Quill Forms - Conversational WordPress Form Builder
21
Score
401
Errors
369
Warnings
+1
Change
Category Scores
Security0
Repo70
Performance100
Maintainability0
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Maintainability
324
15 issue groups
I18n
217
1 issue group
Security
201
8 issue groups
Supply Chain
6
1 issue group
ERRORI18nText Domain MismatchMismatched text domain. Expected 'quillforms' but got 'action-scheduler'.217
- Category
- I18n
- Occurrences
- 217
- Severity
- error
Sample message
Mismatched text domain. Expected 'quillforms' but got 'action-scheduler'.
ERRORSecurityException output is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"The bulk action $action does not have a callback method"'.115
- Category
- Security
- Occurrences
- 115
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"The bulk action $action does not have a callback method"'.
WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.99
- Category
- Maintainability
- Occurrences
- 99
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().86
- Category
- Maintainability
- Occurrences
- 86
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
WARNINGSecurityDatabase parameter is not escapedUnescaped parameter $additional used in $wpdb->get_results()\n$additional assigned unsafely at line 602.28
- Category
- Security
- Occurrences
- 28
- Severity
- warning
Sample message
Unescaped parameter $additional used in $wpdb->get_results()\n$additional assigned unsafely at line 602.
ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;24
- Category
- Maintainability
- Occurrences
- 24
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
WARNINGMaintainabilityNon-prefixed classClasses declared by a theme/plugin should start with the theme/plugin prefix. Found: "BatchFetcher_Test".19
- Category
- Maintainability
- Occurrences
- 19
- Severity
- warning
Sample message
Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "BatchFetcher_Test".
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$api_key".18
- Category
- Maintainability
- Occurrences
- 18
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$api_key".
WARNINGSecurityRequest data is not unslashed$_GET['addon'] not unslashed before sanitization. Use wp_unslash() or similar18
- Category
- Security
- Occurrences
- 18
- Severity
- warning
Sample message
$_GET['addon'] not unslashed before sanitization. Use wp_unslash() or similar
ERRORMaintainabilityblock api version too lowEditor blocks must define "apiVersion" 3 or higher in block.json for WordPress 7.0+ iframe editor compatibility.15
- Category
- Maintainability
- Occurrences
- 15
- Severity
- error
Sample message
Editor blocks must define "apiVersion" 3 or higher in block.json for WordPress 7.0+ iframe editor compatibility.
Show 15 moreShow less
WARNINGMaintainabilityNon-prefixed function13
- Category
- Maintainability
- Occurrences
- 13
- Severity
- warning
Sample message
Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "as_enqueue_async_action".
WARNINGSecurityInput is not sanitized12
- Category
- Security
- Occurrences
- 12
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_GET['addon']
WARNINGMaintainabilityNon-prefixed hook name11
- Category
- Maintainability
- Occurrences
- 11
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "active_plugins".
WARNINGSecurityMissing nonce verification10
- Category
- Security
- Occurrences
- 10
- Severity
- warning
Sample message
Processing form data without nonce verification.
ERRORMaintainabilitywp function not compatible with requires wp10
- Category
- Maintainability
- Occurrences
- 10
- Severity
- error
Sample message
Function "rest_filter_response_by_context()" requires WordPress 5.5.0, but your plugin minimum supported version is WordPress 5.4.0.
WARNINGMaintainabilityDiscouraged PHP function8
- Category
- Maintainability
- Occurrences
- 8
- Severity
- warning
Sample message
The use of function ini_set() is discouraged
WARNINGSecurityInput is not validated8
- Category
- Security
- Occurrences
- 8
- Severity
- warning
Sample message
Detected usage of a possibly undefined superglobal array index: $_GET['addon']. Check that the array index exists before using it.
WARNINGSecurityInterpolated SQL is not prepared6
- Category
- Security
- Occurrences
- 6
- Severity
- warning
Sample message
Use placeholders and $wpdb->prepare(); found interpolated variable $entries_table at "SHOW TABLES LIKE '$entries_table'"
WARNINGMaintainabilityNon-prefixed constant6
- Category
- Maintainability
- Occurrences
- 6
- Severity
- warning
Sample message
Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "DONOTCACHCEOBJECT".
ERRORSupply ChainHidden files included6
- Category
- Supply Chain
- Occurrences
- 6
- Severity
- error
Sample message
Hidden files are not permitted.
WARNINGMaintainabilitySchema Change4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- warning
Sample message
Attempting a database schema change is discouraged.
WARNINGMaintainabilityDynamic hook name4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "$hook".
