The best WordPress contact form plugin. Drag & Drop form builder to create beautiful contact forms, payment forms, & other custom forms.
31
Score
167
Errors
332
Warnings
-1
Change
Category Scores
Security0
Repo97
Performance100
Maintainability31
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Maintainability
339
14 issue groups
Security
159
2 issue groups
Repo Compliance
1
1 issue group
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$active_network_plugins".237
- Category
- Maintainability
- Occurrences
- 237
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$active_network_plugins".
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found 'wpforms_datetime_format'.90
- Category
- Security
- Occurrences
- 90
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found 'wpforms_datetime_format'.
WARNINGSecurityDatabase parameter is not escapedUnescaped parameter $clause used in $wpdb->get_row()\n$clause used without escaping.69
- Category
- Security
- Occurrences
- 69
- Severity
- warning
Sample message
Unescaped parameter $clause used in $wpdb->get_row()\n$clause used without escaping.
ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;32
- Category
- Maintainability
- Occurrences
- 32
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
ERRORMaintainabilitybadly named filesFile and folder names must not contain spaces or special characters.29
- Category
- Maintainability
- Occurrences
- 29
- Severity
- error
Sample message
File and folder names must not contain spaces or special characters.
WARNINGMaintainabilityNon-prefixed hook nameHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "https_local_ssl_verify".14
- Category
- Maintainability
- Occurrences
- 14
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "https_local_ssl_verify".
ERRORMaintainabilitywp function not compatible with requires wpFunction "wp_get_sidebar()" requires WordPress 5.9.0, but your plugin minimum supported version is WordPress 5.5.0.11
- Category
- Maintainability
- Occurrences
- 11
- Severity
- error
Sample message
Function "wp_get_sidebar()" requires WordPress 5.9.0, but your plugin minimum supported version is WordPress 5.5.0.
WARNINGMaintainabilityNon-prefixed functionFunctions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "_wpforms_get_hierarchical_object_flatten".4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- warning
Sample message
Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "_wpforms_get_hierarchical_object_flatten".
WARNINGMaintainabilitytrademarked termThe plugin name includes a restricted term. Your chosen plugin name - "WPForms - AI Form Builder for WordPress - Contact Forms, Payment Forms, Survey Form, Quiz & More" - contains the restricted term "wordpress" which cannot be used at all in your plugin name.3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
The plugin name includes a restricted term. Your chosen plugin name - "WPForms - AI Form Builder for WordPress - Contact Forms, Payment Forms, Survey Form, Quiz & More" - contains the restricted term "wordpress" which cannot be used at all in your plugin name.
WARNINGMaintainabilityDiscouraged PHP functionThe use of function ini_set() is discouraged2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
The use of function ini_set() is discouraged
Show 7 moreShow less
ERRORMaintainabilitylibrary core files2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
Library files that are already in the WordPress core are not permitted.
ERRORMaintainabilityForbidden PHP function found1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
The use of function wp_get_sidebars_widgets() is forbidden
ERRORMaintainabilityNot Allowed1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
Use of heredoc syntax (<<<) is not allowed; use standard strings or inline HTML instead
ERRORMaintainabilityPlugin Directory Write1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
Plugin folders are deleted when upgraded. Do not save data to the plugin folder using unzip_file(). Detected usage of constant WP_CONTENT_DIR. Use wp_upload_dir() to get the uploads directory path or save to the database instead.
WARNINGMaintainabilitymismatched plugin name1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Plugin name "WPForms - AI Form Builder for WordPress - Contact Forms, Payment Forms, Survey Form, Quiz & More" is different from the name declared in plugin header "WPForms Lite".
WARNINGMaintainabilitymissing composer json file1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
The "/vendor" directory using composer exists, but "composer.json" file is missing.
WARNINGRepo Compliancereadme parser warnings trimmed short description1
- Category
- Repo Compliance
- Occurrences
- 1
- Severity
- warning
Sample message
The "Short Description" section is too long and was truncated. A maximum of 150 characters is supported.
External Connections
Potential connections found in static code analysis.
