Email marketing and newsletter plugin for WordPress. Create email campaigns, grow subscribers, automate emails, and customize WooCommerce emails.
24
Score
805
Errors
3,934
Warnings
+0
Change
Category Scores
Security0
Repo100
Performance85
Maintainability0
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Maintainability
2,328
9 issue groups
Security
2,152
13 issue groups
I18n
179
3 issue groups
WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.1,128
- Category
- Maintainability
- Occurrences
- 1,128
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().1,014
- Category
- Maintainability
- Occurrences
- 1,014
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
WARNINGSecurityInterpolated SQL is not preparedUse placeholders and $wpdb->prepare(); found interpolated variable $batch_placeholders at WHERE batch_id IN ($batch_placeholders)\n914
- Category
- Security
- Occurrences
- 914
- Severity
- warning
Sample message
Use placeholders and $wpdb->prepare(); found interpolated variable $batch_placeholders at WHERE batch_id IN ($batch_placeholders)\n
WARNINGSecurityDatabase parameter is not escapedUnescaped parameter $abTestsTable used in $wpdb->get_col()\n$abTestsTable assigned unsafely at line 4382.491
- Category
- Security
- Occurrences
- 491
- Severity
- warning
Sample message
Unescaped parameter $abTestsTable used in $wpdb->get_col()\n$abTestsTable assigned unsafely at line 4382.
ERRORSecuritySQL query is not preparedUse placeholders and $wpdb->prepare(); found $abTestQuery245
- Category
- Security
- Occurrences
- 245
- Severity
- error
Sample message
Use placeholders and $wpdb->prepare(); found $abTestQuery
ERRORSecurityDatabase parameter is not escapedUnescaped parameter $abTestQuery used in $wpdb->get_results()\n$abTestQuery assigned unsafely at line 508.184
- Category
- Security
- Occurrences
- 184
- Severity
- error
Sample message
Unescaped parameter $abTestQuery used in $wpdb->get_results()\n$abTestQuery assigned unsafely at line 508.
WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.97
- Category
- Security
- Occurrences
- 97
- Severity
- warning
Sample message
Processing form data without nonce verification.
ERRORI18nMissing Translators CommentA function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.87
- Category
- I18n
- Occurrences
- 87
- Severity
- error
Sample message
A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.
WARNINGSecurityUnfinished PrepareReplacement variables found, but no valid placeholders found in the query.77
- Category
- Security
- Occurrences
- 77
- Severity
- warning
Sample message
Replacement variables found, but no valid placeholders found in the query.
ERRORI18nInterpolated Variable TextThe $text parameter must not contain interpolated variables or expressions. Found: {$childFK['child_table']}66
- Category
- I18n
- Occurrences
- 66
- Severity
- error
Sample message
The $text parameter must not contain interpolated variables or expressions. Found: {$childFK['child_table']}
Show 15 moreShow less
WARNINGMaintainabilityNon-prefixed global variable62
- Category
- Maintainability
- Occurrences
- 62
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$accessToken".
ERRORSecurityOutput is not escaped43
- Category
- Security
- Occurrences
- 43
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"Operation: {$op['type']} on {$op['manager']->getTableName()}\n"'.
ERRORMaintainabilityMissing direct file access protection38
- Category
- Maintainability
- Occurrences
- 38
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
WARNINGSecurityRequest data is not unslashed33
- Category
- Security
- Occurrences
- 33
- Severity
- warning
Sample message
$_COOKIE['mailerpress_lock_data'] not unslashed before sanitization. Use wp_unslash() or similar
WARNINGSecurityInput is not sanitized29
- Category
- Security
- Occurrences
- 29
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_COOKIE['mailerpress_lock_data']
ERRORMaintainabilitydate date28
- Category
- Maintainability
- Occurrences
- 28
- Severity
- error
Sample message
date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.
WARNINGMaintainabilitySchema Change27
- Category
- Maintainability
- Occurrences
- 27
- Severity
- warning
Sample message
Attempting a database schema change is discouraged.
ERRORI18nUnordered Placeholders Text26
- Category
- I18n
- Occurrences
- 26
- Severity
- error
Sample message
Multiple placeholders in translatable strings should be ordered. Expected "%1$d, %2$d", but got "%d, %d" in 'Reset %d stuck chunks and scheduled %d chunks for processing'.
