Free WP Mail SMTP plugin - fix WordPress email deliverability with Gmail, Amazon SES, SendGrid, Mailgun, Cloudflare, Postmark, Brevo and any SMTP.
28
Score
110
Errors
92
Warnings
-1
Change
Category Scores
Security0
Repo100
Performance100
Maintainability15
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Maintainability
95
14 issue groups
Security
57
10 issue groups
I18n
30
1 issue group
ERRORI18nMissing Translators CommentA function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.30
- Category
- I18n
- Occurrences
- 30
- Severity
- error
Sample message
A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.
ERRORMaintainabilitycurl curl setoptUsing cURL functions is highly discouraged. Use wp_remote_get() instead.26
- Category
- Maintainability
- Occurrences
- 26
- Severity
- error
Sample message
Using cURL functions is highly discouraged. Use wp_remote_get() instead.
WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.22
- Category
- Security
- Occurrences
- 22
- Severity
- warning
Sample message
Processing form data without nonce verification.
ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;19
- Category
- Maintainability
- Occurrences
- 19
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$className".12
- Category
- Maintainability
- Occurrences
- 12
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$className".
WARNINGSecurityInterpolated SQL is not preparedUse placeholders and $wpdb->prepare(); found interpolated variable $table at "ALTER TABLE $table ADD INDEX `created_at_status` (`created_at`, `status`)"9
- Category
- Security
- Occurrences
- 9
- Severity
- warning
Sample message
Use placeholders and $wpdb->prepare(); found interpolated variable $table at "ALTER TABLE $table ADD INDEX `created_at_status` (`created_at`, `status`)"
WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.8
- Category
- Maintainability
- Occurrences
- 8
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().8
- Category
- Maintainability
- Occurrences
- 8
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
ERRORSecurityException output is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$tokens'.8
- Category
- Security
- Occurrences
- 8
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$tokens'.
WARNINGSecurityRequest data is not unslashed$_REQUEST['display_name'] not unslashed before sanitization. Use wp_unslash() or similar4
- Category
- Security
- Occurrences
- 4
- Severity
- warning
Sample message
$_REQUEST['display_name'] not unslashed before sanitization. Use wp_unslash() or similar
Show 15 moreShow less
WARNINGMaintainabilityNot In Footer4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- warning
Sample message
In footer ($in_footer) is not set explicitly wp_enqueue_script; It is recommended to load scripts in the footer. Please set this value to `true` to load it in the footer, or explicitly `false` if it should be loaded in the header.
WARNINGSecurityDatabase parameter is not escaped3
- Category
- Security
- Occurrences
- 3
- Severity
- warning
Sample message
Unescaped parameter $table used in $wpdb->get_var()
ERRORSecurityDatabase parameter is not escaped3
- Category
- Security
- Occurrences
- 3
- Severity
- error
Sample message
Unescaped parameter $selectClause used in $wpdb->get_results()\n$selectClause assigned unsafely at line 48.
WARNINGMaintainabilitySchema Change3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
Attempting a database schema change is discouraged.
ERRORMaintainabilitycurl curl errno3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- error
Sample message
Using cURL functions is highly discouraged. Use wp_remote_get() instead.
WARNINGMaintainabilityNon-prefixed hook name2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "phpmailer_init".
WARNINGMaintainabilityprevent path disclosure error reporting2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
error_reporting() can lead to full path disclosure.
WARNINGSecurityMissing nonce verification2
- Category
- Security
- Occurrences
- 2
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGSecuritywp redirect wp redirect2
- Category
- Security
- Occurrences
- 2
- Severity
- warning
Sample message
wp_redirect() found. Using wp_safe_redirect(), along with the "allowed_redirect_hosts" filter if needed, can help avoid any chances of malicious redirects within code. It is also important to remember to call exit() after a redirect so that no other unwanted code is executed.
