PluginScore

SurveyJS: Drag & Drop Form Builder

Drag & Drop Form Builder for WordPress

v2.5.5devsoftbalticUpdated Added 500 installs94% rating
form builderquizsurveysurvey creatorsurvey maker
36
Score
12
Errors
134
Warnings
+0
Change

Category Scores

Security0
Repo80
Performance100
Maintainability68

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

146 findings

Maintainability

85

12 issue groups

Security

57

7 issue groups

Repo Compliance

4

4 issue groups

WARNINGMaintainabilityMissing VersionResource version not set in call to wp_enqueue_script(). This means new versions of the script may not always be loaded due to browser caching.26
Category
Maintainability
Occurrences
26
Severity
warning

Sample message

Resource version not set in call to wp_enqueue_script(). This means new versions of the script may not always be loaded due to browser caching.

WordPress.WP.EnqueuedResourceParameters.MissingVersion
WARNINGSecurityInput is not validatedDetected usage of a possibly undefined superglobal array index: $_FILES['file']. Check that the array index exists before using it.23
Category
Security
Occurrences
23
Severity
warning

Sample message

Detected usage of a possibly undefined superglobal array index: $_FILES['file']. Check that the array index exists before using it.

WordPress.Security.ValidatedSanitizedInput.InputNotValidated
WARNINGMaintainabilityNot In FooterIn footer ($in_footer) is not set explicitly wp_enqueue_script; It is recommended to load scripts in the footer. Please set this value to `true` to load it in the footer, or explicitly `false` if it should be loaded in the header.19
Category
Maintainability
Occurrences
19
Severity
warning

Sample message

In footer ($in_footer) is not set explicitly wp_enqueue_script; It is recommended to load scripts in the footer. Please set this value to `true` to load it in the footer, or explicitly `false` if it should be loaded in the header.

WordPress.WP.EnqueuedResourceParameters.NotInFooter
WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.15
Category
Maintainability
Occurrences
15
Severity
warning

Sample message

Use of a direct database call is discouraged.

WordPress.DB.DirectDatabaseQuery.DirectQuery
WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.13
Category
Security
Occurrences
13
Severity
warning

Sample message

Processing form data without nonce verification.

WordPress.Security.NonceVerification.Recommended
WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().12
Category
Maintainability
Occurrences
12
Severity
warning

Sample message

Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().

WordPress.DB.DirectDatabaseQuery.NoCaching
ERRORSecuritySQL query is not preparedUse placeholders and $wpdb->prepare(); found $query6
Category
Security
Occurrences
6
Severity
error

Sample message

Use placeholders and $wpdb->prepare(); found $query

WordPress.DB.PreparedSQL.NotPrepared
WARNINGMaintainabilityNon-prefixed functionFunctions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "createMySurveysTable".6
Category
Maintainability
Occurrences
6
Severity
warning

Sample message

Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "createMySurveysTable".

WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedFunctionFound
WARNINGSecurityRequest data is not unslashed$_GET['name'] not unslashed before sanitization. Use wp_unslash() or similar6
Category
Security
Occurrences
6
Severity
warning

Sample message

$_GET['name'] not unslashed before sanitization. Use wp_unslash() or similar

WordPress.Security.ValidatedSanitizedInput.MissingUnslash
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_FILES['file']5
Category
Security
Occurrences
5
Severity
warning

Sample message

Detected usage of a non-sanitized input variable: $_FILES['file']

WordPress.Security.ValidatedSanitizedInput.InputNotSanitized
Show 13 more
WARNINGSecurityDatabase parameter is not escaped2
Category
Security
Occurrences
2
Severity
warning

Sample message

Unescaped parameter $table_name used in $wpdb->get_results()

PluginCheck.Security.DirectDB.UnescapedDBParameter
WARNINGSecurityInterpolated SQL is not prepared2
Category
Security
Occurrences
2
Severity
warning

Sample message

Use placeholders and $wpdb->prepare(); found interpolated variable $table_name at "ALTER TABLE $table_name ADD theme LONGTEXT"

WordPress.DB.PreparedSQL.InterpolatedNotPrepared
ERRORMaintainabilityForbidden PHP function found1
Category
Maintainability
Occurrences
1
Severity
error

Sample message

The use of function move_uploaded_file() is forbidden

Generic.PHP.ForbiddenFunctions.Found
WARNINGMaintainabilitySchema Change1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

Attempting a database schema change is discouraged.

