MailChimp Subscribe Form, Optin Builder, PopUp Builder, Form Builder

MailChimp Subscribe Form allows you to create Beautiful Professional looking Subscribe Forms, Popups, bars & full page optins easily in less than …

v4.3.3PluginOpsUpdated Added 2k+ installs80% rating
21
Score
1,133
Errors
3,011
Warnings
+0
Change

Category Scores

Security0
Repo75
Performance98
Maintainability0

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

4,144 findings

Maintainability

2,731

17 issue groups

Security

1,310

7 issue groups

I18n

18

1 issue group

WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$$cookieScriptCounter".2,285
Category
Maintainability
Occurrences
2,285
Severity
warning

Sample message

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$$cookieScriptCounter".

ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '" #fullPageBgOverlay_$current_pageID { $bodyOverlayBackgroundOptions }"'.778
Category
Security
Occurrences
778
Severity
error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '" #fullPageBgOverlay_$current_pageID { $bodyOverlayBackgroundOptions }"'.

WARNINGSecurityRequest data is not unslashed$_COOKIE[$key] not unslashed before sanitization. Use wp_unslash() or similar177
Category
Security
Occurrences
177
Severity
warning

Sample message

$_COOKIE[$key] not unslashed before sanitization. Use wp_unslash() or similar

WARNINGSecurityInput is not validatedDetected usage of a possibly undefined superglobal array index: $_COOKIE[$this->tag . '-' . $this->test_name]. Check that the array index exists before using it.155
Category
Security
Occurrences
155
Severity
warning

Sample message

Detected usage of a possibly undefined superglobal array index: $_COOKIE[$this->tag . '-' . $this->test_name]. Check that the array index exists before using it.

WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_COOKIE[$key]101
Category
Security
Occurrences
101
Severity
warning

Sample message

Detected usage of a non-sanitized input variable: $_COOKIE[$key]

ERRORMaintainabilitycurl curl setoptUsing cURL functions is highly discouraged. Use wp_remote_get() instead.78
Category
Maintainability
Occurrences
78
Severity
error

Sample message

Using cURL functions is highly discouraged. Use wp_remote_get() instead.

WARNINGMaintainabilityNon-prefixed functionFunctions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "CS_REST_SERIALISATION_get_available".72
Category
Maintainability
Occurrences
72
Severity
warning

Sample message

Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "CS_REST_SERIALISATION_get_available".

WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.67
Category
Security
Occurrences
67
Severity
warning

Sample message

Processing form data without nonce verification.

WARNINGMaintainabilityNon-prefixed classClasses declared by a theme/plugin should start with the theme/plugin prefix. Found: "AWeberAPI".56
Category
Maintainability
Occurrences
56
Severity
warning

Sample message

Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "AWeberAPI".

WARNINGMaintainabilityNon-prefixed constantGlobal constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "CS_HOST".39
Category
Maintainability
Occurrences
39
Severity
warning

Sample message

Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "CS_HOST".

Show 15 more
ERRORMaintainabilityMissing direct file access protection26
Category
Maintainability
Occurrences
26
Severity
error

Sample message

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

ERRORMaintainabilitydate date24
Category
Maintainability
Occurrences
24
Severity
error

Sample message

date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.

ERRORMaintainabilityrand rand24
Category
Maintainability
Occurrences
24
Severity
error

Sample message

rand() is discouraged. Use the far less predictable wp_rand() instead.

ERRORMaintainabilitywp function not compatible with requires wp22
Category
Maintainability
Occurrences
22
Severity
error

Sample message

Function "get_preview_post_link()" requires WordPress 4.4.0, but your plugin minimum supported version is WordPress 3.2.0.

ERRORSecurityException output is not escaped19
Category
Security
Occurrences
19
Severity
error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$data['error']'.

ERRORMaintainabilityNo Explicit Version18
Category
Maintainability
Occurrences
18
Severity
error

Sample message

Version parameter is not explicitly set or has been set to an equivalent of "false" for wp_enqueue_script; This means that the WordPress core version will be used which is not recommended for plugin or theme development.

ERRORI18nText Domain Mismatch18
Category
I18n
Occurrences
18
Severity
error

Sample message

Mismatched text domain. Expected 'mailchimp-subscribe-sm' but got 'page-builder-add'.

WARNINGMaintainabilityerror log trigger error16
Category
Maintainability
Occurrences
16
Severity
warning

Sample message

trigger_error() found. Debug code should not normally be used in production.

ERRORMaintainabilitycurl curl exec14
Category
Maintainability
Occurrences
14
Severity
error

Sample message

Using cURL functions is highly discouraged. Use wp_remote_get() instead.

ERRORMaintainabilitycurl curl init14
Category
Maintainability
Occurrences
14
Severity
error

Sample message

Using cURL functions is highly discouraged. Use wp_remote_get() instead.

ERRORSecurityUnsafe printing function13
Category
Security
Occurrences
13
Severity
error

Sample message

All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.

ERRORMaintainabilitycurl curl error12
Category
Maintainability
Occurrences
12
Severity
error

Sample message

Using cURL functions is highly discouraged. Use wp_remote_get() instead.

ERRORMaintainabilitycurl curl close11
Category
Maintainability
Occurrences
11
Severity
error

Sample message

Using cURL functions is highly discouraged. Use wp_remote_get() instead.

ERRORMaintainabilitytimezone change date default timezone set10
Category
Maintainability
Occurrences
10
Severity
error

Sample message

Using date_default_timezone_set() and similar isn't allowed, instead use WP internal timezone support.

WARNINGMaintainabilityMissing Version10
Category
Maintainability
Occurrences
10
Severity
warning

Sample message

Resource version not set in call to wp_enqueue_style(). This means new versions of the style may not always be loaded due to browser caching.

External Connections

Not analyzed yet.

Score History

First score snapshot

v4.3.3

21

Latest

Findings
4,144
Errors
1,133
Warnings
3,011
Check
2.0.0

Relationship Map

Author, categories, issues, domains, and nearby plugins.

29 nodes

Related Plugins