The best WordPress contact form plugin. Drag & Drop form builder to create beautiful contact forms, payment forms, & other custom forms.
29
Score
172
Errors
467
Warnings
+0
Change
Category Scores
Security0
Repo97
Performance100
Maintainability24
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Maintainability
465
16 issue groups
Security
173
2 issue groups
Repo Compliance
1
1 issue group
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$active_network_plugins".363
- Category
- Maintainability
- Occurrences
- 363
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$active_network_plugins".
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found 'wpforms_datetime_format'.96
- Category
- Security
- Occurrences
- 96
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found 'wpforms_datetime_format'.
WARNINGSecurityDatabase parameter is not escapedUnescaped parameter $clause used in $wpdb->get_row()\n$clause used without escaping.77
- Category
- Security
- Occurrences
- 77
- Severity
- warning
Sample message
Unescaped parameter $clause used in $wpdb->get_row()\n$clause used without escaping.
ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;32
- Category
- Maintainability
- Occurrences
- 32
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
ERRORMaintainabilitybadly named filesFile and folder names must not contain spaces or special characters.29
- Category
- Maintainability
- Occurrences
- 29
- Severity
- error
Sample message
File and folder names must not contain spaces or special characters.
WARNINGMaintainabilityNon-prefixed hook nameHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "https_local_ssl_verify".14
- Category
- Maintainability
- Occurrences
- 14
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "https_local_ssl_verify".
ERRORMaintainabilityOffloaded ContentOffloading images, js, css, and other scripts to your servers or any remote service is disallowed.8
- Category
- Maintainability
- Occurrences
- 8
- Severity
- error
Sample message
Offloading images, js, css, and other scripts to your servers or any remote service is disallowed.
WARNINGMaintainabilityNon-prefixed functionFunctions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "_wpforms_get_hierarchical_object_flatten".4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- warning
Sample message
Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "_wpforms_get_hierarchical_object_flatten".
WARNINGMaintainabilitytrademarked termThe plugin name includes a restricted term. Your chosen plugin name - "WPForms - AI Form Builder for WordPress - Contact Forms, Payment Forms, Survey Form, Quiz & More" - contains the restricted term "wordpress" which cannot be used at all in your plugin name.3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
The plugin name includes a restricted term. Your chosen plugin name - "WPForms - AI Form Builder for WordPress - Contact Forms, Payment Forms, Survey Form, Quiz & More" - contains the restricted term "wordpress" which cannot be used at all in your plugin name.
WARNINGMaintainabilityDiscouraged PHP functionThe use of function ini_set() is discouraged2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
The use of function ini_set() is discouraged
Show 9 moreShow less
ERRORMaintainabilitylibrary core files2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
Library files that are already in the WordPress core are not permitted.
ERRORMaintainabilitywp function not compatible with requires wp2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
Function "wp_register_ability()" requires WordPress 6.9.0, but your plugin minimum supported version is WordPress 5.5.0.
ERRORMaintainabilityForbidden PHP function found1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
The use of function wp_get_sidebars_widgets() is forbidden
ERRORMaintainabilityNot Allowed1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
Use of heredoc syntax (<<<) is not allowed; use standard strings or inline HTML instead
ERRORMaintainabilityPlugin Directory Write1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
Plugin folders are deleted when upgraded. Do not save data to the plugin folder using unzip_file(). Detected usage of constant WP_CONTENT_DIR. Use wp_upload_dir() to get the uploads directory path or save to the database instead.
WARNINGMaintainabilityNon-prefixed constant1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "DONOTCACHEPAGE".
WARNINGMaintainabilitymismatched plugin name1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Plugin name "WPForms - AI Form Builder for WordPress - Contact Forms, Payment Forms, Survey Form, Quiz & More" is different from the name declared in plugin header "WPForms Lite".
WARNINGMaintainabilitymissing composer json file1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
The "/vendor" directory using composer exists, but "composer.json" file is missing.
WARNINGRepo Compliancereadme parser warnings trimmed short description1
- Category
- Repo Compliance
- Occurrences
- 1
- Severity
- warning
Sample message
The "Short Description" section is too long and was truncated. A maximum of 150 characters is supported.
External Connections
Potential connections found in static code analysis.