WordPress.DB.DirectDatabaseQuery.SchemaChange
WARNINGMaintainabilityNon-prefixed hook name1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "wp_surveyjs_save_result".

WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedHooknameFound
WARNINGMaintainabilityNon-prefixed global variable1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$sjsSettingsPage".

WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedVariableFound
ERRORMaintainabilityfile system operations mkdir1
Category
Maintainability
Occurrences
1
Severity
error

Sample message

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: mkdir().

WordPress.WP.AlternativeFunctions.file_system_operations_mkdir
ERRORMaintainabilityrand rand1
Category
Maintainability
Occurrences
1
Severity
error

Sample message

rand() is discouraged. Use the far less predictable wp_rand() instead.

WordPress.WP.AlternativeFunctions.rand_rand
WARNINGMaintainabilitymismatched plugin name1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

Plugin name "SurveyJS: Drag & Drop Form Builder" is different from the name declared in plugin header "SurveyJS".

mismatched_plugin_nameReference
ERRORRepo Complianceno license1
Category
Repo Compliance
Occurrences
1
Severity
error

Sample message

Missing "License". Please update your readme with a valid GPLv2 (or later) compatible license.

no_licenseReference
ERRORRepo Complianceoutdated tested upto header1
Category
Repo Compliance
Occurrences
1
Severity
error

Sample message

Tested up to: 6.9 < 7.0. The "Tested up to" value in your plugin is not set to the current version of WordPress. This means your plugin will not show up in searches, as we require plugins to be compatible and documented as tested up to the most recent version of WordPress.

outdated_tested_upto_headerReference
ERRORRepo Complianceplugin header invalid license1
Category
Repo Compliance
Occurrences
1
Severity
error

Sample message

Invalid License: "SEE LICENSE IN LICENSE". Please update your Plugin Header with a valid GPLv2 (or later) compatible license.

plugin_header_invalid_licenseReference
WARNINGRepo Compliancereadme parser warnings no short description present1
Category
Repo Compliance
Occurrences
1
Severity
warning

Sample message

The "Short Description" section is missing. An excerpt was generated from your main plugin description.

readme_parser_warnings_no_short_description_present

External Connections

Potential connections found in static code analysis.

25 domains

Outbound calls

186

External assets

24

Incoming endpoints

1

Notable Domains

surveyjs.io52 · outbound
schemas.openxmlformats.org20 · outbound
fpdf.org2 · outbound
schemas.microsoft.com2 · outbound
cdnjs.cloudflare.com1 · outbound
cs.cmu.edu1 · outbound

Platform / Reference Domains

opensource.org60 · platform/reference
github.com27 · platform/reference
w3.org6 · platform/reference
wordpress.org1 · platform/reference

External Asset Domains

fonts.gstatic.com24 · asset

Incoming Endpoints

wp_ajax_nopriv_public

wp_ajax

Score History

First score snapshot

v2.5.5

36

Latest

Findings
146
Errors
12
Warnings
134
Check
2.0.0

Relationship Map

Author, categories, issues, domains, and nearby plugins.

37 nodes

Related

WooCommerce22 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreDuplicate Page40 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder35 scoreAll-in-One WP Migration and Backup34 scoreHostinger Tools81 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreEssential Addons for Elementor – Popular Elementor Templates & Widgets63 scoreWPForms – AI Form Builder for WordPress – Contact Forms, Payment Forms, Survey Form, Quiz & More32 scoreFluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder22 scoreMetForm – Contact Form, Survey, Quiz, & Custom Form Builder for Elementor30 scoreNinja Forms – The Contact Form Builder That Grows With You24 scoreKirki – Freeform Page Builder, Website Builder & Customizer35 score

Related Plugins

NEX-Forms ADD ON – Super Select

1k+ active installs

100
WS Form LITE – Drag & Drop Contact Form Builder

10k+ active installs

100
NEX-Forms ADD ON – Digital Signatures

600 active installs

99
NEX-Forms ADD ON – Form Themes

1k+ active installs

99
Online Forms — Customizable Payment, Contact, Quiz, Survey Form Builder – Jotform

20k+ active installs

99
Quiz Builder for WooCommerce – Product Recommendations

2k+ active installs

99