PluginScore

Quform Mailchimp

Easily add contacts to Mailchimp from Quform forms.

v1.3.1ThemeCatcherUpdated Added 800 installs100% rating
Email Marketingform builderformsmailchimpquform
39
Score
65
Errors
147
Warnings
+0
Change

Category Scores

Security0
Repo86
Performance100
Maintainability79

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

212 findings

Security

165

12 issue groups

Maintainability

44

6 issue groups

Repo Compliance

3

3 issue groups

WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.40
Category
Security
Occurrences
40
Severity
warning

Sample message

Processing form data without nonce verification.

WordPress.Security.NonceVerification.Recommended
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$checked'.27
Category
Security
Occurrences
27
Severity
error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$checked'.

WordPress.Security.EscapeOutput.OutputNotEscapedReference
WARNINGSecurityMissing nonce verificationProcessing form data without nonce verification.22
Category
Security
Occurrences
22
Severity
warning

Sample message

Processing form data without nonce verification.

WordPress.Security.NonceVerification.Missing
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_GET['ids']18
Category
Security
Occurrences
18
Severity
warning

Sample message

Detected usage of a non-sanitized input variable: $_GET['ids']

WordPress.Security.ValidatedSanitizedInput.InputNotSanitized
WARNINGSecurityRequest data is not unslashed$_GET['ids'] not unslashed before sanitization. Use wp_unslash() or similar15
Category
Security
Occurrences
15
Severity
warning

Sample message

$_GET['ids'] not unslashed before sanitization. Use wp_unslash() or similar

WordPress.Security.ValidatedSanitizedInput.MissingUnslash
ERRORSecuritySQL query is not preparedUse placeholders and $wpdb->prepare(); found $query14
Category
Security
Occurrences
14
Severity
error

Sample message

Use placeholders and $wpdb->prepare(); found $query

WordPress.DB.PreparedSQL.NotPrepared
WARNINGSecurityInput is not validatedDetected usage of a possibly undefined superglobal array index: $_POST['api_key']. Check that the array index exists before using it.14
Category
Security
Occurrences
14
Severity
warning

Sample message

Detected usage of a possibly undefined superglobal array index: $_POST['api_key']. Check that the array index exists before using it.

WordPress.Security.ValidatedSanitizedInput.InputNotValidated
WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.13
Category
Maintainability
Occurrences
13
Severity
warning

Sample message

Use of a direct database call is discouraged.

WordPress.DB.DirectDatabaseQuery.DirectQuery
WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().12
Category
Maintainability
Occurrences
12
Severity
warning

Sample message

Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().

WordPress.DB.DirectDatabaseQuery.NoCaching
ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;9
Category
Maintainability
Occurrences
9
Severity
error

Sample message

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

missing_direct_file_access_protectionReference
Show 11 more
ERRORSecurityDatabase parameter is not escaped8
Category
Security
Occurrences
8
Severity
error

Sample message

Unescaped parameter $query used in $wpdb->get_results()\n$query assigned unsafely at line 375.

PluginCheck.Security.DirectDB.UnescapedDBParameter
WARNINGMaintainabilityNon-prefixed global variable8
Category
Maintainability
Occurrences
8
Severity
warning

Sample message

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$cap".

WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedVariableFound
ERRORSecurityQuoted Simple Placeholder3
Category
Security
Occurrences
3
Severity
error

Sample message

Simple placeholders should not be quoted in the query string in $wpdb->prepare(). Found: '%s'.

WordPress.DB.PreparedSQLPlaceholders.QuotedSimplePlaceholder
WARNINGSecurityDatabase parameter is not escaped2
Category
Security
Occurrences
2
Severity
warning

Sample message

Unescaped parameter $this used in $wpdb->query()

PluginCheck.Security.DirectDB.UnescapedDBParameter
WARNINGMaintainabilitySchema Change1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

Attempting a database schema change is discouraged.