Outbound calls
265
External assets
2
Incoming endpoints
33
Notable Domains
wpforms.com97 · outbound
fontawesome.com8 · outbound
api.constantcontact.com5 · outbound
smashballoon.com4 · outbound
monsterinsights.com3 · outbound
aioseo.com2 · outbound
Platform / Reference Domains
w3.org32 · platform/reference
wordpress.org21 · platform/reference
downloads.wordpress.org19 · platform/reference
github.com16 · platform/reference
opensource.org2 · platform/reference
gnu.org1 · platform/reference
External Asset Domains
youtube-nocookie.com2 · asset
Incoming Endpoints
wp_ajax_nopriv_wpforms_restricted_emailpublic
wp_ajax
wp_ajax_nopriv_wpforms_submitpublic
wp_ajax
Admin AJAX endpoints31
wp_ajax_wpforms_activate_addonauthenticated
wp_ajax
wp_ajax_wpforms_ajax_search_pages_for_dropdownauthenticated
wp_ajax
wp_ajax_wpforms_builder_dynamic_choicesauthenticated
wp_ajax
wp_ajax_wpforms_builder_dynamic_sourceauthenticated
wp_ajax
wp_ajax_wpforms_builder_increase_next_field_idauthenticated
wp_ajax
wp_ajax_wpforms_builder_load_panelauthenticated
wp_ajax
wp_ajax_wpforms_builder_save_internal_information_checkboxauthenticated
wp_ajax
wp_ajax_wpforms_challenge_save_optionauthenticated
wp_ajax
wp_ajax_wpforms_challenge_send_contact_formauthenticated
wp_ajax
wp_ajax_wpforms_dashboard_get_entries_widget_htmlauthenticated
wp_ajax
wp_ajax_wpforms_dashboard_payments_save_selected_reportauthenticated
wp_ajax
wp_ajax_wpforms_dashboard_reset_widget_settingsauthenticated
wp_ajax
19 more hidden
Score History
9 score snapshots
v2.0.2.1
29
Latest
- Findings
- 639
- Errors
- 172
- Warnings
- 467
- Check
- 2.1.0
v2.0.2
29
Score
- Findings
- 638
- Errors
- 172
- Warnings
- 466
- Check
- 2.1.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 29 | 639 | 172 | 467 | v2.0.2.1 | 2.1.0 |
| 29 | 638 | 172 | 466 | v2.0.2 | 2.1.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Author
Category
Issue
Domain
Related
Akismet Anti-spam: Spam Protection35 scoreContact Form 769 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce22 scoreElementor Website Builder – more than just a page builder38 scoreClassic Editor63 scoreLiteSpeed Cache35 scoreAll-in-One WP Migration and Backup34 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWP Mail SMTP by WPForms – The Most Popular SMTP and Email Log Plugin30 scoreWPCode – Insert Headers and Footers + Custom Code Snippets – WordPress Code Manager88 scoreAll in One SEO – AI SEO Plugin to Boost SEO Rankings & Traffic (Schema, Local SEO, Sitemap & SEO Insights)94 scoreDuplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More20 scoreOne Click Demo Import38 score
Author
Category
Issue
Domain
Related
Akismet Anti-spam: Spam Protection35 scoreContact Form 769 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce22 scoreElementor Website Builder – more than just a page builder38 scoreClassic Editor63 scoreLiteSpeed Cache35 scoreAll-in-One WP Migration and Backup34 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWP Mail SMTP by WPForms – The Most Popular SMTP and Email Log Plugin30 scoreWPCode – Insert Headers and Footers + Custom Code Snippets – WordPress Code Manager88 scoreAll in One SEO – AI SEO Plugin to Boost SEO Rankings & Traffic (Schema, Local SEO, Sitemap & SEO Insights)94 scoreDuplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More20 scoreOne Click Demo Import38 score
Related Plugins
Ultra Addons for Contact Form 7
60k+ active installs
100
100
WS Form LITE – Drag & Drop Contact Form Builder
10k+ active installs
100
Add Password Field for Contact Form 7
3k+ active installs
100
Contact Form Query
1k+ active installs
100
Style Contact Form 7
1k+ active installs
100