Outbound calls
257
External assets
2
Incoming endpoints
41
Notable Domains
wpforms.com101 · outbound
api.constantcontact.com5 · outbound
facebook.com5 · outbound
fontawesome.com4 · outbound
smashballoon.com4 · outbound
monsterinsights.com3 · outbound
Platform / Reference Domains
w3.org21 · platform/reference
wordpress.org20 · platform/reference
downloads.wordpress.org18 · platform/reference
github.com16 · platform/reference
opensource.org2 · platform/reference
gnu.org1 · platform/reference
External Asset Domains
youtube-nocookie.com2 · asset
Incoming Endpoints
wp_ajax_nopriv_wpforms_restricted_emailpublic
wp_ajax
wp_ajax_nopriv_wpforms_submitpublic
wp_ajax
Admin AJAX endpoints39
wp_ajax_wpforms_activate_addonauthenticated
wp_ajax
wp_ajax_wpforms_admin_form_embed_wizard_embed_page_urlauthenticated
wp_ajax
wp_ajax_wpforms_admin_form_embed_wizard_search_pages_choicesjsauthenticated
wp_ajax
wp_ajax_wpforms_admin_forms_overview_delete_tagsauthenticated
wp_ajax
wp_ajax_wpforms_admin_forms_overview_save_columns_orderauthenticated
wp_ajax
wp_ajax_wpforms_admin_forms_overview_save_tagsauthenticated
wp_ajax
wp_ajax_wpforms_ajax_search_pages_for_dropdownauthenticated
wp_ajax
wp_ajax_wpforms_builder_dynamic_choicesauthenticated
wp_ajax
wp_ajax_wpforms_builder_dynamic_sourceauthenticated
wp_ajax
wp_ajax_wpforms_builder_increase_next_field_idauthenticated
wp_ajax
wp_ajax_wpforms_builder_load_panelauthenticated
wp_ajax
wp_ajax_wpforms_builder_save_internal_information_checkboxauthenticated
wp_ajax
27 more hidden
Score History
3 score snapshots
v2.0.0.2
31
Latest
- Findings
- 499
- Errors
- 167
- Warnings
- 332
- Check
- 2.0.0
v1.10.2.1
32
Score
- Findings
- 438
- Errors
- 165
- Warnings
- 273
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 31 | 499 | 167 | 332 | v2.0.0.2 | 2.0.0 |
| 32 | 438 | 165 | 273 | v1.10.2.1 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Author
Category
Issue
Non-prefixed global variable237 findingsOutput is not escaped90 findingsDatabase parameter is not escaped69 findingsMissing direct file access protection32 findingsbadly named files29 findingsNon-prefixed hook name14 findingswp function not compatible with requires wp11 findingsNon-prefixed function4 findings
Domain
Related
Akismet Anti-spam: Spam Protection35 scoreContact Form 769 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce22 scoreElementor Website Builder – more than just a page builder35 scoreClassic Editor63 scoreLiteSpeed Cache35 scoreAll-in-One WP Migration and Backup34 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWP Mail SMTP by WPForms – The Most Popular SMTP and Email Log Plugin30 scoreAll in One SEO – AI SEO Plugin to Boost SEO Rankings & Traffic (Schema, Local SEO, Sitemap & SEO Insights)97 scoreWPCode – Insert Headers and Footers + Custom Code Snippets – WordPress Code Manager88 scoreDuplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More21 scoreOne Click Demo Import38 score
Author
Category
Issue
Non-prefixed global variable237 findingsOutput is not escaped90 findingsDatabase parameter is not escaped69 findingsMissing direct file access protection32 findingsbadly named files29 findingsNon-prefixed hook name14 findingswp function not compatible with requires wp11 findingsNon-prefixed function4 findings
Domain
Related
Akismet Anti-spam: Spam Protection35 scoreContact Form 769 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce22 scoreElementor Website Builder – more than just a page builder35 scoreClassic Editor63 scoreLiteSpeed Cache35 scoreAll-in-One WP Migration and Backup34 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWP Mail SMTP by WPForms – The Most Popular SMTP and Email Log Plugin30 scoreAll in One SEO – AI SEO Plugin to Boost SEO Rankings & Traffic (Schema, Local SEO, Sitemap & SEO Insights)97 scoreWPCode – Insert Headers and Footers + Custom Code Snippets – WordPress Code Manager88 scoreDuplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More21 scoreOne Click Demo Import38 score
Related Plugins
Add Password Field for Contact Form 7
3k+ active installs
100
Contact Form Query
1k+ active installs
100
Contact Forms by Cimatti
600 active installs
100
NEX-Forms ADD ON – Super Select
1k+ active installs
100
Style Contact Form 7
1k+ active installs
100
WS Form LITE – Drag & Drop Contact Form Builder
10k+ active installs
100