AI form generator and WordPress form builder for contact and Stripe payment forms, with surveys and quizzes in SureForms Business.
29
Score
337
Errors
198
Warnings
+0
Change
Category Scores
Security0
Repo100
Performance96
Maintainability22
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
I18n
230
3 issue groups
Maintainability
189
16 issue groups
Security
109
6 issue groups
ERRORI18nText Domain MismatchMismatched text domain. Expected 'sureforms' but got 'action-scheduler'.194
- Category
- I18n
- Occurrences
- 194
- Severity
- error
Sample message
Mismatched text domain. Expected 'sureforms' but got 'action-scheduler'.
ERRORSecurityException output is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"The bulk action $action does not have a callback method"'.81
- Category
- Security
- Occurrences
- 81
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"The bulk action $action does not have a callback method"'.
WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.45
- Category
- Maintainability
- Occurrences
- 45
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().39
- Category
- Maintainability
- Occurrences
- 39
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
WARNINGMaintainabilityNon-prefixed classClasses declared by a theme/plugin should start with the theme/plugin prefix. Found: "Advanced_Heading".30
- Category
- Maintainability
- Occurrences
- 30
- Severity
- warning
Sample message
Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "Advanced_Heading".
ERRORI18nMissing Arg DomainMissing $domain parameter in function call to __().29
- Category
- I18n
- Occurrences
- 29
- Severity
- error
Sample message
Missing $domain parameter in function call to __().
WARNINGMaintainabilityNon-prefixed hook nameHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "admin_memory_limit".23
- Category
- Maintainability
- Occurrences
- 23
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "admin_memory_limit".
WARNINGSecurityDatabase parameter is not escapedUnescaped parameter $column_name used in $wpdb->get_var()17
- Category
- Security
- Occurrences
- 17
- Severity
- warning
Sample message
Unescaped parameter $column_name used in $wpdb->get_var()
WARNINGMaintainabilityNon-prefixed functionFunctions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "as_enqueue_async_action".12
- Category
- Maintainability
- Occurrences
- 12
- Severity
- warning
Sample message
Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "as_enqueue_async_action".
WARNINGMaintainabilityDynamic hook nameHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "$hook".7
- Category
- Maintainability
- Occurrences
- 7
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "$hook".
Show 15 moreShow less
ERRORI18nMissing Translators Comment7
- Category
- I18n
- Occurrences
- 7
- Severity
- error
Sample message
A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.
ERRORSecurityOutput is not escaped5
- Category
- Security
- Occurrences
- 5
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$function_name'.
ERRORMaintainabilityMissing direct file access protection5
- Category
- Maintainability
- Occurrences
- 5
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
ERRORMaintainabilitywp function not compatible with requires wp5
- Category
- Maintainability
- Occurrences
- 5
- Severity
- error
Sample message
Function "wp_get_abilities()" requires WordPress 6.9.0, but your plugin minimum supported version is WordPress 6.4.0.
WARNINGSecurityInterpolated SQL is not prepared4
- Category
- Security
- Occurrences
- 4
- Severity
- warning
Sample message
Use placeholders and $wpdb->prepare(); found interpolated variable {$action_id_string} at "UPDATE {$wpdb->actionscheduler_actions} SET claim_id = 0 WHERE action_id IN ({$action_id_string})"
WARNINGMaintainabilityerror log var export4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- warning
Sample message
var_export() found. Debug code should not normally be used in production.
ERRORMaintainabilitybadly named files4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- error
Sample message
File and folder names must not contain spaces or special characters.
WARNINGMaintainabilityDiscouraged PHP function3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
The use of function ini_set() is discouraged
ERRORMaintainabilitydate date3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- error
Sample message
date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.
WARNINGMaintainabilityNon-prefixed constant3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "BSF_ANALYTICS_URI".
WARNINGMaintainabilityerror log error log3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
error_log() found. Debug code should not normally be used in production.
WARNINGMaintainabilityerror log trigger error2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
trigger_error() found. Debug code should not normally be used in production.
WARNINGSecurityReplacements Wrong Number1
- Category
- Security
- Occurrences
- 1
- Severity
- warning
Sample message
Incorrect number of replacements passed to $wpdb->prepare(). Found 1 replacement parameters, expected 2.
WARNINGSecurityUnfinished Prepare1
- Category
- Security
- Occurrences
- 1
- Severity
- warning
Sample message
Replacement variables found, but no valid placeholders found in the query.
