Country & Phone Field Contact Form 7

Add country drop down with flags and phone number with country phone extension fields in contact form 7.

v2.6.5Narinder SinghUpdated 2026-03-04Added Aug 2, 201840k+ installs90% rating0% support resolved
39
Score
117
Errors
34
Warnings
+0
Change

Category Scores

Security0
Repo89
Performance100
Maintainability76

Top Issues by Category

i18n85
security51
maintainability13
repo_compliance2

Issues Details

151 issues found in latest scan

ERROR75
WordPress.WP.I18n.TextDomainMismatch

Mismatched text domain. Expected 'country-phone-field-contact-form-7' but got 'nb-cpf'.

ERROR11
WordPress.Security.EscapeOutput.UnsafePrintingFunction

All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.

ERROR10
WordPress.Security.EscapeOutput.OutputNotEscaped

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$args['description']'.

WARNING8
WordPress.Security.NonceVerification.Recommended

Processing form data without nonce verification.

WARNING8
WordPress.Security.ValidatedSanitizedInput.InputNotSanitized

Detected usage of a non-sanitized input variable: $_GET['tab']

WARNING6
WordPress.Security.ValidatedSanitizedInput.MissingUnslash

$_GET['tab'] not unslashed before sanitization. Use wp_unslash() or similar

WARNING5
WordPress.Security.NonceVerification.Missing

Processing form data without nonce verification.

ERROR5
missing_direct_file_access_protection

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

ERROR4
WordPress.WP.I18n.MissingArgDomain

Missing $domain parameter in function call to _e().

WARNING3
WordPress.Security.ValidatedSanitizedInput.InputNotValidated

Detected usage of a possibly undefined superglobal array index: $_POST[$name.'-country-code']. Check that the array index exists before using it.

ERROR3
WordPress.WP.I18n.MissingTranslatorsComment

A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.

ERROR2
WordPress.WP.AlternativeFunctions.strip_tags_strip_tags

strip_tags() is discouraged. Use the more comprehensive wp_strip_all_tags() instead.

WARNING2
WordPress.WP.EnqueuedResourceParameters.MissingVersion

Resource version not set in call to wp_enqueue_style(). This means new versions of the style may not always be loaded due to browser caching.

ERROR2
WordPress.WP.EnqueuedResourceParameters.NoExplicitVersion

Version parameter is not explicitly set or has been set to an equivalent of "false" for wp_enqueue_script; This means that the WordPress core version will be used which is not recommended for plugin or theme development.

WARNING1
PluginCheck.CodeAnalysis.DiscouragedFunctions.load_plugin_textdomainFound

load_plugin_textdomain() has been discouraged since WordPress version 4.6. When your plugin is hosted on WordPress.org, you no longer need to manually include this function call for translations under your plugin slug. WordPress will automatically load the translations for you as needed.

ERROR1
WordPress.WP.I18n.NonSingularStringLiteralText

The $text parameter must be a single text string literal. Found: 'Countries code must two character length and comma separated.\r\n Wrong Value: '.esc_attr($input[$key])

ERROR1
badly_named_files

File and folder names must not contain spaces or special characters.

ERROR1
license_mismatch

Your plugin has a different license declared in the readme file and plugin header. Please update your readme with a valid GPL license identifier.

ERROR1
outdated_tested_upto_header

Tested up to: 6.9 < 7.0. The "Tested up to" value in your plugin is not set to the current version of WordPress. This means your plugin will not show up in searches, as we require plugins to be compatible and documented as tested up to the most recent version of WordPress.

ERROR1
stable_tag_mismatch

Mismatched Stable Tag: 2.6.4 != 2.6.5. Your Stable Tag is meant to be the stable version of your plugin and it needs to be exactly the same with the Version in your main plugin file's header. Any mismatch can prevent users from downloading the correct plugin files from WordPress.org.

WARNING1
textdomain_mismatch

The "Text Domain" header in the plugin file does not match the slug. Found "nb-cpf", expected "country-phone-field-contact-form-7".

Latest Snapshot

Findings

151

Errors

117

Warnings

34

Score History

First score snapshot

First scan completed Jun 20, 2026

v2.6.5 · Plugin Check 2.0.0 · Model 2026.06-mvp-static-v2

Jun 20, 2026

v2.6.5

39

Latest

Findings
151
Errors
117
Warnings
34
Plugin Check
2.0.0
Model
2026.06-mvp-static-v2

Related Plugins