Build beautiful responsive forms for WordPress. Contact forms, surveys, quizzes, booking forms, payments, popups & more with NEX-Forms...
24
Score
1,972
Errors
1,192
Warnings
+0
Change
Category Scores
Security0
Repo94
Performance100
Maintainability0
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
I18n
1,725
1 issue group
Security
1,271
8 issue groups
Maintainability
156
16 issue groups
ERRORI18nText Domain MismatchMismatched text domain. Expected 'nex-forms-express-wp-form-builder' but got 'nex-forms'.1,725
- Category
- I18n
- Occurrences
- 1,725
- Severity
- error
Sample message
Mismatched text domain. Expected 'nex-forms-express-wp-form-builder' but got 'nex-forms'.
WARNINGSecurityRequest data is not unslashed$_GET['nf_entry_id'] not unslashed before sanitization. Use wp_unslash() or similar338
- Category
- Security
- Occurrences
- 338
- Severity
- warning
Sample message
$_GET['nf_entry_id'] not unslashed before sanitization. Use wp_unslash() or similar
WARNINGSecurityInput is not validatedDetected usage of a possibly undefined superglobal array index: $_FILES[$key]. Check that the array index exists before using it.299
- Category
- Security
- Occurrences
- 299
- Severity
- warning
Sample message
Detected usage of a possibly undefined superglobal array index: $_FILES[$key]. Check that the array index exists before using it.
WARNINGSecurityMissing nonce verificationProcessing form data without nonce verification.206
- Category
- Security
- Occurrences
- 206
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.159
- Category
- Security
- Occurrences
- 159
- Severity
- warning
Sample message
Processing form data without nonce verification.
ERRORSecuritySQL query is not preparedUse placeholders and $wpdb->prepare(); found !140
- Category
- Security
- Occurrences
- 140
- Severity
- error
Sample message
Use placeholders and $wpdb->prepare(); found !
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_FILES[$key]122
- Category
- Security
- Occurrences
- 122
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_FILES[$key]
ERRORMaintainabilitybadly named filesFile and folder names must not contain spaces or special characters.43
- Category
- Maintainability
- Occurrences
- 43
- Severity
- error
Sample message
File and folder names must not contain spaces or special characters.
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$api_params".25
- Category
- Maintainability
- Occurrences
- 25
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$api_params".
WARNINGMaintainabilityNon-prefixed functionFunctions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "add_nf_wf_notice_dismissible".19
- Category
- Maintainability
- Occurrences
- 19
- Severity
- warning
Sample message
Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "add_nf_wf_notice_dismissible".
Show 15 moreShow less
ERRORMaintainabilitydate date18
- Category
- Maintainability
- Occurrences
- 18
- Severity
- error
Sample message
date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.
ERRORMaintainabilitystrip tags strip tags18
- Category
- Maintainability
- Occurrences
- 18
- Severity
- error
Sample message
strip_tags() is discouraged. Use the more comprehensive wp_strip_all_tags() instead.
WARNINGMaintainabilityNon-prefixed class6
- Category
- Maintainability
- Occurrences
- 6
- Severity
- warning
Sample message
Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "CSVExport".
ERRORMaintainabilityunlink unlink5
- Category
- Maintainability
- Occurrences
- 5
- Severity
- error
Sample message
unlink() is discouraged. Use wp_delete_file() to delete a file.
WARNINGSecurityUnfinished Prepare4
- Category
- Security
- Occurrences
- 4
- Severity
- warning
Sample message
Replacement variables found, but no valid placeholders found in the query.
ERRORMaintainabilityrand rand4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- error
Sample message
rand() is discouraged. Use the far less predictable wp_rand() instead.
WARNINGMaintainabilityNon-prefixed constant3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "NF_PATH".
ERRORSecurityOutput is not escaped3
- Category
- Security
- Occurrences
- 3
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$array'.
ERRORMaintainabilityfile system operations fclose3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fclose().
WARNINGMaintainabilityDiscouraged PHP function2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
The use of function ini_set() is discouraged
WARNINGMaintainabilityprevent path disclosure error reporting2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
error_reporting() can lead to full path disclosure.
ERRORMaintainabilityfile system operations fopen2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fopen().
ERRORMaintainabilityfile system operations fread2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fread().
ERRORMaintainabilitylibrary core files2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
Library files that are already in the WordPress core are not permitted.
