WPForms – Easy Form Builder for WordPress – Contact Forms, Payment Forms, Surveys, & More

The best WordPress contact form plugin. Drag & Drop form builder to create beautiful contact forms, payment forms, & other custom forms.

v1.10.2Syed BalkhiUpdated Added 5m+ installs96% rating95% support resolved
31
Score
165
Errors
271
Warnings
+0
Change

Category Scores

Security0
Repo94
Performance100
Maintainability35

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

436 findings

Maintainability

285

13 issue groups

Security

149

2 issue groups

Repo Compliance

2

2 issue groups

WARNINGMaintainabilityNon Prefixed Variable FoundGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$active_network_plugins".188
Category
Maintainability
Occurrences
188
Severity
warning

Sample message

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$active_network_plugins".

ERRORSecurityOutput Not EscapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found 'wpforms_datetime_format'.90
Category
Security
Occurrences
90
Severity
error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found 'wpforms_datetime_format'.

WARNINGSecurityUnescaped DBParameterUnescaped parameter $clause used in $wpdb->get_row()\n$clause used without escaping.59
Category
Security
Occurrences
59
Severity
warning

Sample message

Unescaped parameter $clause used in $wpdb->get_row()\n$clause used without escaping.

ERRORMaintainabilitymissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;32
Category
Maintainability
Occurrences
32
Severity
error

Sample message

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

ERRORMaintainabilitybadly named filesFile and folder names must not contain spaces or special characters.27
Category
Maintainability
Occurrences
27
Severity
error

Sample message

File and folder names must not contain spaces or special characters.

WARNINGMaintainabilityNon Prefixed Hookname FoundHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "https_local_ssl_verify".14
Category
Maintainability
Occurrences
14
Severity
warning

Sample message

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "https_local_ssl_verify".

ERRORMaintainabilitywp function not compatible with requires wpFunction "wp_get_sidebar()" requires WordPress 5.9.0, but your plugin minimum supported version is WordPress 5.5.0.11
Category
Maintainability
Occurrences
11
Severity
error

Sample message

Function "wp_get_sidebar()" requires WordPress 5.9.0, but your plugin minimum supported version is WordPress 5.5.0.

WARNINGMaintainabilityNon Prefixed Function FoundFunctions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "_wpforms_get_hierarchical_object_flatten".3
Category
Maintainability
Occurrences
3
Severity
warning

Sample message

Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "_wpforms_get_hierarchical_object_flatten".

WARNINGMaintainabilitytrademarked termThe plugin name includes a restricted term. Your chosen plugin name - "WPForms - Easy Form Builder for WordPress - Contact Forms, Payment Forms, Surveys, & More" - contains the restricted term "wordpress" which cannot be used at all in your plugin name.3
Category
Maintainability
Occurrences
3
Severity
warning

Sample message

The plugin name includes a restricted term. Your chosen plugin name - "WPForms - Easy Form Builder for WordPress - Contact Forms, Payment Forms, Surveys, & More" - contains the restricted term "wordpress" which cannot be used at all in your plugin name.

ERRORMaintainabilitylibrary core filesLibrary files that are already in the WordPress core are not permitted.2
Category
Maintainability
Occurrences
2
Severity
error

Sample message

Library files that are already in the WordPress core are not permitted.

Show 7 more
ERRORMaintainabilityFound1
Category
Maintainability
Occurrences
1
Severity
error

Sample message

The use of function wp_get_sidebars_widgets() is forbidden

ERRORMaintainabilityNot Allowed1
Category
Maintainability
Occurrences
1
Severity
error

Sample message

Use of heredoc syntax (<<<) is not allowed; use standard strings or inline HTML instead

ERRORMaintainabilityPlugin Directory Write1
Category
Maintainability
Occurrences
1
Severity
error

Sample message

Plugin folders are deleted when upgraded. Do not save data to the plugin folder using unzip_file(). Detected usage of constant WP_CONTENT_DIR. Use wp_upload_dir() to get the uploads directory path or save to the database instead.

WARNINGMaintainabilitymismatched plugin name1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

Plugin name "WPForms - Easy Form Builder for WordPress - Contact Forms, Payment Forms, Surveys, & More" is different from the name declared in plugin header "WPForms Lite".

WARNINGMaintainabilitymissing composer json file1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

The &quot;/vendor&quot; directory using composer exists, but &quot;composer.json&quot; file is missing.

WARNINGRepo Compliancereadme parser warnings trimmed section changelog1
Category
Repo Compliance
Occurrences
1
Severity
warning

Sample message

The "Changelog" section is too long and was truncated. A maximum of 5000 characters is supported.

WARNINGRepo Compliancereadme parser warnings trimmed short description1
Category
Repo Compliance
Occurrences
1
Severity
warning

Sample message

The "Short Description" section is too long and was truncated. A maximum of 150 characters is supported.

Score History

First score snapshot

v1.10.2

31

Latest

Findings
436
Errors
165
Warnings
271
Check
2.0.0

Related Plugins