Pods Gravity Forms Add-On

Integrate with Gravity Forms to create a Pod item from a form submission.

v1.6.0Jory HogeveenUpdated Added 1k+ installs100% rating
43
Score
0
Errors
79
Warnings
+0
Change

Category Scores

Security0
Repo100
Performance100
Maintainability89

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

79 findings

Security

58

7 issue groups

Maintainability

21

5 issue groups

WARNINGSecurityMissing nonce verificationProcessing form data without nonce verification.19
Category
Security
Occurrences
19
Severity
warning

Sample message

Processing form data without nonce verification.

WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_GET[$gf_field->inputName]9
Category
Security
Occurrences
9
Severity
warning

Sample message

Detected usage of a non-sanitized input variable: $_GET[$gf_field->inputName]

WARNINGSecurityRequest data is not unslashed$_GET[$gf_field->inputName] not unslashed before sanitization. Use wp_unslash() or similar9
Category
Security
Occurrences
9
Severity
warning

Sample message

$_GET[$gf_field->inputName] not unslashed before sanitization. Use wp_unslash() or similar

WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.8
Category
Security
Occurrences
8
Severity
warning

Sample message

Processing form data without nonce verification.

WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.5
Category
Maintainability
Occurrences
5
Severity
warning

Sample message

Use of a direct database call is discouraged.

WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().5
Category
Maintainability
Occurrences
5
Severity
warning

Sample message

Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().

WARNINGMaintainabilityNon-prefixed hook nameHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "'gform_confirmation_anchor_' . $form['id']".5
Category
Maintainability
Occurrences
5
Severity
warning

Sample message

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "'gform_confirmation_anchor_' . $form['id']".

WARNINGSecurityInput is not validatedDetected usage of a possibly undefined superglobal array index: $_SERVER['HTTP_HOST']. Check that the array index exists before using it.5
Category
Security
Occurrences
5
Severity
warning

Sample message

Detected usage of a possibly undefined superglobal array index: $_SERVER['HTTP_HOST']. Check that the array index exists before using it.

WARNINGSecurityDatabase parameter is not escapedUnescaped parameter $blacklist_where used in $wpdb->get_col()\n$blacklist_where assigned unsafely at line 602.4
Category
Security
Occurrences
4
Severity
warning

Sample message

Unescaped parameter $blacklist_where used in $wpdb->get_col()\n$blacklist_where assigned unsafely at line 602.

WARNINGSecurityInterpolated SQL is not preparedUse placeholders and $wpdb->prepare(); found interpolated variable {$gf_meta_table} at "SELECT meta_key, meta_value FROM {$gf_meta_table} WHERE {$lead_id_column_name} = %d"4
Category
Security
Occurrences
4
Severity
warning

Sample message

Use placeholders and $wpdb->prepare(); found interpolated variable {$gf_meta_table} at "SELECT meta_key, meta_value FROM {$gf_meta_table} WHERE {$lead_id_column_name} = %d"

Show 2 more
WARNINGMaintainabilityerror log var dump4
Category
Maintainability
Occurrences
4
Severity
warning

Sample message

var_dump() found. Debug code should not normally be used in production.

WARNINGMaintainabilityNon-prefixed global variable2
Category
Maintainability
Occurrences
2
Severity
warning

Sample message

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$_gform_lead_meta".

External Connections

Potential connections found in static code analysis.

10 domains

Outbound calls

17

External assets

0

Incoming endpoints

2

Notable Domains

pods.io3 · outbound
mysite.com2 · outbound
php-fig.org2 · outbound
erusev.com1 · outbound
getcomposer.org1 · outbound
gravityforms.com1 · outbound

Platform / Reference Domains

github.com3 · platform/reference
gnu.org2 · platform/reference
w3.org1 · platform/reference

External Asset Domains

No external asset domains detected.

Incoming Endpoints

wp_ajax_nopriv_pods_gf_save_for_laterpublic

wp_ajax

Admin AJAX endpoints1
wp_ajax_pods_gf_save_for_laterauthenticated

wp_ajax

Score History

First score snapshot

v1.6.0

43

Latest

Findings
79
Errors
0
Warnings
79
Check
2.0.0

Relationship Map

Author, categories, issues, domains, and nearby plugins.

34 nodes

Related Plugins