Akismet Anti-spam: Spam Protection

The best anti-spam protection to block spam comments and spam in a contact form. The most trusted antispam solution for WordPress and WooCommerce.

v5.7AutomatticUpdated 2026-04-23Added Oct 20, 20056m+ installs94% rating100% support resolved
35
Score
33
Errors
99
Warnings
+0
Change

Category Scores

Security9
Repo90
Performance100
Maintainability54

Top Issues by Category

maintainability100
security31
supply_chain1

Issues Details

132 issues found in latest scan

WARNING25
WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedVariableFound

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$at_least_one_comment_in_moderation".

WARNING19
WordPress.Security.NonceVerification.Recommended

Processing form data without nonce verification.

ERROR19
missing_direct_file_access_protection

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

WARNING18
WordPress.DB.DirectDatabaseQuery.DirectQuery

Use of a direct database call is discouraged.

WARNING14
WordPress.DB.DirectDatabaseQuery.NoCaching

Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().

ERROR4
WordPress.DB.PreparedSQL.NotPrepared

Use placeholders and $wpdb->prepare(); found $comment_type_where

WARNING4
WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedHooknameFound

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "comment_add_author_url".

ERROR4
WordPress.WP.AlternativeFunctions.rand_mt_rand

mt_rand() is discouraged. Use the far less predictable wp_rand() instead.

ERROR3
wp_function_not_compatible_with_requires_wp

Function "did_filter()" requires WordPress 6.1.0, but your plugin minimum supported version is WordPress 5.8.0.

WARNING2
PluginCheck.Security.DirectDB.UnescapedDBParameter

Unescaped parameter $comment_type_where used in $wpdb->get_var()\n$comment_type_where assigned unsafely at line 998.

WARNING2
WordPress.DB.PreparedSQLPlaceholders.UnfinishedPrepare

Replacement variables found, but no valid placeholders found in the query.

WARNING2
WordPress.DB.SlowDBQuery.slow_db_query_meta_key

Detected usage of meta_key, possible slow query.

WARNING2
WordPress.PHP.DevelopmentFunctions.error_log_error_log

error_log() found. Debug code should not normally be used in production.

WARNING2
WordPress.PHP.DevelopmentFunctions.error_log_print_r

print_r() found. Debug code should not normally be used in production.

WARNING2
WordPress.Security.NonceVerification.Missing

Processing form data without nonce verification.

WARNING2
WordPress.WP.EnqueuedResourceParameters.NotInFooter

In footer ($in_footer) is not set explicitly wp_register_script; It is recommended to load scripts in the footer. Please set this value to `true` to load it in the footer, or explicitly `false` if it should be loaded in the header.

WARNING2
trademarked_term

The plugin name includes a restricted term. Your chosen plugin name - "Akismet Anti-spam: Spam Protection" - contains the restricted term "akismet" and cannot be used to begin your plugin name. We disallow the use of certain terms in ways that are abused, or potentially infringe on and/or are misleading with regards to trademarks. You may use the term "akismet" elsewhere in your plugin name, such as "... for akismet".

WARNING1
WordPress.DB.SlowDBQuery.slow_db_query_meta_value

Detected usage of meta_value, possible slow query.

WARNING1
WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedFunctionFound

Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "redirect_old_akismet_urls".

ERROR1
WordPress.Security.EscapeOutput.OutputNotEscaped

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found 'apply_filters'.

WARNING1
WordPress.Security.SafeRedirect.wp_redirect_wp_redirect

wp_redirect() found. Using wp_safe_redirect(), along with the "allowed_redirect_hosts" filter if needed, can help avoid any chances of malicious redirects within code. It is also important to remember to call exit() after a redirect so that no other unwanted code is executed.

ERROR1
badly_named_files

File and folder names must not contain spaces or special characters.

ERROR1
hidden_files

Hidden files are not permitted.

Latest Snapshot

Findings

132

Errors

33

Warnings

99

Score History

First score snapshot

First scan completed Jun 19, 2026

v5.7 · Plugin Check 2.0.0 · Model 2026.06-mvp-static-v2

Jun 19, 2026

v5.7

35

Latest

Findings
132
Errors
33
Warnings
99
Plugin Check
2.0.0
Model
2026.06-mvp-static-v2

Related Plugins