50+ Essential Addons for Contact Form 7 - Conditional Fields, Multi Step, Redirection, Columns, WooCommerce, Mailchimp & more
24
Score
1,556
Errors
453
Warnings
+0
Change
Category Scores
Security0
Repo97
Performance94
Maintainability0
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
I18n
1,046
6 issue groups
Security
661
10 issue groups
Maintainability
229
9 issue groups
ERRORI18nText Domain MismatchMismatched text domain. Expected 'ultimate-addons-for-contact-form-7' but got "ultimate-addons-cf7".896
- Category
- I18n
- Occurrences
- 896
- Severity
- error
Sample message
Mismatched text domain. Expected 'ultimate-addons-for-contact-form-7' but got "ultimate-addons-cf7".
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$action'.345
- Category
- Security
- Occurrences
- 345
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$action'.
WARNINGSecurityRequest data is not unslashed$_GET['_wpnonce'] not unslashed before sanitization. Use wp_unslash() or similar59
- Category
- Security
- Occurrences
- 59
- Severity
- warning
Sample message
$_GET['_wpnonce'] not unslashed before sanitization. Use wp_unslash() or similar
WARNINGSecurityMissing nonce verificationProcessing form data without nonce verification.58
- Category
- Security
- Occurrences
- 58
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$field".56
- Category
- Maintainability
- Occurrences
- 56
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$field".
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_FILES[$tag->name]53
- Category
- Security
- Occurrences
- 53
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_FILES[$tag->name]
ERRORSecurityUnsafe printing functionAll output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.51
- Category
- Security
- Occurrences
- 51
- Severity
- error
Sample message
All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.
ERRORI18nMissing Arg DomainMissing $domain parameter in function call to __().44
- Category
- I18n
- Occurrences
- 44
- Severity
- error
Sample message
Missing $domain parameter in function call to __().
ERRORI18nNon Singular String Literal TextThe $text parameter must be a single text string literal. Found: $background_color44
- Category
- I18n
- Occurrences
- 44
- Severity
- error
Sample message
The $text parameter must be a single text string literal. Found: $background_color
ERRORI18nMissing Translators CommentA function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.43
- Category
- I18n
- Occurrences
- 43
- Severity
- error
Sample message
A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.
Show 15 moreShow less
WARNINGSecurityNonce verification recommended40
- Category
- Security
- Occurrences
- 40
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGMaintainabilityMissing Version39
- Category
- Maintainability
- Occurrences
- 39
- Severity
- warning
Sample message
Resource version not set in call to wp_enqueue_script(). This means new versions of the script may not always be loaded due to browser caching.
WARNINGSecurityInput is not validated36
- Category
- Security
- Occurrences
- 36
- Severity
- warning
Sample message
Detected usage of a possibly undefined superglobal array index: $_FILES[$tag->name]. Check that the array index exists before using it.
WARNINGMaintainabilityDirect Query27
- Category
- Maintainability
- Occurrences
- 27
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGMaintainabilityNo Caching26
- Category
- Maintainability
- Occurrences
- 26
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
ERRORMaintainabilitybadly named files26
- Category
- Maintainability
- Occurrences
- 26
- Severity
- error
Sample message
File and folder names must not contain spaces or special characters.
ERRORMaintainabilityOffloaded Content20
- Category
- Maintainability
- Occurrences
- 20
- Severity
- error
Sample message
Found call to wp_enqueue_script() with external resource. Offloading scripts to your servers or any remote service is disallowed.
ERRORMaintainabilitycurl curl setopt17
- Category
- Maintainability
- Occurrences
- 17
- Severity
- error
Sample message
Using cURL functions is highly discouraged. Use wp_remote_get() instead.
ERRORI18nNo Empty Strings11
- Category
- I18n
- Occurrences
- 11
- Severity
- error
Sample message
The $text text string should have translatable content. Found: ""
WARNINGMaintainabilityDynamic hook name9
- Category
- Maintainability
- Occurrences
- 9
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "$key . '_icon'".
ERRORMaintainabilitywp function not compatible with requires wp9
- Category
- Maintainability
- Occurrences
- 9
- Severity
- error
Sample message
Function "delete_term_meta()" requires WordPress 4.4.0, but your plugin minimum supported version is WordPress 4.2.0.
ERRORI18nUnordered Placeholders Text8
- Category
- I18n
- Occurrences
- 8
- Severity
- error
Sample message
Multiple placeholders in translatable strings should be ordered. Expected "%1$1s, %2$2s", but got "%1s, %2s" in 'Confused? Check our Documentation on %1s and %2s.'.