WARNINGMaintainabilityNon-prefixed interface1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Interfaces declared by a theme/plugin should start with the theme/plugin prefix. Found: "CronExpression_FieldInterface".
External Connections
Potential connections found in static code analysis.
Outbound calls
203
External assets
15
Incoming endpoints
45
Notable Domains
en.wikipedia.org16 · outbound
yandex.com12 · outbound
youtube.com8 · outbound
php.net5 · outbound
actionscheduler.org4 · outbound
apple.com4 · outbound
Platform / Reference Domains
w3.org29 · platform/reference
github.com8 · platform/reference
wordpress.org3 · platform/reference
core.trac.wordpress.org2 · platform/reference
developer.wordpress.org1 · platform/reference
gnu.org1 · platform/reference
validator.w3.org1 · platform/reference
External Asset Domains
sureforms.com35 · asset + outbound
google.com10 · asset + outbound
challenges.cloudflare.com5 · asset + outbound
fonts.googleapis.com3 · asset
js.hcaptcha.com2 · asset
js.stripe.com2 · asset + outbound
Incoming Endpoints
/wp-json/sureforms/v1/create-new-formREST
register_rest_route
/wp-json/sureforms/v1/forms-dataREST
register_rest_route
/wp-json/sureforms/v1/generate-form-markupREST
register_rest_route
/wp-json/sureforms/v1/get-learn-chaptersREST
register_rest_route
/wp-json/sureforms/v1/payments/create-payment-webhookREST
register_rest_route
/wp-json/sureforms/v1/payments/stripe-callbackREST
register_rest_route
Admin AJAX endpoints29
wp_ajax_astra-notice-dismissauthenticated
wp_ajax
wp_ajax_should_show_pointerauthenticated
wp_ajax
wp_ajax_srfm_add_payment_noteauthenticated
wp_ajax
wp_ajax_srfm_ai_widget_usageauthenticated
wp_ajax
wp_ajax_srfm_bulk_delete_paymentsauthenticated
wp_ajax
wp_ajax_srfm_create_payment_intentauthenticated
wp_ajax
wp_ajax_srfm_create_subscription_intentauthenticated
wp_ajax
wp_ajax_srfm_delete_payment_logauthenticated
wp_ajax
wp_ajax_srfm_delete_payment_noteauthenticated
wp_ajax
wp_ajax_srfm_download_exportauthenticated
wp_ajax
wp_ajax_srfm_editor_nudge_dismissauthenticated
wp_ajax
wp_ajax_srfm_fetch_forms_listauthenticated
wp_ajax
17 more hidden
Score History
4 score snapshots
v2.12.2
29
Latest
- Findings
- 535
- Errors
- 337
- Warnings
- 198
- Check
- 2.0.0
v2.12.1
29
Score
- Findings
- 534
- Errors
- 336
- Warnings
- 198
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 29 | 535 | 337 | 198 | v2.12.2 | 2.0.0 |
| 29 | 534 | 336 | 198 | v2.12.1 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Author
Issue
Domain
Related
Yoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreJetpack – WP Security, Backup, Speed, & Growth22 scoreLiteSpeed Cache35 scoreWooCommerce22 scoreWP Mail SMTP by WPForms – The Most Popular SMTP and Email Log Plugin30 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreContact Form 769 scoreAkismet Anti-spam: Spam Protection35 scoreWPForms – AI Form Builder for WordPress – Contact Forms, Payment Forms, Survey Form, Quiz & More31 scoreUltimate Addons for Elementor33 scoreSpectra Legacy – Gutenberg Blocks25 scoreStarter Templates – AI-Powered Templates for Elementor & Gutenberg24 score
Author
Issue
Domain
Related
Yoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreJetpack – WP Security, Backup, Speed, & Growth22 scoreLiteSpeed Cache35 scoreWooCommerce22 scoreWP Mail SMTP by WPForms – The Most Popular SMTP and Email Log Plugin30 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreContact Form 769 scoreAkismet Anti-spam: Spam Protection35 scoreWPForms – AI Form Builder for WordPress – Contact Forms, Payment Forms, Survey Form, Quiz & More31 scoreUltimate Addons for Elementor33 scoreSpectra Legacy – Gutenberg Blocks25 scoreStarter Templates – AI-Powered Templates for Elementor & Gutenberg24 score
Related Plugins
Crowdsignal Forms
200k+ active installs
100
100
LeadConnector
20k+ active installs
100
Add Password Field for Contact Form 7
3k+ active installs
100
Contact Form Query
1k+ active installs
100
Style Contact Form 7
1k+ active installs
100