Free WP Mail SMTP plugin. Fix WordPress email deliverability with Gmail, Amazon SES, SendGrid, Mailgun, Postmark, Cloudflare, Brevo or any SMTP.
27
Score
119
Errors
92
Warnings
-1
Change
Category Scores
Security0
Repo100
Performance100
Maintainability9
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Maintainability
97
14 issue groups
Security
59
10 issue groups
I18n
32
1 issue group
ERRORI18nMissing Translators CommentA function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.32
- Category
- I18n
- Occurrences
- 32
- Severity
- error
Sample message
A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.
ERRORMaintainabilitycurl curl setoptUsing cURL functions is highly discouraged. Use wp_remote_get() instead.27
- Category
- Maintainability
- Occurrences
- 27
- Severity
- error
Sample message
Using cURL functions is highly discouraged. Use wp_remote_get() instead.
WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.24
- Category
- Security
- Occurrences
- 24
- Severity
- warning
Sample message
Processing form data without nonce verification.
ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;19
- Category
- Maintainability
- Occurrences
- 19
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$className".12
- Category
- Maintainability
- Occurrences
- 12
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$className".
WARNINGSecurityInterpolated SQL is not preparedUse placeholders and $wpdb->prepare(); found interpolated variable $table at "ALTER TABLE $table ADD INDEX `created_at_status` (`created_at`, `status`)"9
- Category
- Security
- Occurrences
- 9
- Severity
- warning
Sample message
Use placeholders and $wpdb->prepare(); found interpolated variable $table at "ALTER TABLE $table ADD INDEX `created_at_status` (`created_at`, `status`)"
WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.8
- Category
- Maintainability
- Occurrences
- 8
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().8
- Category
- Maintainability
- Occurrences
- 8
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
ERRORSecurityException output is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$tokens'.8
- Category
- Security
- Occurrences
- 8
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$tokens'.
ERRORMaintainabilityOffloaded ContentOffloading images, js, css, and other scripts to your servers or any remote service is disallowed.5
- Category
- Maintainability
- Occurrences
- 5
- Severity
- error
Sample message
Offloading images, js, css, and other scripts to your servers or any remote service is disallowed.
Show 15 moreShow less
WARNINGSecurityRequest data is not unslashed4
- Category
- Security
- Occurrences
- 4
- Severity
- warning
Sample message
$_REQUEST['display_name'] not unslashed before sanitization. Use wp_unslash() or similar
WARNINGSecurityDatabase parameter is not escaped3
- Category
- Security
- Occurrences
- 3
- Severity
- warning
Sample message
Unescaped parameter $table used in $wpdb->get_var()
ERRORSecurityDatabase parameter is not escaped3
- Category
- Security
- Occurrences
- 3
- Severity
- error
Sample message
Unescaped parameter $selectClause used in $wpdb->get_results()\n$selectClause assigned unsafely at line 72.
WARNINGMaintainabilitySchema Change3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
Attempting a database schema change is discouraged.
ERRORMaintainabilitycurl curl errno3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- error
Sample message
Using cURL functions is highly discouraged. Use wp_remote_get() instead.
WARNINGMaintainabilityDirect Error Reporting Call2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
Detected production-time change to PHP error reporting: error_reporting().
WARNINGMaintainabilityNon-prefixed hook name2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "phpmailer_init".
WARNINGMaintainabilityprevent path disclosure error reporting2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
error_reporting() can lead to full path disclosure.
ERRORSecurityOutput is not escaped2
- Category
- Security
- Occurrences
- 2
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$output'.
WARNINGSecurityMissing nonce verification2
- Category
- Security
- Occurrences
- 2
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGSecurityInput is not sanitized2
- Category
- Security
- Occurrences
- 2
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_REQUEST['s']
WARNINGSecurityInput is not validated2
- Category
- Security
- Occurrences
- 2
- Severity
- warning
Sample message
Detected usage of a possibly undefined superglobal array index: $_GET['page']. Check that the array index exists before using it.
ERRORMaintainabilitycurl curl close2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
Using cURL functions is highly discouraged. Use wp_remote_get() instead.
ERRORMaintainabilitycurl curl error2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
Using cURL functions is highly discouraged. Use wp_remote_get() instead.
ERRORMaintainabilitycurl curl exec2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
Using cURL functions is highly discouraged. Use wp_remote_get() instead.
External Connections
Potential connections found in static code analysis.
Outbound calls
297
External assets
1
Incoming endpoints
2
Notable Domains
apache.org102 · outbound
googleapis.com23 · outbound
developers.google.com14 · outbound
docs.aws.amazon.com11 · outbound
tools.ietf.org8 · outbound
accounts.google.com5 · outbound
Platform / Reference Domains
github.com17 · platform/reference
w3.org10 · platform/reference
opensource.org3 · platform/reference
core.trac.wordpress.org2 · platform/reference
gnu.org2 · platform/reference
wordpress.org2 · platform/reference
developer.wordpress.org1 · platform/reference
External Asset Domains
fluentsmtp.com41 · asset + outbound
Incoming Endpoints
/wp-json/fluent-smtp/outlook_callback/REST
register_rest_route
Admin AJAX endpoints1
wp_ajax_fluent_smtp_get_dashboard_htmlauthenticated
wp_ajax
Score History
4 score snapshots
v2.4.0
27
Latest
- Findings
- 211
- Errors
- 119
- Warnings
- 92
- Check
- 2.1.0
v2.3.1
28
Score
- Findings
- 202
- Errors
- 110
- Warnings
- 92
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 27 | 211 | 119 | 92 | v2.4.0 | 2.1.0 |
| 28 | 202 | 110 | 92 | v2.3.1 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Author
Issue
Domain
Related
WP Offload SES Lite96 scoreSwift SMTP (formerly Welcome Email Editor)51 scoreBit SMTP – Easy SMTP Solution with Email Logs96 scoreWooCommerce22 scoreLiteSpeed Cache35 scoreAll-in-One WP Migration and Backup34 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWP Mail SMTP by WPForms – The Most Popular SMTP and Email Log Plugin30 scoreWPCode – Insert Headers and Footers + Custom Code Snippets – WordPress Code Manager88 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreComplianz GDPR/CCPA Cookie Consent Banner24 scoreDuplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More20 scoreLimit Login Attempts Security – Login Security, 2FA, Firewall, Brute Force Prevention24 score
Author
Issue
Domain
Related
WP Offload SES Lite96 scoreSwift SMTP (formerly Welcome Email Editor)51 scoreBit SMTP – Easy SMTP Solution with Email Logs96 scoreWooCommerce22 scoreLiteSpeed Cache35 scoreAll-in-One WP Migration and Backup34 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWP Mail SMTP by WPForms – The Most Popular SMTP and Email Log Plugin30 scoreWPCode – Insert Headers and Footers + Custom Code Snippets – WordPress Code Manager88 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreComplianz GDPR/CCPA Cookie Consent Banner24 scoreDuplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More20 scoreLimit Login Attempts Security – Login Security, 2FA, Firewall, Brute Force Prevention24 score
Related Plugins
iConvert Email Marketer
700 active installs
99
WP Offload SES Lite
10k+ active installs
96
Bit SMTP – Easy SMTP Solution with Email Logs
2k+ active installs
96
Mailster Mailgun Integration
500 active installs
77
Connect SendGrid for Emails
800 active installs
59
Swift SMTP (formerly Welcome Email Editor)
7k+ active installs
51