WordPress.DB.DirectDatabaseQuery.SchemaChange
WARNINGSecurityInterpolated SQL is not prepared1
Category
Security
Occurrences
1
Severity
warning

Sample message

Use placeholders and $wpdb->prepare(); found interpolated variable $ids at " WHERE id IN ($ids)"

WordPress.DB.PreparedSQL.InterpolatedNotPrepared
ERRORSecurityException output is not escaped1
Category
Security
Occurrences
1
Severity
error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$page'.

WordPress.Security.EscapeOutput.ExceptionNotEscapedReference
ERRORMaintainabilitybadly named files1
Category
Maintainability
Occurrences
1
Severity
error

Sample message

File and folder names must not contain spaces or special characters.

badly_named_files
ERRORRepo Complianceoutdated tested upto header1
Category
Repo Compliance
Occurrences
1
Severity
error

Sample message

Tested up to: 6.9 < 7.0. The "Tested up to" value in your plugin is not set to the current version of WordPress. This means your plugin will not show up in searches, as we require plugins to be compatible and documented as tested up to the most recent version of WordPress.

outdated_tested_upto_headerReference
ERRORRepo Complianceplugin header no license1
Category
Repo Compliance
Occurrences
1
Severity
error

Sample message

Missing "License" in Plugin Header. Please update your Plugin Header with a valid GPLv2 (or later) compatible license.

plugin_header_no_licenseReference
WARNINGRepo Compliancereadme parser warnings too many tags1
Category
Repo Compliance
Occurrences
1
Severity
warning

Sample message

One or more tags were ignored. Please limit your plugin to 5 tags.

readme_parser_warnings_too_many_tags

External Connections

Potential connections found in static code analysis.

4 domains

Outbound calls

31

External assets

0

Incoming endpoints

11

Notable Domains

themecatcher.net28 · outbound
admin.mailchimp.com1 · outbound
quform.com1 · outbound
support.themecatcher.net1 · outbound

External Asset Domains

No external asset domains detected.

Incoming Endpoints

No public endpoints detected.

Admin AJAX endpoints11
wp_ajax_quform_mc_add_integrationauthenticated

wp_ajax

wp_ajax_quform_mc_get_form_email_elementsauthenticated

wp_ajax

wp_ajax_quform_mc_get_groupsauthenticated

wp_ajax

wp_ajax_quform_mc_get_listsauthenticated

wp_ajax

wp_ajax_quform_mc_get_logic_sourcesauthenticated

wp_ajax

wp_ajax_quform_mc_get_merge_fieldsauthenticated

wp_ajax

wp_ajax_quform_mc_save_integrationauthenticated

wp_ajax

wp_ajax_quform_mc_save_integrations_table_settingsauthenticated

wp_ajax

wp_ajax_quform_mc_save_settingsauthenticated

wp_ajax

wp_ajax_quform_mc_uninstall_pluginauthenticated

wp_ajax

wp_ajax_quform_mc_verify_api_keyauthenticated

wp_ajax

Score History

First score snapshot

v1.3.1

39

Latest

Findings
212
Errors
65
Warnings
147
Check
2.0.0

Relationship Map

Author, categories, issues, domains, and nearby plugins.

33 nodes

Related

Yoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce22 scoreAkismet Anti-spam: Spam Protection35 scoreAll-in-One WP Migration and Backup34 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder35 scoreClassic Editor63 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWPForms – AI Form Builder for WordPress – Contact Forms, Payment Forms, Survey Form, Quiz & More32 scoreHostinger Reach – AI-Powered Email Marketing for WordPress40 scoreMC4WP: Mailchimp for WordPress57 scoreFluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder22 scoreForminator Forms – Contact Form, Payment Form & Custom Form Builder24 scoreMetForm – Contact Form, Survey, Quiz, & Custom Form Builder for Elementor30 score

Related Plugins

Block for Mailchimp – Add Email Subscription Forms and Collect Leads

2k+ active installs

100
Crowdsignal Forms

200k+ active installs

100
Email Marketing for WordPress and WooCommerce – Retainful

500 active installs

100
GetResponse Official

4k+ active installs

100
LeadConnector

20k+ active installs

100
NEX-Forms ADD ON – Super Select

1k+ active installs

100