BlossomThemes Email Newsletter

Easily add email subscription form to your website using shortcode and widget.

v2.2.11Blossom ThemesUpdated 2026-04-06Added Oct 3, 201720k+ installs0% rating
23
Score
337
Errors
239
Warnings
+0
Change

Category Scores

Security0
Repo85
Performance100
Maintainability0

Top Issues by Category

security295
maintainability256
i18n8

Issues Details

576 issues found in latest scan

ERROR97
WordPress.Security.EscapeOutput.OutputNotEscaped

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '" --> Body: {$resp->body}"'.

ERROR88
WordPress.Security.EscapeOutput.UnsafePrintingFunction

All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.

WARNING69
WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedVariableFound

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$args".

ERROR51
WordPress.WP.AlternativeFunctions.curl_curl_setopt

Using cURL functions is highly discouraged. Use wp_remote_get() instead.

WARNING45
WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedClassFound

Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "AC_Account".

WARNING38
WordPress.Security.NonceVerification.Missing

Processing form data without nonce verification.

ERROR32
missing_direct_file_access_protection

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

WARNING23
WordPress.Security.ValidatedSanitizedInput.InputNotSanitized

Detected usage of a non-sanitized input variable: $_POST['blossomthemes_email_newsletter_setting']

WARNING20
WordPress.Security.ValidatedSanitizedInput.MissingUnslash

$_POST['bten_sendin_api_key'] not unslashed before sanitization. Use wp_unslash() or similar

ERROR14
WordPress.Security.EscapeOutput.ExceptionNotEscaped

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$data['error']'.

ERROR10
WordPress.WP.AlternativeFunctions.curl_curl_init

Using cURL functions is highly discouraged. Use wp_remote_get() instead.

WARNING9
WordPress.Security.ValidatedSanitizedInput.InputNotValidated

Detected usage of a possibly undefined superglobal array index: $_POST['email']. Check that the array index exists before using it.

ERROR8
WordPress.WP.AlternativeFunctions.curl_curl_close

Using cURL functions is highly discouraged. Use wp_remote_get() instead.

ERROR8
WordPress.WP.I18n.MissingTranslatorsComment

A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.

ERROR7
WordPress.WP.AlternativeFunctions.curl_curl_exec

Using cURL functions is highly discouraged. Use wp_remote_get() instead.

WARNING6
WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedHooknameFound

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "bten_icon_header_img_size".

WARNING6
WordPress.Security.NonceVerification.Recommended

Processing form data without nonce verification.

ERROR5
WordPress.WP.AlternativeFunctions.curl_curl_error

Using cURL functions is highly discouraged. Use wp_remote_get() instead.

ERROR5
WordPress.WP.AlternativeFunctions.curl_curl_getinfo

Using cURL functions is highly discouraged. Use wp_remote_get() instead.

WARNING4
WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedFunctionFound

Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "activate_blossomthemes_email_newsletter".

WARNING4
WordPress.PHP.DevelopmentFunctions.error_log_trigger_error

trigger_error() found. Debug code should not normally be used in production.

WARNING3
WordPress.PHP.DevelopmentFunctions.error_log_error_log

error_log() found. Debug code should not normally be used in production.

ERROR3
WordPress.WP.AlternativeFunctions.curl_curl_setopt_array

Using cURL functions is highly discouraged. Use wp_remote_get() instead.

WARNING2
WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedConstantFound

Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "ACTIVECAMPAIGN_API_KEY".

WARNING2
WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedInterfaceFound

Interfaces declared by a theme/plugin should start with the theme/plugin prefix. Found: "AWeberOAuthAdapter".

Latest Snapshot

Findings

576

Errors

337

Warnings

239

Score History

First score snapshot

First scan completed Jun 20, 2026

v2.2.11 · Plugin Check 2.0.0 · Model 2026.06-mvp-static-v2

Jun 20, 2026

v2.2.11

23

Latest

Findings
576
Errors
337
Warnings
239
Plugin Check
2.0.0
Model
2026.06-mvp-static-v2

Related Plugins