WARNINGSecurityInput is not sanitized2
- Category
- Security
- Occurrences
- 2
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_REQUEST['s']
WARNINGSecurityInput is not validated2
- Category
- Security
- Occurrences
- 2
- Severity
- warning
Sample message
Detected usage of a possibly undefined superglobal array index: $_GET['page']. Check that the array index exists before using it.
ERRORMaintainabilitycurl curl close2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
Using cURL functions is highly discouraged. Use wp_remote_get() instead.
ERRORMaintainabilitycurl curl error2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
Using cURL functions is highly discouraged. Use wp_remote_get() instead.
ERRORMaintainabilitycurl curl exec2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
Using cURL functions is highly discouraged. Use wp_remote_get() instead.
ERRORMaintainabilitycurl curl getinfo2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
Using cURL functions is highly discouraged. Use wp_remote_get() instead.
External Connections
Potential connections found in static code analysis.
Outbound calls
297
External assets
1
Incoming endpoints
2
Notable Domains
apache.org52 · outbound
docs.aws.amazon.com10 · outbound
developers.google.com9 · outbound
developer.mozilla.org7 · outbound
momentjs.com7 · outbound
googleapis.com6 · outbound
Platform / Reference Domains
github.com42 · platform/reference
w3.org14 · platform/reference
wordpress.org6 · platform/reference
opensource.org3 · platform/reference
core.trac.wordpress.org2 · platform/reference
gnu.org2 · platform/reference
dev.w3.org1 · platform/reference
developer.wordpress.org1 · platform/reference
External Asset Domains
fluentsmtp.com34 · asset + outbound
Incoming Endpoints
/wp-json/fluent-smtp/outlook_callback/REST
register_rest_route
Admin AJAX endpoints1
wp_ajax_fluent_smtp_get_dashboard_htmlauthenticated
wp_ajax
Score History
2 score snapshots
v2.3.0
28
Latest
- Findings
- 202
- Errors
- 110
- Warnings
- 92
- Check
- 2.0.0
v2.2.95
29
Score
- Findings
- 152
- Errors
- 74
- Warnings
- 78
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 28 | 202 | 110 | 92 | v2.3.0 | 2.0.0 |
| 29 | 152 | 74 | 78 | v2.2.95 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Author
Issue
Domain
Related
WP Mail SMTP by WPForms – The Most Popular SMTP and Email Log Plugin30 scoreLiteSpeed Cache35 scoreWooCommerce21 scoreAll-in-One WP Migration and Backup34 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWPCode – Insert Headers and Footers + Custom Code Snippets – WordPress Code Manager88 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreComplianz – GDPR/CCPA Cookie Consent24 scoreDuplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More21 scoreFluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder23 scoreEasy WP SMTP – WordPress SMTP and Email Logs: Gmail SMTP, Office 365, Outlook, Custom SMTP, and more15 scoreGoSMTP – SMTP for WordPress39 scorePost SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App22 score
Author
Issue
Domain
Related
WP Mail SMTP by WPForms – The Most Popular SMTP and Email Log Plugin30 scoreLiteSpeed Cache35 scoreWooCommerce21 scoreAll-in-One WP Migration and Backup34 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWPCode – Insert Headers and Footers + Custom Code Snippets – WordPress Code Manager88 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreComplianz – GDPR/CCPA Cookie Consent24 scoreDuplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More21 scoreFluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder23 scoreEasy WP SMTP – WordPress SMTP and Email Logs: Gmail SMTP, Office 365, Outlook, Custom SMTP, and more15 scoreGoSMTP – SMTP for WordPress39 scorePost SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App22 score
Related Plugins
Configure SMTP
6k+ active installs
99
SMTP for Contact Form 7
1k+ active installs
99
Check & Log Email – Easy Email Testing & Mail logging
100k+ active installs
98
SAR Friendly SMTP
2k+ active installs
98
Simple SMTP
2k+ active installs
97
WP Offload SES Lite
10k+ active installs
96