Laposta Signup Basic

Laposta is a Dutch email marketing tool. Load your Laposta lists and render fields in a HTML form with custom styling.

v3.4.0stijnvanderreeUpdated Added 2k+ installs100% rating100% support resolved
28
Score
276
Errors
67
Warnings
+0
Change

Category Scores

Security0
Repo79
Performance100
Maintainability33

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

343 findings

Security

234

6 issue groups

Maintainability

98

17 issue groups

I18n

3

2 issue groups

ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$checkInputClass'.166
Category
Security
Occurrences
166
Severity
error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$checkInputClass'.

WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$addClassesOptionVal".39
Category
Maintainability
Occurrences
39
Severity
warning

Sample message

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$addClassesOptionVal".

ERRORSecuritySetting is missing a sanitization callbackSanitization missing for register_setting().30
Category
Security
Occurrences
30
Severity
error

Sample message

Sanitization missing for register_setting().

ERRORSecurityException output is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"Could not set cURL option {$option}"'.28
Category
Security
Occurrences
28
Severity
error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"Could not set cURL option {$option}"'.

ERRORMaintainabilitycurl curl setoptUsing cURL functions is highly discouraged. Use wp_remote_get() instead.16
Category
Maintainability
Occurrences
16
Severity
error

Sample message

Using cURL functions is highly discouraged. Use wp_remote_get() instead.

WARNINGMaintainabilityDynamic hook nameHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "Plugin::FILTER_FIELD_DEFAULT_SELECT_OPTION_TEXT".12
Category
Maintainability
Occurrences
12
Severity
warning

Sample message

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "Plugin::FILTER_FIELD_DEFAULT_SELECT_OPTION_TEXT".

ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;8
Category
Maintainability
Occurrences
8
Severity
error

Sample message

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_GET['reset_cache_nonce']4
Category
Security
Occurrences
4
Severity
warning

Sample message

Detected usage of a non-sanitized input variable: $_GET['reset_cache_nonce']

WARNINGSecurityRequest data is not unslashed$_GET['reset_cache_nonce'] not unslashed before sanitization. Use wp_unslash() or similar4
Category
Security
Occurrences
4
Severity
warning

Sample message

$_GET['reset_cache_nonce'] not unslashed before sanitization. Use wp_unslash() or similar

ERRORMaintainabilityShort PHP open tag foundShort PHP opening tag used with echo; expected "<?php echo $fieldWrapperTag ..." but found "<?= $fieldWrapperTag ..."3
Category
Maintainability
Occurrences
3
Severity
error

Sample message

Short PHP opening tag used with echo; expected "<?php echo $fieldWrapperTag ..." but found "<?= $fieldWrapperTag ..."

Show 15 more
ERRORMaintainabilitywp function not compatible with requires wp3
Category
Maintainability
Occurrences
3
Severity
error

Sample message

Function "determine_locale()" requires WordPress 5.0.0, but your plugin minimum supported version is WordPress 4.7.0.

WARNINGSecurityNonce verification recommended2
Category
Security
Occurrences
2
Severity
warning

Sample message

Processing form data without nonce verification.

ERRORMaintainabilitycurl curl close2
Category
Maintainability
Occurrences
2
Severity
error

Sample message

Using cURL functions is highly discouraged. Use wp_remote_get() instead.

ERRORMaintainabilitycurl curl errno2
Category
Maintainability
Occurrences
2
Severity
error

Sample message

Using cURL functions is highly discouraged. Use wp_remote_get() instead.

ERRORMaintainabilitycurl curl error2
Category
Maintainability
Occurrences
2
Severity
error

Sample message

Using cURL functions is highly discouraged. Use wp_remote_get() instead.

ERRORMaintainabilitycurl curl exec2
Category
Maintainability
Occurrences
2
Severity
error

Sample message

Using cURL functions is highly discouraged. Use wp_remote_get() instead.

ERRORMaintainabilitycurl curl getinfo2
Category
Maintainability
Occurrences
2
Severity
error

Sample message

Using cURL functions is highly discouraged. Use wp_remote_get() instead.

ERRORMaintainabilitycurl curl init2
Category
Maintainability
Occurrences
2
Severity
error

Sample message

Using cURL functions is highly discouraged. Use wp_remote_get() instead.

ERRORI18nMissing Translators Comment2
Category
I18n
Occurrences
2
Severity
error

Sample message

A function call to esc_html__() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.

WARNINGI18nDiscouraged text-domain loading1
Category
I18n
Occurrences
1
Severity
warning

Sample message

load_plugin_textdomain() has been discouraged since WordPress version 4.6. When your plugin is hosted on WordPress.org, you no longer need to manually include this function call for translations under your plugin slug. WordPress will automatically load the translations for you as needed.

WARNINGMaintainabilityNon-prefixed function1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: &quot;encode_items&quot;.

WARNINGMaintainabilityerror log error log1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

error_log() found. Debug code should not normally be used in production.

WARNINGMaintainabilityerror log print r1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

print_r() found. Debug code should not normally be used in production.

WARNINGMaintainabilityerror log trigger error1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

trigger_error() found. Debug code should not normally be used in production.

ERRORMaintainabilityfile system operations fclose1
Category
Maintainability
Occurrences
1
Severity
error

Sample message

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fclose().

External Connections

Potential connections found in static code analysis.

9 domains

Outbound calls

37

External assets

0

Incoming endpoints

1

Notable Domains

tools.ietf.org16 · outbound
php.net9 · outbound
iana.org2 · outbound
ietf.org2 · outbound
php-fig.org2 · outbound
docs.laposta.nl1 · outbound

Platform / Reference Domains

github.com3 · platform/reference

External Asset Domains

No external asset domains detected.

Incoming Endpoints

wp_ajax_nopriv_public

wp_ajax

Score History

2 score snapshots

+0
1007550250Jun 21, 2026, 02:44 PM UTC Score 28/100 Plugin v3.3.2 Plugin Check 2.0.0 275 errors, 66 warningsJun 30, 2026, 07:59 AM UTC Score 28/100 Plugin v3.4.0 Plugin Check 2.0.0 276 errors, 67 warningsJun 21, 2026Jun 30, 2026

v3.4.0

28

Latest

Findings
343
Errors
276
Warnings
67
Check
2.0.0

v3.3.2

28

Score

Findings
341
Errors
275
Warnings
66
Check
2.0.0

Relationship Map

Author, categories, issues, domains, and nearby plugins.

37 nodes

Related Plugins

Contact Form Query

1k+ active installs

100
100
Disable Emojis (GDPR friendly)

60k+ active installs

100
EU Withdrawal Compliance

900 active installs

100
GetResponse Official

4k+ active installs

100