WARNINGMaintainabilityNon-prefixed hook name13
- Category
- Maintainability
- Occurrences
- 13
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "active_plugins".
ERRORSecurityLike Wildcards In Query12
- Category
- Security
- Occurrences
- 12
- Severity
- error
Sample message
SQL wildcards for a LIKE query should be passed in through a replacement parameter. Found: LIKE '%%\"customer_email\"%%'.
ERRORSecurityException output is not escaped10
- Category
- Security
- Occurrences
- 10
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"Cannot create table {$this->tableName}: no columns defined"'.
ERRORMaintainabilityPlugin Directory Write9
- Category
- Maintainability
- Occurrences
- 9
- Severity
- error
Sample message
Plugin folders are deleted when upgraded. Do not save data to the plugin folder using file_put_contents(). Detected usage of constant PLUGINDIR. Use wp_upload_dir() to get the uploads directory path or save to the database instead.
WARNINGSecurityReplacements Wrong Number9
- Category
- Security
- Occurrences
- 9
- Severity
- warning
Sample message
Incorrect number of replacements passed to $wpdb->prepare(). Found 1 replacement parameters, expected 2.
ERRORMaintainabilityunlink unlink9
- Category
- Maintainability
- Occurrences
- 9
- Severity
- error
Sample message
unlink() is discouraged. Use wp_delete_file() to delete a file.
ERRORSecurityUnsafe printing function8
- Category
- Security
- Occurrences
- 8
- Severity
- error
Sample message
All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.
External Connections
Potential connections found in static code analysis.
Outbound calls
300
External assets
0
Incoming endpoints
0
Notable Domains
mailerpress.com91 · outbound
php.net25 · outbound
tools.ietf.org17 · outbound
bugs.php.net10 · outbound
en.wikipedia.org6 · outbound
symfony.com6 · outbound
Platform / Reference Domains
w3.org20 · platform/reference
github.com16 · platform/reference
developer.wordpress.org13 · platform/reference
wordpress.org2 · platform/reference
s.w.org1 · platform/reference
External Asset Domains
No external asset domains detected.
Incoming Endpoints
No public endpoints detected.
Score History
3 score snapshots
v2.0.7
24
Latest
- Findings
- 4,739
- Errors
- 805
- Warnings
- 3,934
- Check
- 2.0.0
v2.0.6
24
Score
- Findings
- 4,736
- Errors
- 805
- Warnings
- 3,931
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 24 | 4,739 | 805 | 3,934 | v2.0.7 | 2.0.0 |
| 24 | 4,736 | 805 | 3,931 | v2.0.6 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Author
Category
Issue
Domain
Related
Contact Form 769 scoreElementor Website Builder – more than just a page builder39 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce22 scoreAkismet Anti-spam: Spam Protection35 scoreLiteSpeed Cache35 scoreAll-in-One WP Migration and Backup34 scoreHostinger Reach – AI-Powered Email Marketing for WordPress40 scoreMC4WP: Mailchimp for WordPress57 scoreMailPoet – Newsletters, Email Marketing, and Automation23 scoreNewsletter – Send awesome emails from WordPress24 scoreBrevo – Email, SMS, Web Push, Chat, and more.20 scoreMailerLite – Signup forms (official)36 scoreGetResponse Official100 score
Author
Category
Issue
Domain
Related
Contact Form 769 scoreElementor Website Builder – more than just a page builder39 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce22 scoreAkismet Anti-spam: Spam Protection35 scoreLiteSpeed Cache35 scoreAll-in-One WP Migration and Backup34 scoreHostinger Reach – AI-Powered Email Marketing for WordPress40 scoreMC4WP: Mailchimp for WordPress57 scoreMailPoet – Newsletters, Email Marketing, and Automation23 scoreNewsletter – Send awesome emails from WordPress24 scoreBrevo – Email, SMS, Web Push, Chat, and more.20 scoreMailerLite – Signup forms (official)36 scoreGetResponse Official100 score
Related Plugins
GetResponse Official
4k+ active installs
100
Block for Mailchimp – grow your email list with signup forms
2k+ active installs
100
Email Marketing for WordPress and WooCommerce – Retainful
500 active installs
100
SendPulse Email Marketing Newsletter
1k+ active installs
99
Recapture for Easy Digital Downloads
600 active installs
99
Omnisend for Contact Form 7 Add-On
500 active installs
99