Create popup, optin forms using easy form builder & popup maker. Send automated email to subscribers — Mailchimp, ActiveCampaign, Campaign Monitor etc
22
Score
2,625
Errors
2,458
Warnings
+0
Change
Category Scores
Security0
Repo83
Performance100
Maintainability0
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Security
2,626
9 issue groups
Maintainability
1,499
12 issue groups
I18n
777
4 issue groups
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"$provider $error_message"'.1,047
- Category
- Security
- Occurrences
- 1,047
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"$provider $error_message"'.
WARNINGMaintainabilityNon-prefixed hook nameHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "'mo_connections_sendinblue_field_type_boolean_' . $SendinblueFieldKey".691
- Category
- Maintainability
- Occurrences
- 691
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "'mo_connections_sendinblue_field_type_boolean_' . $SendinblueFieldKey".
WARNINGSecurityRequest data is not unslashed$_GET[$key] not unslashed before sanitization. Use wp_unslash() or similar428
- Category
- Security
- Occurrences
- 428
- Severity
- warning
Sample message
$_GET[$key] not unslashed before sanitization. Use wp_unslash() or similar
ERRORI18nMissing Translators CommentA function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.422
- Category
- I18n
- Occurrences
- 422
- Severity
- error
Sample message
A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.
ERRORMaintainabilityShort PHP open tag foundShort PHP opening tag used with echo; expected "<?php echo ! ..." but found "<?= ! ..."339
- Category
- Maintainability
- Occurrences
- 339
- Severity
- error
Sample message
Short PHP opening tag used with echo; expected "<?php echo ! ..." but found "<?= ! ..."
ERRORI18nUnordered Placeholders TextMultiple placeholders in translatable strings should be ordered. Expected "%1$s, %2$s", but got "%s, %s" in '%sConnect MailOptin first%s to your email marketing marketing software or CRM to continue setup.'.301
- Category
- I18n
- Occurrences
- 301
- Severity
- error
Sample message
Multiple placeholders in translatable strings should be ordered. Expected "%1$s, %2$s", but got "%s, %s" in '%sConnect MailOptin first%s to your email marketing marketing software or CRM to continue setup.'.
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_GET[$key]233
- Category
- Security
- Occurrences
- 233
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_GET[$key]
WARNINGSecurityMissing nonce verificationProcessing form data without nonce verification.225
- Category
- Security
- Occurrences
- 225
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGSecurityInput is not validatedDetected usage of a possibly undefined superglobal array index: $_GET['access_token_secret']. Check that the array index exists before using it.223
- Category
- Security
- Occurrences
- 223
- Severity
- warning
Sample message
Detected usage of a possibly undefined superglobal array index: $_GET['access_token_secret']. Check that the array index exists before using it.
WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.219
- Category
- Security
- Occurrences
- 219
- Severity
- warning
Sample message
Processing form data without nonce verification.
Show 15 moreShow less
ERRORSecurityUnsafe printing function127
- Category
- Security
- Occurrences
- 127
- Severity
- error
Sample message
All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.
WARNINGMaintainabilityNo PHP code found119
- Category
- Maintainability
- Occurrences
- 119
- Severity
- warning
Sample message
No PHP code was found in this file and short open tags are not allowed by this install of PHP. This file may be using short open tags but PHP does not allow them.
ERRORSecurityException output is not escaped81
- Category
- Security
- Occurrences
- 81
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"method [subcount] requires parameter [list] or [$this->list_id] to be set."'.
WARNINGMaintainabilityNon-prefixed global variable68
- Category
- Maintainability
- Occurrences
- 68
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$CC".
ERRORMaintainabilityNo Explicit Version55
- Category
- Maintainability
- Occurrences
- 55
- Severity
- error
Sample message
Version parameter is not explicitly set or has been set to an equivalent of "false" for wp_enqueue_script; This means that the WordPress core version will be used which is not recommended for plugin or theme development.
ERRORMaintainabilityMissing direct file access protection49
- Category
- Maintainability
- Occurrences
- 49
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
ERRORSecuritySQL query is not prepared43
- Category
- Security
- Occurrences
- 43
- Severity
- error
Sample message
Use placeholders and $wpdb->prepare(); found $args
WARNINGMaintainabilityMissing Version35
- Category
- Maintainability
- Occurrences
- 35
- Severity
- warning
Sample message
Resource version not set in call to wp_enqueue_script(). This means new versions of the script may not always be loaded due to browser caching.
ERRORMaintainabilityNot Allowed33
- Category
- Maintainability
- Occurrences
- 33
- Severity
- error
Sample message
Use of heredoc syntax (<<<) is not allowed; use standard strings or inline HTML instead
ERRORI18nText Domain Mismatch31
- Category
- I18n
- Occurrences
- 31
- Severity
- error
Sample message
Mismatched text domain. Expected 'mailoptin' but got 'fusewp'.