WARNINGMaintainabilitytrademarked term2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
The plugin name includes a restricted term. Your chosen plugin name - "NEX-Forms - Ultimate Forms Plugin for WordPress" - contains the restricted term "plugin" which cannot be used at all in your plugin name.
External Connections
Potential connections found in static code analysis.
Outbound calls
224
External assets
10
Incoming endpoints
66
Notable Domains
fontawesome.com40 · outbound
gstatic.com10 · outbound
gstatic.cn9 · outbound
basix.ticksy.com7 · outbound
momentjs.com6 · outbound
jqueryui.com4 · outbound
Platform / Reference Domains
External Asset Domains
basixonline.net113 · asset + outbound
fonts.googleapis.com2 · asset
assets.banners.envato-static.com1 · asset
cdnjs.cloudflare.com1 · asset
maxcdn.bootstrapcdn.com1 · asset
use.fontawesome.com1 · asset
Incoming Endpoints
wp_ajax_nopriv_nf_add_form_interactionpublic
wp_ajax
wp_ajax_nopriv_nf_add_form_viewpublic
wp_ajax
wp_ajax_nopriv_nf_print_report_to_pdfpublic
wp_ajax
wp_ajax_nopriv_nf_print_to_pdfpublic
wp_ajax
wp_ajax_nopriv_nf_resend_emailpublic
wp_ajax
wp_ajax_nopriv_nf_send_nf_emailpublic
wp_ajax
Admin AJAX endpoints59
wp_ajax_dismiss_nf_free_add_on_noticeauthenticated
wp_ajax
wp_ajax_dismiss_nf_noticeauthenticated
wp_ajax
wp_ajax_do_form_entry_saveauthenticated
wp_ajax
wp_ajax_do_form_importauthenticated
wp_ajax
wp_ajax_do_upload_imageauthenticated
wp_ajax
wp_ajax_get_c_logic_uiauthenticated
wp_ajax
wp_ajax_get_dataauthenticated
wp_ajax
wp_ajax_get_table_recordsauthenticated
wp_ajax
wp_ajax_load_templateauthenticated
wp_ajax
wp_ajax_nexforms_get_add_on_statsauthenticated
wp_ajax
wp_ajax_nexforms_install_addonauthenticated
wp_ajax
wp_ajax_nf_add_form_interactionauthenticated
wp_ajax
47 more hidden
Score History
3 score snapshots
v9.2.4
24
Latest
- Findings
- 3,164
- Errors
- 1,972
- Warnings
- 1,192
- Check
- 2.0.0
v9.2.3
24
Score
- Findings
- 3,203
- Errors
- 2,008
- Warnings
- 1,195
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 24 | 3,164 | 1,972 | 1,192 | v9.2.4 | 2.0.0 |
| 24 | 3,203 | 2,008 | 1,195 | v9.2.3 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Author
Category
Issue
Domain
Related
NEX-Forms ADD ON – Super Select100 scoreNEX-Forms ADD ON – Form Themes99 scoreNEX-Forms ADD ON – Digital Signatures99 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreClassic Editor63 scoreLiteSpeed Cache35 scoreWooCommerce21 scoreAll-in-One WP Migration and Backup34 scoreJetpack – WP Security, Backup, Speed, & Growth22 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreWPForms – AI Form Builder for WordPress – Contact Forms, Payment Forms, Survey Form, Quiz & More31 scoreFluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder23 score
Author
Category
Issue
Domain
Related
NEX-Forms ADD ON – Super Select100 scoreNEX-Forms ADD ON – Form Themes99 scoreNEX-Forms ADD ON – Digital Signatures99 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreClassic Editor63 scoreLiteSpeed Cache35 scoreWooCommerce21 scoreAll-in-One WP Migration and Backup34 scoreJetpack – WP Security, Backup, Speed, & Growth22 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreWPForms – AI Form Builder for WordPress – Contact Forms, Payment Forms, Survey Form, Quiz & More31 scoreFluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder23 score
Related Plugins
NEX-Forms ADD ON – Super Select
1k+ active installs
100
Contact Forms by Cimatti
600 active installs
100
99
NEX-Forms ADD ON – Form Themes
1k+ active installs
99
NEX-Forms ADD ON – Digital Signatures
600 active installs
99
98