not unslashed before sanitization. Use wp_unslash() or similar
WARNINGSecurityInput is not validatedDetected usage of a possibly undefined superglobal array index: $_FILES[$key]. Check that the array index exists before using it.288
- Category
- Security
- Occurrences
- 288
- Severity
- warning
Sample message
Detected usage of a possibly undefined superglobal array index: $_FILES[$key]. Check that the array index exists before using it.
WARNINGSecurityMissing nonce verificationProcessing form data without nonce verification.166
- Category
- Security
- Occurrences
- 166
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.153
- Category
- Security
- Occurrences
- 153
- Severity
- warning
Sample message
Processing form data without nonce verification.
ERRORSecuritySQL query is not preparedUse placeholders and $wpdb->prepare(); found !138
- Category
- Security
- Occurrences
- 138
- Severity
- error
Sample message
Use placeholders and $wpdb->prepare(); found !
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_FILES[$key]114
- Category
- Security
- Occurrences
- 114
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_FILES[$key]
ERRORMaintainabilitybadly named filesFile and folder names must not contain spaces or special characters.43
- Category
- Maintainability
- Occurrences
- 43
- Severity
- error
Sample message
File and folder names must not contain spaces or special characters.
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$api_params".25
- Category
- Maintainability
- Occurrences
- 25
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$api_params".
WARNINGMaintainabilityNon-prefixed functionFunctions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "add_nf_wf_notice_dismissible".19
- Category
- Maintainability
- Occurrences
- 19
- Severity
- warning
Sample message
Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "add_nf_wf_notice_dismissible".
Show 15 moreShow less
ERRORMaintainabilitydate date18
- Category
- Maintainability
- Occurrences
- 18
- Severity
- error
Sample message
date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.
ERRORMaintainabilitystrip tags strip tags18
- Category
- Maintainability
- Occurrences
- 18
- Severity
- error
Sample message
strip_tags() is discouraged. Use the more comprehensive wp_strip_all_tags() instead.
WARNINGMaintainabilityNon-prefixed class6
- Category
- Maintainability
- Occurrences
- 6
- Severity
- warning
Sample message
Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "CSVExport".
ERRORMaintainabilityunlink unlink5
- Category
- Maintainability
- Occurrences
- 5
- Severity
- error
Sample message
unlink() is discouraged. Use wp_delete_file() to delete a file.
WARNINGSecurityUnfinished Prepare4
- Category
- Security
- Occurrences
- 4
- Severity
- warning
Sample message
Replacement variables found, but no valid placeholders found in the query.
ERRORMaintainabilityrand rand4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- error
Sample message
rand() is discouraged. Use the far less predictable wp_rand() instead.
WARNINGMaintainabilityNon-prefixed constant3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "NF_PATH".
ERRORSecurityOutput is not escaped3
- Category
- Security
- Occurrences
- 3
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$array'.
ERRORMaintainabilityfile system operations fclose3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fclose().
WARNINGMaintainabilityDirect Error Reporting Call2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
Detected production-time change to PHP error reporting: error_reporting().
WARNINGMaintainabilityIni Directive Display errors2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
Detected production-time change to PHP error reporting: ini_set().
WARNINGMaintainabilityDiscouraged PHP function2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
The use of function ini_set() is discouraged
WARNINGMaintainabilityprevent path disclosure error reporting2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
error_reporting() can lead to full path disclosure.
ERRORMaintainabilityfile system operations fopen2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fopen().
ERRORMaintainabilityfile system operations fread2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fread().
External Connections
Potential connections found in static code analysis.
