PluginScore

Quform Zapier

Easily integrate Zapier with Quform forms.

v1.1.1ThemeCatcherUpdated Added 1k+ installs100% rating
form builderformsquformzapier
39
Score
60
Errors
123
Warnings
+0
Change

Category Scores

Security0
Repo89
Performance100
Maintainability80

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

183 findings

Security

138

12 issue groups

Maintainability

43

6 issue groups

Repo Compliance

2

2 issue groups

WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.40
Category
Security
Occurrences
40
Severity
warning

Sample message

Processing form data without nonce verification.

WordPress.Security.NonceVerification.Recommended
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$checked'.24
Category
Security
Occurrences
24
Severity
error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$checked'.

WordPress.Security.EscapeOutput.OutputNotEscapedReference
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_GET['ids']15
Category
Security
Occurrences
15
Severity
warning

Sample message

Detected usage of a non-sanitized input variable: $_GET['ids']

WordPress.Security.ValidatedSanitizedInput.InputNotSanitized
ERRORSecuritySQL query is not preparedUse placeholders and $wpdb->prepare(); found $query14
Category
Security
Occurrences
14
Severity
error

Sample message

Use placeholders and $wpdb->prepare(); found $query

WordPress.DB.PreparedSQL.NotPrepared
WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.13
Category
Maintainability
Occurrences
13
Severity
warning

Sample message

Use of a direct database call is discouraged.

WordPress.DB.DirectDatabaseQuery.DirectQuery
WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().12
Category
Maintainability
Occurrences
12
Severity
warning

Sample message

Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().

WordPress.DB.DirectDatabaseQuery.NoCaching
WARNINGSecurityMissing nonce verificationProcessing form data without nonce verification.12
Category
Security
Occurrences
12
Severity
warning

Sample message

Processing form data without nonce verification.

WordPress.Security.NonceVerification.Missing
WARNINGSecurityInput is not validatedDetected usage of a possibly undefined superglobal array index: $_POST['form_id']. Check that the array index exists before using it.10
Category
Security
Occurrences
10
Severity
warning

Sample message

Detected usage of a possibly undefined superglobal array index: $_POST['form_id']. Check that the array index exists before using it.

WordPress.Security.ValidatedSanitizedInput.InputNotValidated
WARNINGSecurityRequest data is not unslashed$_GET['ids'] not unslashed before sanitization. Use wp_unslash() or similar9
Category
Security
Occurrences
9
Severity
warning

Sample message

$_GET['ids'] not unslashed before sanitization. Use wp_unslash() or similar

WordPress.Security.ValidatedSanitizedInput.MissingUnslash
ERRORSecurityDatabase parameter is not escapedUnescaped parameter $query used in $wpdb->get_results()\n$query assigned unsafely at line 358.8
Category
Security
Occurrences
8
Severity
error

Sample message

Unescaped parameter $query used in $wpdb->get_results()\n$query assigned unsafely at line 358.

PluginCheck.Security.DirectDB.UnescapedDBParameter
Show 10 more
WARNINGMaintainabilityNon-prefixed global variable8
Category
Maintainability
Occurrences
8
Severity
warning

Sample message

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$cap".

WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedVariableFound
ERRORMaintainabilityMissing direct file access protection8
Category
Maintainability
Occurrences
8
Severity
error

Sample message

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

missing_direct_file_access_protectionReference
WARNINGSecurityDatabase parameter is not escaped2
Category
Security
Occurrences
2
Severity
warning

Sample message

Unescaped parameter $this used in $wpdb->query()

PluginCheck.Security.DirectDB.UnescapedDBParameter
ERRORSecurityQuoted Simple Placeholder2
Category
Security
Occurrences
2
Severity
error

Sample message

Simple placeholders should not be quoted in the query string in $wpdb->prepare(). Found: '%s'.

WordPress.DB.PreparedSQLPlaceholders.QuotedSimplePlaceholder
WARNINGMaintainabilitySchema Change1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

Attempting a database schema change is discouraged.

WordPress.DB.DirectDatabaseQuery.SchemaChange
WARNINGSecurityInterpolated SQL is not prepared1
Category
Security
Occurrences
1
Severity
warning

Sample message

Use placeholders and $wpdb->prepare(); found interpolated variable $ids at " WHERE id IN ($ids)"

WordPress.DB.PreparedSQL.InterpolatedNotPrepared
ERRORSecurityException output is not escaped1
Category
Security
Occurrences
1
Severity
error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$page'.

WordPress.Security.EscapeOutput.ExceptionNotEscapedReference
ERRORMaintainabilitybadly named files1
Category
Maintainability
Occurrences
1
Severity
error

Sample message

File and folder names must not contain spaces or special characters.

badly_named_files
ERRORRepo Complianceoutdated tested upto header1
Category
Repo Compliance
Occurrences
1
Severity
error

Sample message

Tested up to: 6.9 < 7.0. The "Tested up to" value in your plugin is not set to the current version of WordPress. This means your plugin will not show up in searches, as we require plugins to be compatible and documented as tested up to the most recent version of WordPress.

outdated_tested_upto_headerReference
ERRORRepo Complianceplugin header no license1
Category
Repo Compliance
Occurrences
1
Severity
error

Sample message

Missing "License" in Plugin Header. Please update your Plugin Header with a valid GPLv2 (or later) compatible license.

plugin_header_no_licenseReference

External Connections

Potential connections found in static code analysis.

3 domains

Outbound calls

29

External assets

0

Incoming endpoints

7

Notable Domains

themecatcher.net27 · outbound
quform.com1 · outbound
support.themecatcher.net1 · outbound

External Asset Domains

No external asset domains detected.

Incoming Endpoints

No public endpoints detected.

Admin AJAX endpoints7
wp_ajax_quform_zapier_add_integrationauthenticated

wp_ajax

wp_ajax_quform_zapier_get_additional_field_elementsauthenticated

wp_ajax

wp_ajax_quform_zapier_get_logic_sourcesauthenticated

wp_ajax

wp_ajax_quform_zapier_save_integrationauthenticated

wp_ajax

wp_ajax_quform_zapier_save_integrations_table_settingsauthenticated

wp_ajax

wp_ajax_quform_zapier_save_settingsauthenticated

wp_ajax

wp_ajax_quform_zapier_uninstall_pluginauthenticated

wp_ajax

Score History

First score snapshot

v1.1.1

39

Latest

Findings
183
Errors
60
Warnings
123
Check
2.0.0

Relationship Map

Author, categories, issues, domains, and nearby plugins.

31 nodes

Related

Yoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce22 scoreAkismet Anti-spam: Spam Protection35 scoreAll-in-One WP Migration and Backup34 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder35 scoreClassic Editor63 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWPForms – AI Form Builder for WordPress – Contact Forms, Payment Forms, Survey Form, Quiz & More32 scoreFluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder22 scoreForminator Forms – Contact Form, Payment Form & Custom Form Builder24 scoreMetForm – Contact Form, Survey, Quiz, & Custom Form Builder for Elementor30 scoreNinja Forms – The Contact Form Builder That Grows With You23 scoreKirki – Freeform Page Builder, Website Builder & Customizer35 score

Related Plugins

Crowdsignal Forms

200k+ active installs

100
Email Marketing for WordPress and WooCommerce – Retainful

500 active installs

100
LeadConnector

20k+ active installs

100
NEX-Forms ADD ON – Super Select

1k+ active installs

100
Superb Addons: Blocks, Patterns, Pre-built Pages, Sliders, Popups, Free Forms, Animations & More

80k+ active installs

100
WS Form LITE – Drag & Drop Contact Form Builder

10k+ active installs

100