WARNINGMaintainabilityDirect Query30
- Category
- Maintainability
- Occurrences
- 30
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGMaintainabilityNo Caching30
- Category
- Maintainability
- Occurrences
- 30
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
WARNINGMaintainabilityNon-prefixed class26
- Category
- Maintainability
- Occurrences
- 26
- Severity
- warning
Sample message
Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "AC_Account".
WARNINGMaintainabilityNot In Footer24
- Category
- Maintainability
- Occurrences
- 24
- Severity
- warning
Sample message
In footer ($in_footer) is not set explicitly wp_enqueue_script; It is recommended to load scripts in the footer. Please set this value to `true` to load it in the footer, or explicitly `false` if it should be loaded in the header.
ERRORI18nMissing Arg Domain23
- Category
- I18n
- Occurrences
- 23
- Severity
- error
Sample message
Missing $domain parameter in function call to __().
External Connections
Potential connections found in static code analysis.
Outbound calls
279
External assets
1
Incoming endpoints
20
Notable Domains
mailoptin.io175 · outbound
learn.microsoft.com8 · outbound
app.bentonow.com4 · outbound
app.icontact.com3 · outbound
emailoctopus.com3 · outbound
settings.e2ma.net3 · outbound
Platform / Reference Domains
github.com2 · platform/reference
w3.org2 · platform/reference
External Asset Domains
fonts.googleapis.com1 · asset
Incoming Endpoints
No public endpoints detected.
Admin AJAX endpoints20
wp_ajax_mailoptin_create_fbcaauthenticated
wp_ajax
wp_ajax_mailoptin_customizer_fetch_campaign_monitor_segmentauthenticated
wp_ajax
wp_ajax_mailoptin_customizer_fetch_gsheetfile_sheetsauthenticated
wp_ajax
wp_ajax_mailoptin_customizer_fetch_mailchimp_groupsauthenticated
wp_ajax
wp_ajax_mailoptin_customizer_fetch_mailchimp_segmentauthenticated
wp_ajax
wp_ajax_mailoptin_customizer_fetch_moosend_segmentsauthenticated
wp_ajax
wp_ajax_mo_edd_fetch_custom_fieldsauthenticated
wp_ajax
wp_ajax_mo_edd_fetch_listsauthenticated
wp_ajax
wp_ajax_mo_elementor_fetch_custom_fieldsauthenticated
wp_ajax
wp_ajax_mo_elementor_fetch_tagsauthenticated
wp_ajax
wp_ajax_mo_gwp_fetch_custom_fieldsauthenticated
wp_ajax
wp_ajax_mo_gwp_fetch_listsauthenticated
wp_ajax
8 more hidden
Score History
3 score snapshots
v1.2.78.1
22
Latest
- Findings
- 5,083
- Errors
- 2,625
- Warnings
- 2,458
- Check
- 2.0.0
v1.2.78.0
22
Score
- Findings
- 5,083
- Errors
- 2,625
- Warnings
- 2,458
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 22 | 5,083 | 2,625 | 2,458 | v1.2.78.1 | 2.0.0 |
| 22 | 5,083 | 2,625 | 2,458 | v1.2.78.0 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Plugin
Author
Issue
Domain
Related
Yoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce21 scoreAkismet Anti-spam: Spam Protection35 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder39 scoreClassic Editor63 scoreLiteSpeed Cache35 scoreAll-in-One WP Migration and Backup34 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreHostinger Reach – AI-Powered Email Marketing for WordPress40 scoreMC4WP: Mailchimp for WordPress57 scorePopup Builder & Popup Maker for WordPress – OptinMonster Email Marketing and Lead Generation32 scorePopup Maker – Boost Sales, Conversions, Optins, Subscribers with the Ultimate WP Popup Builder66 scoreMailPoet – Newsletters, Email Marketing, and Automation23 score
Plugin
Author
Issue
Domain
Related
Yoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce21 scoreAkismet Anti-spam: Spam Protection35 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder39 scoreClassic Editor63 scoreLiteSpeed Cache35 scoreAll-in-One WP Migration and Backup34 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreHostinger Reach – AI-Powered Email Marketing for WordPress40 scoreMC4WP: Mailchimp for WordPress57 scorePopup Builder & Popup Maker for WordPress – OptinMonster Email Marketing and Lead Generation32 scorePopup Maker – Boost Sales, Conversions, Optins, Subscribers with the Ultimate WP Popup Builder66 scoreMailPoet – Newsletters, Email Marketing, and Automation23 score
Related Plugins
GetResponse Official
4k+ active installs
100
All In One Lightbox – show any media in beautiful popups
3k+ active installs
100
Block for Mailchimp – grow your email list with signup forms
2k+ active installs
100
Popup for Elementor
800 active installs
100
Advanced Popups
60k+ active installs
99
Light Modal Block
2k+ active installs
99