WARNINGSecurityInterpolated SQL is not prepared7
- Category
- Security
- Occurrences
- 7
- Severity
- warning
Sample message
Use placeholders and $wpdb->prepare(); found interpolated variable $table_name at "SELECT * FROM $table_name WHERE form_id= %d ORDER BY submission_id DESC "
WARNINGSecurityDatabase parameter is not escaped6
- Category
- Security
- Occurrences
- 6
- Severity
- warning
Sample message
Unescaped parameter $table_name used in $wpdb->get_row()\n$table_name assigned unsafely at line 33.
ERRORSecuritySQL query is not prepared6
- Category
- Security
- Occurrences
- 6
- Severity
- error
Sample message
Use placeholders and $wpdb->prepare(); found $get_form_data
External Connections
Potential connections found in static code analysis.
Outbound calls
270
External assets
7
Incoming endpoints
23
Notable Domains
themefic.com108 · outbound
cf7addons.com101 · outbound
fontawesome.com6 · outbound
portal.themefic.com5 · outbound
api.telegram.org2 · outbound
app.loopedin.io2 · outbound
Platform / Reference Domains
External Asset Domains
cdnjs.cloudflare.com5 · asset + outbound
cdn.datatables.net3 · asset + outbound
code.jquery.com2 · asset + outbound
fonts.googleapis.com1 · asset
Incoming Endpoints
wp_ajax_nopriv_check_fields_validationpublic
wp_ajax
wp_ajax_nopriv_uacf7_ajax_pre_populate_redirectpublic
wp_ajax
wp_ajax_nopriv_uacf7_dynamic_selectionpublic
wp_ajax
wp_ajax_nopriv_uacf7_update_submission_idpublic
wp_ajax
wp_ajax_nopriv_uacf7dp_get_table_datapublic
wp_ajax
wp_ajax_nopriv_uacf7dp_view_table_datapublic
wp_ajax
Admin AJAX endpoints17
wp_ajax_check_fields_validationauthenticated
wp_ajax
wp_ajax_uacf7_ajax_database_export_csvauthenticated
wp_ajax
wp_ajax_uacf7_ajax_database_popupauthenticated
wp_ajax
wp_ajax_uacf7_ajax_mailchimpauthenticated
wp_ajax
wp_ajax_uacf7_ajax_pre_populate_redirectauthenticated
wp_ajax
wp_ajax_uacf7_dynamic_selectionauthenticated
wp_ajax
wp_ajax_uacf7_form_generator_aiauthenticated
wp_ajax
wp_ajax_uacf7_form_generator_ai_get_tagauthenticated
wp_ajax
wp_ajax_uacf7_get_generated_pdfauthenticated
wp_ajax
wp_ajax_uacf7_option_importauthenticated
wp_ajax
wp_ajax_uacf7_options_saveauthenticated
wp_ajax
wp_ajax_uacf7_themefic_manage_pluginauthenticated
wp_ajax
5 more hidden
Score History
5 score snapshots
v3.5.47
24
Latest
- Findings
- 2,009
- Errors
- 1,556
- Warnings
- 453
- Check
- 2.0.0
v3.5.46
24
Score
- Findings
- 1,995
- Errors
- 1,543
- Warnings
- 452
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 24 | 2,009 | 1,556 | 453 | v3.5.47 | 2.0.0 |
| 24 | 1,995 | 1,543 | 452 | v3.5.46 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Author
Category
Issue
Domain
Related
Akismet Anti-spam: Spam Protection35 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreClassic Editor63 scoreLiteSpeed Cache35 scoreWooCommerce22 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreAll-in-One WP Migration and Backup34 scoreJetpack – WP Security, Backup, Speed, & Growth22 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreContact Form 769 scoreWPForms – AI Form Builder for WordPress – Contact Forms, Payment Forms, Survey Form, Quiz & More31 scoreFluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder23 scoreDatabase Addon for Contact Form 7 – CFDB739 score
Author
Category
Issue
Domain
Related
Akismet Anti-spam: Spam Protection35 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreClassic Editor63 scoreLiteSpeed Cache35 scoreWooCommerce22 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreAll-in-One WP Migration and Backup34 scoreJetpack – WP Security, Backup, Speed, & Growth22 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreContact Form 769 scoreWPForms – AI Form Builder for WordPress – Contact Forms, Payment Forms, Survey Form, Quiz & More31 scoreFluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder23 scoreDatabase Addon for Contact Form 7 – CFDB739 score
Related Plugins
DS CF7 Math Captcha
10k+ active installs
100
Message Bridge for Contact Form 7 and Telegram
10k+ active installs
100
Add Password Field for Contact Form 7
3k+ active installs
100
HTML Editor for Contact Form 7
2k+ active installs
100
Contact Form Query
1k+ active installs
100
Style Contact Form 7
1k+ active installs
100