Launch and grow your email marketing effortlessly with Hostinger Reach. Collect contacts, sync subscribers, and send emails – all in one, AI powered.
39
Score
12
Errors
51
Warnings
+0
Change
Category Scores
Security0
Repo94
Performance100
Maintainability75
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Security
32
8 issue groups
Maintainability
30
12 issue groups
Repo Compliance
1
1 issue group
WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.7
- Category
- Maintainability
- Occurrences
- 7
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().7
- Category
- Maintainability
- Occurrences
- 7
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
WARNINGSecurityMissing nonce verificationProcessing form data without nonce verification.7
- Category
- Security
- Occurrences
- 7
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGSecurityRequest data is not unslashed$_GET['platform'] not unslashed before sanitization. Use wp_unslash() or similar7
- Category
- Security
- Occurrences
- 7
- Severity
- warning
Sample message
$_GET['platform'] not unslashed before sanitization. Use wp_unslash() or similar
WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.6
- Category
- Security
- Occurrences
- 6
- Severity
- warning
Sample message
Processing form data without nonce verification.
ERRORMaintainabilityOffloaded ContentOffloading images, js, css, and other scripts to your servers or any remote service is disallowed.5
- Category
- Maintainability
- Occurrences
- 5
- Severity
- error
Sample message
Offloading images, js, css, and other scripts to your servers or any remote service is disallowed.
WARNINGSecurityInput is not validatedDetected usage of a possibly undefined superglobal array index: $_POST['choice']. Check that the array index exists before using it.4
- Category
- Security
- Occurrences
- 4
- Severity
- warning
Sample message
Detected usage of a possibly undefined superglobal array index: $_POST['choice']. Check that the array index exists before using it.
WARNINGSecurityDatabase parameter is not escapedUnescaped parameter $sql used in $wpdb->get_results()\n$sql assigned unsafely at line 225.3
- Category
- Security
- Occurrences
- 3
- Severity
- warning
Sample message
Unescaped parameter $sql used in $wpdb->get_results()\n$sql assigned unsafely at line 225.
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_POST['actions']3
- Category
- Security
- Occurrences
- 3
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_POST['actions']
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$is_opted_in".2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$is_opted_in".
Show 11 moreShow less
ERRORMaintainabilityparse url parse url2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
parse_url() is discouraged because of inconsistency in the output across PHP versions; use wp_parse_url() instead.
WARNINGMaintainabilityslow db query meta query1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Detected usage of meta_query, possible slow query.
WARNINGMaintainabilityDynamic hook name1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "self::START_HOOK_JOB_NAME".
ERRORSecurityException output is not escaped1
- Category
- Security
- Occurrences
- 1
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '__'.
ERRORSecurityUnsafe printing function1
- Category
- Security
- Occurrences
- 1
- Severity
- error
Sample message
All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.
WARNINGMaintainabilityMissing Version1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Resource version not set in call to wp_enqueue_script(). This means new versions of the script may not always be loaded due to browser caching.
ERRORMaintainabilityblock api version too low1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
Editor blocks must define "apiVersion" 3 or higher in block.json for WordPress 7.0+ iframe editor compatibility.
WARNINGMaintainabilitymismatched plugin name1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Plugin name "Hostinger Reach - AI-Powered Email Marketing for WordPress" is different from the name declared in plugin header "Hostinger Reach".
ERRORMaintainabilityMissing direct file access protection1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
ERRORRepo Compliancereadme mismatched header requires php1
- Category
- Repo Compliance
- Occurrences
- 1
- Severity
- error
Sample message
Mismatched Requires PHP: 8.0 != 8.1. "Requires PHP" needs to be exactly the same with that in your main plugin file's header.
WARNINGMaintainabilitytrademarked term1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
The plugin name includes a restricted term. Your chosen plugin name - "Hostinger Reach - AI-Powered Email Marketing for WordPress" - contains the restricted term "wordpress" which cannot be used at all in your plugin name.
External Connections
Potential connections found in static code analysis.
Outbound calls
234
External assets
1
Incoming endpoints
4
Notable Domains
hostinger.com69 · outbound
localise.biz25 · outbound
reach.hostinger.com7 · outbound
php.net5 · outbound
actionscheduler.org4 · outbound
en.wikipedia.org4 · outbound
Platform / Reference Domains
wordpress.org34 · platform/reference
w3.org32 · platform/reference
downloads.wordpress.org12 · platform/reference
github.com9 · platform/reference
ps.w.org5 · platform/reference
core.trac.wordpress.org2 · platform/reference
gnu.org2 · platform/reference
plugins.svn.wordpress.org1 · platform/reference
External Asset Domains
fonts.googleapis.com1 · asset
Incoming Endpoints
/wp-json/hostinger-reach/v1/optinmonsterREST
register_rest_route
wp_ajax_nopriv_public
wp_ajax
wp_ajax_nopriv_abandoned-cartspublic
wp_ajax
Admin AJAX endpoints1
wp_ajax_hostinger_authenticated
wp_ajax
Score History
15 score snapshots
v1.8.2
39
Latest
- Findings
- 63
- Errors
- 12
- Warnings
- 51
- Check
- 2.1.0
v1.8.1
39
Score
- Findings
- 63
- Errors
- 12
- Warnings
- 51
- Check
- 2.1.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 39 | 63 | 12 | 51 | v1.8.2 | 2.1.0 |
| 39 | 63 | 12 | 51 | v1.8.1 | 2.1.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Author
Category
Issue
Domain
Related
Contact Form 769 scoreElementor Website Builder – more than just a page builder39 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce22 scoreAkismet Anti-spam: Spam Protection35 scoreLiteSpeed Cache35 scoreAll-in-One WP Migration and Backup34 scoreHostinger Tools82 scoreMC4WP: Mailchimp for WordPress56 scorePopup Builder & Popup Maker for WordPress – OptinMonster Email Marketing and Lead Generation34 scorePopup Maker – Boost Sales, Conversions, Optins, Subscribers with the Ultimate WP Popup Builder66 scoreMailPoet – Newsletters, Email Marketing, and Automation23 scoreCartFlows – Funnel Builder & Checkout Plugin for WooCommerce22 scoreHubSpot All-In-One Marketing – Forms, Popups, Live Chat98 score
Author
Category
Issue
Domain
Related
Contact Form 769 scoreElementor Website Builder – more than just a page builder39 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce22 scoreAkismet Anti-spam: Spam Protection35 scoreLiteSpeed Cache35 scoreAll-in-One WP Migration and Backup34 scoreHostinger Tools82 scoreMC4WP: Mailchimp for WordPress56 scorePopup Builder & Popup Maker for WordPress – OptinMonster Email Marketing and Lead Generation34 scorePopup Maker – Boost Sales, Conversions, Optins, Subscribers with the Ultimate WP Popup Builder66 scoreMailPoet – Newsletters, Email Marketing, and Automation23 scoreCartFlows – Funnel Builder & Checkout Plugin for WooCommerce22 scoreHubSpot All-In-One Marketing – Forms, Popups, Live Chat98 score
Related Plugins
GetResponse Official
4k+ active installs
100
Block for Mailchimp – grow your email list with signup forms
2k+ active installs
100
Coupon Shortcodes for WooCommerce
1k+ active installs
100
What Would Seth Godin Do
900 active installs
100
Email Marketing for WordPress and WooCommerce – Retainful
500 active installs
100
Advanced Popups
60k+ active installs
99