Outbound calls
224
External assets
10
Incoming endpoints
66
Notable Domains
fontawesome.com40 · outbound
gstatic.com10 · outbound
gstatic.cn9 · outbound
basix.ticksy.com7 · outbound
momentjs.com6 · outbound
jqueryui.com4 · outbound
Platform / Reference Domains
External Asset Domains
basixonline.net113 · asset + outbound
fonts.googleapis.com2 · asset
assets.banners.envato-static.com1 · asset
cdnjs.cloudflare.com1 · asset
maxcdn.bootstrapcdn.com1 · asset
use.fontawesome.com1 · asset
Incoming Endpoints
wp_ajax_nopriv_nf_add_form_interactionpublic
wp_ajax
wp_ajax_nopriv_nf_add_form_viewpublic
wp_ajax
wp_ajax_nopriv_nf_print_report_to_pdfpublic
wp_ajax
wp_ajax_nopriv_nf_print_to_pdfpublic
wp_ajax
wp_ajax_nopriv_nf_resend_emailpublic
wp_ajax
wp_ajax_nopriv_nf_send_nf_emailpublic
wp_ajax
Admin AJAX endpoints59
wp_ajax_dismiss_nf_free_add_on_noticeauthenticated
wp_ajax
wp_ajax_dismiss_nf_noticeauthenticated
wp_ajax
wp_ajax_do_form_entry_saveauthenticated
wp_ajax
wp_ajax_do_form_importauthenticated
wp_ajax
wp_ajax_do_upload_imageauthenticated
wp_ajax
wp_ajax_get_c_logic_uiauthenticated
wp_ajax
wp_ajax_get_dataauthenticated
wp_ajax
wp_ajax_get_table_recordsauthenticated
wp_ajax
wp_ajax_load_templateauthenticated
wp_ajax
wp_ajax_nexforms_get_add_on_statsauthenticated
wp_ajax
wp_ajax_nexforms_install_addonauthenticated
wp_ajax
wp_ajax_nf_add_form_interactionauthenticated
wp_ajax
47 more hidden
Score History
6 score snapshots
v9.3.2
24
Latest
- Findings
- 3,062
- Errors
- 1,950
- Warnings
- 1,112
- Check
- 2.1.0
v9.3.1
24
Score
- Findings
- 3,124
- Errors
- 1,971
- Warnings
- 1,153
- Check
- 2.1.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 24 | 3,062 | 1,950 | 1,112 | v9.3.2 | 2.1.0 |
| 24 | 3,124 | 1,971 | 1,153 | v9.3.1 | 2.1.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Author
Category
Issue
Domain
Related
NEX-Forms ADD ON – Super Select100 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreClassic Editor63 scoreWooCommerce22 scoreAll-in-One WP Migration and Backup34 scoreJetpack – WP Security, Backup, Speed, & Growth22 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreAdvanced Custom Fields (ACF®)23 scoreWPForms – AI Form Builder for WordPress – Contact Forms, Payment Forms, Survey Form, Quiz & More29 scoreFluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder26 scoreForminator Forms – Contact Form, Payment Form & Custom Form Builder24 scoreMetForm – Contact Form, Survey, Quiz, Conditional Forms, Form Templates & Custom Form Builder for Elementor29 score
Author
Category
Issue
Domain
Related
NEX-Forms ADD ON – Super Select100 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreClassic Editor63 scoreWooCommerce22 scoreAll-in-One WP Migration and Backup34 scoreJetpack – WP Security, Backup, Speed, & Growth22 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreAdvanced Custom Fields (ACF®)23 scoreWPForms – AI Form Builder for WordPress – Contact Forms, Payment Forms, Survey Form, Quiz & More29 scoreFluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder26 scoreForminator Forms – Contact Form, Payment Form & Custom Form Builder24 scoreMetForm – Contact Form, Survey, Quiz, Conditional Forms, Form Templates & Custom Form Builder for Elementor29 score
Related Plugins
Crowdsignal Forms
200k+ active installs
100
100
Ultra Addons for Contact Form 7
60k+ active installs
100
100
WS Form LITE – Drag & Drop Contact Form Builder
10k+ active installs
100
NEX-Forms ADD ON – Super Select
1k+ active installs
100