The best WordPress contact form plugin. Drag & Drop form builder to create beautiful contact forms, payment forms, & other custom forms.
Category Scores
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Maintainability
288
13 issue groups
Security
149
2 issue groups
Repo Compliance
1
1 issue group
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$active_network_plugins".191
- Category
- Maintainability
- Occurrences
- 191
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$active_network_plugins".
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found 'wpforms_datetime_format'.90
- Category
- Security
- Occurrences
- 90
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found 'wpforms_datetime_format'.
WARNINGSecurityDatabase parameter is not escapedUnescaped parameter $clause used in $wpdb->get_row()\n$clause used without escaping.59
- Category
- Security
- Occurrences
- 59
- Severity
- warning
Sample message
Unescaped parameter $clause used in $wpdb->get_row()\n$clause used without escaping.
ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;32
- Category
- Maintainability
- Occurrences
- 32
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
ERRORMaintainabilitybadly named filesFile and folder names must not contain spaces or special characters.27
- Category
- Maintainability
- Occurrences
- 27
- Severity
- error
Sample message
File and folder names must not contain spaces or special characters.
WARNINGMaintainabilityNon-prefixed hook nameHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "https_local_ssl_verify".14
- Category
- Maintainability
- Occurrences
- 14
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "https_local_ssl_verify".
ERRORMaintainabilitywp function not compatible with requires wpFunction "wp_get_sidebar()" requires WordPress 5.9.0, but your plugin minimum supported version is WordPress 5.5.0.11
- Category
- Maintainability
- Occurrences
- 11
- Severity
- error
Sample message
Function "wp_get_sidebar()" requires WordPress 5.9.0, but your plugin minimum supported version is WordPress 5.5.0.
WARNINGMaintainabilityNon-prefixed functionFunctions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "_wpforms_get_hierarchical_object_flatten".3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "_wpforms_get_hierarchical_object_flatten".
WARNINGMaintainabilitytrademarked termThe plugin name includes a restricted term. Your chosen plugin name - "WPForms - AI Form Builder for WordPress - Contact Forms, Payment Forms, Survey Form, Quiz & More" - contains the restricted term "wordpress" which cannot be used at all in your plugin name.3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
The plugin name includes a restricted term. Your chosen plugin name - "WPForms - AI Form Builder for WordPress - Contact Forms, Payment Forms, Survey Form, Quiz & More" - contains the restricted term "wordpress" which cannot be used at all in your plugin name.
ERRORMaintainabilitylibrary core filesLibrary files that are already in the WordPress core are not permitted.2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
Library files that are already in the WordPress core are not permitted.
Show 6 moreShow less
ERRORMaintainabilityForbidden PHP function found1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
The use of function wp_get_sidebars_widgets() is forbidden
ERRORMaintainabilityNot Allowed1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
Use of heredoc syntax (<<<) is not allowed; use standard strings or inline HTML instead
ERRORMaintainabilityPlugin Directory Write1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
Plugin folders are deleted when upgraded. Do not save data to the plugin folder using unzip_file(). Detected usage of constant WP_CONTENT_DIR. Use wp_upload_dir() to get the uploads directory path or save to the database instead.
WARNINGMaintainabilitymismatched plugin name1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Plugin name "WPForms - AI Form Builder for WordPress - Contact Forms, Payment Forms, Survey Form, Quiz & More" is different from the name declared in plugin header "WPForms Lite".
WARNINGMaintainabilitymissing composer json file1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
The "/vendor" directory using composer exists, but "composer.json" file is missing.
WARNINGRepo Compliancereadme parser warnings trimmed short description1
- Category
- Repo Compliance
- Occurrences
- 1
- Severity
- warning
Sample message
The "Short Description" section is too long and was truncated. A maximum of 150 characters is supported.
External Connections
Potential connections found in static code analysis.
Outbound calls
259
External assets
2
Incoming endpoints
39
Notable Domains
Platform / Reference Domains
External Asset Domains
Incoming Endpoints
wp_ajax
wp_ajax
Admin AJAX endpoints37
wp_ajax
wp_ajax
wp_ajax
wp_ajax
wp_ajax
wp_ajax
wp_ajax
wp_ajax
wp_ajax
wp_ajax
wp_ajax
wp_ajax
25 more hidden
Score History
2 score snapshots
v1.10.2.1
32
Latest
- Findings
- 438
- Errors
- 165
- Warnings
- 273
- Check
- 2.0.0
v1.10.2
31
Score
- Findings
- 436
- Errors
- 165
- Warnings
- 271
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 32 | 438 | 165 | 273 | v1.10.2.1 | 2.0.0 |
| 31 | 436 | 165 | 271 | v1.10.2 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.