Adds Google reCAPTCHA v3 to Jetpack contact forms, comments, and WooCommerce registration to prevent spam, with stats and spam folder handling.
69
Score
2
Errors
40
Warnings
+0
Change
Category Scores
Security47
Repo100
Performance100
Maintainability92
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Security
25
4 issue groups
Maintainability
15
3 issue groups
I18n
2
1 issue group
WARNINGSecurityMissing nonce verificationProcessing form data without nonce verification.16
- Category
- Security
- Occurrences
- 16
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGMaintainabilityerror log error logerror_log() found. Debug code should not normally be used in production.10
- Category
- Maintainability
- Occurrences
- 10
- Severity
- warning
Sample message
error_log() found. Debug code should not normally be used in production.
WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.6
- Category
- Security
- Occurrences
- 6
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGMaintainabilityupgrade notice limitThe upgrade notice for "1.16" exceeds the limit of 300 characters.3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
The upgrade notice for "1.16" exceeds the limit of 300 characters.
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$site_id".2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$site_id".
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_SERVER['HTTP_CF_CONNECTING_IP']2
- Category
- Security
- Occurrences
- 2
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_SERVER['HTTP_CF_CONNECTING_IP']
ERRORI18nMissing Translators CommentA function call to esc_html__() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.2
- Category
- I18n
- Occurrences
- 2
- Severity
- error
Sample message
A function call to esc_html__() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.
WARNINGSecuritywp redirect wp redirectwp_redirect() found. Using wp_safe_redirect(), along with the "allowed_redirect_hosts" filter if needed, can help avoid any chances of malicious redirects within code. It is also important to remember to call exit() after a redirect so that no other unwanted code is executed.1
- Category
- Security
- Occurrences
- 1
- Severity
- warning
Sample message
wp_redirect() found. Using wp_safe_redirect(), along with the "allowed_redirect_hosts" filter if needed, can help avoid any chances of malicious redirects within code. It is also important to remember to call exit() after a redirect so that no other unwanted code is executed.
External Connections
Potential connections found in static code analysis.
Outbound calls
22
External assets
1
Incoming endpoints
1
Notable Domains
schwarttzy.com10 · outbound
developers.google.com2 · outbound
Platform / Reference Domains
wordpress.org3 · platform/reference
gnu.org1 · platform/reference
External Asset Domains
google.com7 · asset + outbound
Incoming Endpoints
No public endpoints detected.
Admin AJAX endpoints1
admin_post_recaptchaforjetpack_clear_logauthenticated
admin_post
Score History
First score snapshot
v1.24
69
Latest
- Findings
- 42
- Errors
- 2
- Warnings
- 40
- Check
- 2.1.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 69 | 42 | 2 | 40 | v1.24 | 2.1.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Author
Issue
Related
Akismet Anti-spam: Spam Protection35 scoreContact Form 769 scoreWooCommerce22 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreElementor Website Builder – more than just a page builder39 scoreAll-in-One WP Migration and Backup34 scoreHostinger Tools82 scoreWPForms – AI Form Builder for WordPress – Contact Forms, Payment Forms, Survey Form, Quiz & More29 scoreFluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder26 scoreForminator Forms – Contact Form, Payment Form & Custom Form Builder24 scoreNinja Forms – The Contact Form Builder That Grows With You24 scoreInvisible reCaptcha100 scoreUltra Addons for Contact Form 7100 score
Author
Issue
Related
Akismet Anti-spam: Spam Protection35 scoreContact Form 769 scoreWooCommerce22 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreElementor Website Builder – more than just a page builder39 scoreAll-in-One WP Migration and Backup34 scoreHostinger Tools82 scoreWPForms – AI Form Builder for WordPress – Contact Forms, Payment Forms, Survey Form, Quiz & More29 scoreFluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder26 scoreForminator Forms – Contact Form, Payment Form & Custom Form Builder24 scoreNinja Forms – The Contact Form Builder That Grows With You24 scoreInvisible reCaptcha100 scoreUltra Addons for Contact Form 7100 score
Related Plugins
Invisible reCaptcha
80k+ active installs
100
Ultra Addons for Contact Form 7
60k+ active installs
100
WS Form LITE – Drag & Drop Contact Form Builder
10k+ active installs
100
Login Security Captcha
10k+ active installs
100
Stop WP Emails Going to Spam
10k+ active installs
100
Simply Disable Comments
7k+ active installs
100