Gravity PDF

Automatically generate, email and download PDF documents from Gravity Forms entries

v6.12.6.3Jake JacksonUpdated 2025-07-23Added Sep 10, 201220k+ installs98% rating100% support resolved
57
Score
116
Errors
152
Warnings
+0
Change

Category Scores

Security42
Repo94
Performance96
Maintainability52

Top Issues by Category

maintainability118
i18n106
security39
performance4
repo_compliance1

Issues Details

268 issues found in latest scan

WARNING77
WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedVariableFound

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$accent_colour".

ERROR72
WordPress.WP.I18n.MissingTranslatorsComment

A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.

ERROR30
WordPress.WP.I18n.TextDomainMismatch

Mismatched text domain. Expected 'gravity-forms-pdf-extended' but got 'gravityforms'.

WARNING23
WordPress.Security.ValidatedSanitizedInput.MissingUnslash

$_GET[$name] not unslashed before sanitization. Use wp_unslash() or similar

WARNING15
WordPress.Security.ValidatedSanitizedInput.InputNotSanitized

Detected usage of a non-sanitized input variable: $_GET[$name]

WARNING12
WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedConstantFound

Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "AUTOFONT_ALL".

WARNING7
WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedClassFound

Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "Controller_Activation".

WARNING6
WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedHooknameFound

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "gpdf_mpdf_font_descriptor".

ERROR5
wp_function_not_compatible_with_requires_wp

Function "wp_get_environment_type()" requires WordPress 5.5.0, but your plugin minimum supported version is WordPress 5.3.0.

WARNING4
WordPressVIPMinimum.Performance.WPQueryParams.PostNotIn_exclude

Using exclusionary parameters, like exclude, in calls to get_posts() should be done with caution, see https://wpvip.com/documentation/performance-improvements-by-removing-usage-of-post__not_in/ for more information.

ERROR4
missing_direct_file_access_protection

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

WARNING2
PluginCheck.CodeAnalysis.DiscouragedFunctions.load_plugin_textdomainFound

load_plugin_textdomain() has been discouraged since WordPress version 4.6. When your plugin is hosted on WordPress.org, you no longer need to manually include this function call for translations under your plugin slug. WordPress will automatically load the translations for you as needed.

WARNING2
WordPress.WP.I18n.TextDomainMismatch

Mismatched text domain. Expected 'gravity-forms-pdf-extended' but got 'default'.

WARNING1
WordPress.NamingConventions.PrefixAllGlobals.DynamicHooknameFound

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "$action".

WARNING1
WordPress.Security.ValidatedSanitizedInput.InputNotValidated

Detected usage of a possibly undefined superglobal array index: $_POST['_gform_setting_url']. Check that the array index exists before using it.

ERROR1
WordPress.WP.AlternativeFunctions.file_system_operations_fclose

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fclose().

ERROR1
WordPress.WP.AlternativeFunctions.file_system_operations_fopen

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fopen().

ERROR1
WordPress.WP.AlternativeFunctions.file_system_operations_fread

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fread().

WARNING1
missing_composer_json_file

The "/vendor" directory using composer exists, but "composer.json" file is missing.

ERROR1
outdated_tested_upto_header

Tested up to: 6.8 < 7.0. The "Tested up to" value in your plugin is not set to the current version of WordPress. This means your plugin will not show up in searches, as we require plugins to be compatible and documented as tested up to the most recent version of WordPress.

ERROR1
plugin_updater_detected

Plugin Updater detected. These are not permitted in WordPress.org hosted plugins. Detected: class EDD_SL_Plugin_Updater

WARNING1
trademarked_term

The plugin slug includes a restricted term. Your plugin slug - "gravity-forms-pdf-extended" - contains the restricted term "gravity-forms" and cannot be used to begin your plugin slug. We disallow the use of certain terms in ways that are abused, or potentially infringe on and/or are misleading with regards to trademarks. You may use the term "gravity-forms" elsewhere in your plugin slug, such as "... for gravity-forms".

Latest Snapshot

Findings

268

Errors

116

Warnings

152

Score History

First score snapshot

First scan completed Jun 20, 2026

v6.12.6.3 · Plugin Check 2.0.0 · Model 2026.06-mvp-static-v2

Jun 20, 2026

v6.12.6.3

57

Latest

Findings
268
Errors
116
Warnings
152
Plugin Check
2.0.0
Model
2026.06-mvp-static-v2

Related Plugins