Add-on for Contact Form 7 plugin. Add your own mail-tag to display the serial number.
39
Score
105
Errors
53
Warnings
+0
Change
Category Scores
Security0
Repo86
Performance100
Maintainability81
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
I18n
77
3 issue groups
Security
40
8 issue groups
Maintainability
38
6 issue groups
Repo Compliance
3
3 issue groups
ERRORI18nNon Singular String Literal DomainThe $domain parameter must be a single text string literal. Found: _TEXT_DOMAIN72
- Category
- I18n
- Occurrences
- 72
- Severity
- error
Sample message
The $domain parameter must be a single text string literal. Found: _TEXT_DOMAIN
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$_NT_WPCF7SN".31
- Category
- Maintainability
- Occurrences
- 31
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$_NT_WPCF7SN".
ERRORSecurityUnsafe printing functionAll output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.22
- Category
- Security
- Occurrences
- 22
- Severity
- error
Sample message
All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.
WARNINGSecurityMissing nonce verificationProcessing form data without nonce verification.4
- Category
- Security
- Occurrences
- 4
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.4
- Category
- Security
- Occurrences
- 4
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_GET['page']3
- Category
- Security
- Occurrences
- 3
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_GET['page']
WARNINGSecurityRequest data is not unslashed$_GET['page'] not unslashed before sanitization. Use wp_unslash() or similar3
- Category
- Security
- Occurrences
- 3
- Severity
- warning
Sample message
$_GET['page'] not unslashed before sanitization. Use wp_unslash() or similar
ERRORI18nNon Singular String Literal TextThe $text parameter must be a single text string literal. Found: ''\n . 'Serial Number for Contact Form 7 %1$s requires WordPress %2$s or higher.'\n . ' Please <a href="%3$s">update WordPress</a> first.'3
- Category
- I18n
- Occurrences
- 3
- Severity
- error
Sample message
The $text parameter must be a single text string literal. Found: ''\n . 'Serial Number for Contact Form 7 %1$s requires WordPress %2$s or higher.'\n . ' Please <a href="%3$s">update WordPress</a> first.'
WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
Show 10 moreShow less
ERRORSecuritySQL query is not prepared2
- Category
- Security
- Occurrences
- 2
- Severity
- error
Sample message
Use placeholders and $wpdb->prepare(); found $pattern
ERRORI18nMissing Arg Domain2
- Category
- I18n
- Occurrences
- 2
- Severity
- error
Sample message
Missing $domain parameter in function call to __().
ERRORSecurityDatabase parameter is not escaped1
- Category
- Security
- Occurrences
- 1
- Severity
- error
Sample message
Unescaped parameter $pattern used in $wpdb->get_results()\n$pattern used without escaping.
WARNINGMaintainabilityNon-prefixed class1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "App_Prefix_Admin_Menu".
WARNINGMaintainabilityNon-prefixed hook name1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "nt_wpcf7sn_check_reset_count".
WARNINGSecurityInput is not validated1
- Category
- Security
- Occurrences
- 1
- Severity
- warning
Sample message
Detected usage of a possibly undefined superglobal array index: $_POST[$option_name]. Check that the array index exists before using it.
ERRORMaintainabilityrand mt rand1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
mt_rand() is discouraged. Use the far less predictable wp_rand() instead.
ERRORRepo Complianceinvalid license1
- Category
- Repo Compliance
- Occurrences
- 1
- Severity
- error
Sample message
Your plugin has an invalid license declared. Please update your readme with a valid SPDX license identifier.
ERRORRepo Complianceoutdated tested upto header1
- Category
- Repo Compliance
- Occurrences
- 1
- Severity
- error
Sample message
Tested up to: 6.2 < 7.0. The "Tested up to" value in your plugin is not set to the current version of WordPress. This means your plugin will not show up in searches, as we require plugins to be compatible and documented as tested up to the most recent version of WordPress.
WARNINGRepo Complianceplugin header nonexistent domain path1
- Category
- Repo Compliance
- Occurrences
- 1
- Severity
- warning
Sample message
The "Domain Path" header in the plugin file must point to an existing folder. Found: "languages"
External Connections
Not analyzed yet.
Score History
First score snapshot
v2.4.0
39
Latest
- Findings
- 158
- Errors
- 105
- Warnings
- 53
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 39 | 158 | 105 | 53 | v2.4.0 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueRelated
Relationship links
Author
Issue
Non Singular String Literal Domain72 findingsNon-prefixed global variable31 findingsUnsafe printing function22 findingsMissing nonce verification4 findingsNonce verification recommended4 findingsInput is not sanitized3 findingsRequest data is not unslashed3 findingsNon Singular String Literal Text3 findings
Related
Contact Form 769 scoreElementor Website Builder – more than just a page builder35 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreLiteSpeed Cache35 scoreWooCommerce22 scoreAkismet Anti-spam: Spam Protection35 scoreAdvanced Custom Fields (ACF®)23 scoreLimit Login Attempts Security – Login Security, 2FA, Firewall, Brute Force Prevention25 scoreManageWP Worker22 scoreBreadcrumb NavXT36 scoreThe Events Calendar23 scoreWP-PageNavi35 scoreDatabase Addon for Contact Form 7 – CFDB740 scoreReCaptcha v2 for Contact Form 744 score
Author
Issue
Non Singular String Literal Domain72 findingsNon-prefixed global variable31 findingsUnsafe printing function22 findingsMissing nonce verification4 findingsNonce verification recommended4 findingsInput is not sanitized3 findingsRequest data is not unslashed3 findingsNon Singular String Literal Text3 findings
Related
Contact Form 769 scoreElementor Website Builder – more than just a page builder35 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreLiteSpeed Cache35 scoreWooCommerce22 scoreAkismet Anti-spam: Spam Protection35 scoreAdvanced Custom Fields (ACF®)23 scoreLimit Login Attempts Security – Login Security, 2FA, Firewall, Brute Force Prevention25 scoreManageWP Worker22 scoreBreadcrumb NavXT36 scoreThe Events Calendar23 scoreWP-PageNavi35 scoreDatabase Addon for Contact Form 7 – CFDB740 scoreReCaptcha v2 for Contact Form 744 score
Related Plugins
DS CF7 Math Captcha
10k+ active installs
100
HTML Editor for Contact Form 7
1k+ active installs
100
Message Bridge for Contact Form 7 and Telegram
10k+ active installs
100
Style Contact Form 7
1k+ active installs
100
Contact Form 7 – Repeatable Fields
6k+ active installs
99
Masks Form Fields
9k+ active installs
99