WARNINGSecurityNonce verification recommended4
- Category
- Security
- Occurrences
- 4
- Severity
- warning
Sample message
Processing form data without nonce verification.
ERRORMaintainabilityNon Enqueued Stylesheet4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- error
Sample message
Stylesheets must be registered/enqueued via wp_enqueue_style()
WARNINGMaintainabilityslow db query meta key3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
Detected usage of meta_key, possible slow query.
External Connections
Potential connections found in static code analysis.
Outbound calls
194
External assets
3
Incoming endpoints
18
Notable Domains
quillforms.com21 · outbound
tailwindcss.com13 · outbound
fb.me8 · outbound
fonts.googleapis.com8 · outbound
json-schema.org6 · outbound
php.net6 · outbound
Platform / Reference Domains
w3.org44 · platform/reference
github.com34 · platform/reference
wordpress.org6 · platform/reference
developer.wordpress.org4 · platform/reference
core.trac.wordpress.org3 · platform/reference
gnu.org2 · platform/reference
External Asset Domains
Incoming Endpoints
wp_ajax_nopriv_public
wp_ajax
wp_ajax_nopriv_quillforms_apply_discountpublic
wp_ajax
wp_ajax_nopriv_quillforms_complete_full_discounted_orderspublic
wp_ajax
wp_ajax_nopriv_quillforms_delete_couponpublic
wp_ajax
wp_ajax_nopriv_quillforms_form_submitpublic
wp_ajax
Admin AJAX endpoints13
wp_ajax_quillforms_activate_doublescaleauthenticated
wp_ajax
wp_ajax_quillforms_addon_activateauthenticated
wp_ajax
wp_ajax_quillforms_addon_ensure_activationauthenticated
wp_ajax
wp_ajax_quillforms_addon_installauthenticated
wp_ajax
wp_ajax_quillforms_apply_discountauthenticated
wp_ajax
wp_ajax_quillforms_complete_full_discounted_ordersauthenticated
wp_ajax
wp_ajax_quillforms_delete_couponauthenticated
wp_ajax
wp_ajax_quillforms_duplicate_formauthenticated
wp_ajax
wp_ajax_quillforms_form_submitauthenticated
wp_ajax
wp_ajax_quillforms_install_doublescaleauthenticated
wp_ajax
wp_ajax_quillforms_license_activateauthenticated
wp_ajax
wp_ajax_quillforms_license_deactivateauthenticated
wp_ajax
1 more hidden
Score History
2 score snapshots
v5.7.0
21
Latest
- Findings
- 770
- Errors
- 401
- Warnings
- 369
- Check
- 2.0.0
v5.6.1
20
Score
- Findings
- 769
- Errors
- 401
- Warnings
- 368
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 21 | 770 | 401 | 369 | v5.7.0 | 2.0.0 |
| 20 | 769 | 401 | 368 | v5.6.1 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Author
Issue
Domain
Related
Yoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreJetpack – WP Security, Backup, Speed, & Growth22 scoreLiteSpeed Cache35 scoreWooCommerce21 scoreWP Mail SMTP by WPForms – The Most Popular SMTP and Email Log Plugin30 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreWPForms – AI Form Builder for WordPress – Contact Forms, Payment Forms, Survey Form, Quiz & More31 scoreFluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder23 scoreForminator Forms – Contact Form, Payment Form & Custom Form Builder24 scoreNinja Forms – The Contact Form Builder That Grows With You24 scoreSureForms – Contact Form Builder, AI Forms, Payment Form, Survey & Quiz29 scoreCMB236 score
Author
Issue
Domain
Related
Yoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreJetpack – WP Security, Backup, Speed, & Growth22 scoreLiteSpeed Cache35 scoreWooCommerce21 scoreWP Mail SMTP by WPForms – The Most Popular SMTP and Email Log Plugin30 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreWPForms – AI Form Builder for WordPress – Contact Forms, Payment Forms, Survey Form, Quiz & More31 scoreFluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder23 scoreForminator Forms – Contact Form, Payment Form & Custom Form Builder24 scoreNinja Forms – The Contact Form Builder That Grows With You24 scoreSureForms – Contact Form Builder, AI Forms, Payment Form, Survey & Quiz29 scoreCMB236 score
Related Plugins
Crowdsignal Forms
200k+ active installs
100
100
LeadConnector
20k+ active installs
100
SurveyX Builder – Easy Feedback, Poll, Quiz & Survey
2k+ active installs
100
Email Marketing for WordPress and WooCommerce – Retainful
500 active installs
100
99