Newsletter plugin for WordPress to capture subscribers and send beautiful, bulk newsletter emails.
22
Score
2,977
Errors
2,261
Warnings
+0
Change
Category Scores
Security0
Repo84
Performance93
Maintainability0
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Security
2,018
9 issue groups
I18n
1,570
5 issue groups
Maintainability
1,527
11 issue groups
ERRORI18nText Domain MismatchMismatched text domain. Expected 'newsletters-lite' but got "wp-mailinglist".1,382
- Category
- I18n
- Occurrences
- 1,382
- Severity
- error
Sample message
Mismatched text domain. Expected 'newsletters-lite' but got "wp-mailinglist".
WARNINGSecurityMissing nonce verificationProcessing form data without nonce verification.455
- Category
- Security
- Occurrences
- 455
- Severity
- warning
Sample message
Processing form data without nonce verification.
ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;354
- Category
- Maintainability
- Occurrences
- 354
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
WARNINGSecurityRequest data is not unslashed$_COOKIE[$this -> pre . 'autoresponderemailsfilter_autoresponder_id'] not unslashed before sanitization. Use wp_unslash() or similar327
- Category
- Security
- Occurrences
- 327
- Severity
- warning
Sample message
$_COOKIE[$this -> pre . 'autoresponderemailsfilter_autoresponder_id'] not unslashed before sanitization. Use wp_unslash() or similar
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$autorespondlist".307
- Category
- Maintainability
- Occurrences
- 307
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$autorespondlist".
ERRORSecuritySQL query is not preparedUse placeholders and $wpdb->prepare(); found $Html267
- Category
- Security
- Occurrences
- 267
- Severity
- error
Sample message
Use placeholders and $wpdb->prepare(); found $Html
WARNINGSecurityInput is not validatedDetected usage of a possibly undefined superglobal array index: $_FILES[$field -> slug]. Check that the array index exists before using it.267
- Category
- Security
- Occurrences
- 267
- Severity
- warning
Sample message
Detected usage of a possibly undefined superglobal array index: $_FILES[$field -> slug]. Check that the array index exists before using it.
WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.254
- Category
- Maintainability
- Occurrences
- 254
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().254
- Category
- Maintainability
- Occurrences
- 254
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
ERRORSecurityDatabase parameter is not escapedUnescaped parameter $Theme->table used in $wpdb->query()\n$Theme->table used without escaping.237
- Category
- Security
- Occurrences
- 237
- Severity
- error
Sample message
Unescaped parameter $Theme->table used in $wpdb->query()\n$Theme->table used without escaping.
Show 15 moreShow less
ERRORMaintainabilitywp function not compatible with requires wp191
- Category
- Maintainability
- Occurrences
- 191
- Severity
- error
Sample message
Function "get_preview_post_link()" requires WordPress 4.4.0, but your plugin minimum supported version is WordPress 3.8.0.
ERRORSecurityOutput is not escaped183
- Category
- Security
- Occurrences
- 183
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"$data is not a valid file"'.
ERRORI18nMissing Translators Comment114
- Category
- I18n
- Occurrences
- 114
- Severity
- error
Sample message
A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.
WARNINGSecurityNonce verification recommended106
- Category
- Security
- Occurrences
- 106
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGSecurityInput is not sanitized97
- Category
- Security
- Occurrences
- 97
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_COOKIE[$this -> pre . 'autoresponderemailsfilter_autoresponder_id']
ERRORSecurityUnsafe printing function79
- Category
- Security
- Occurrences
- 79
- Severity
- error
Sample message
All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.
WARNINGMaintainabilityNon-prefixed constant43
- Category
- Maintainability
- Occurrences
- 43
- Severity
- warning
Sample message
Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "DOING_AJAX".
WARNINGMaintainabilityNon-prefixed hook name40
- Category
- Maintainability
- Occurrences
- 40
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "begin_fetch_post_thumbnail_html".
WARNINGMaintainabilityDynamic hook name33
- Category
- Maintainability
- Occurrences
- 33
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "$hook".
ERRORI18nUnordered Placeholders Text32
- Category
- I18n
- Occurrences
- 32
- Severity
- error
Sample message
Multiple placeholders in translatable strings should be ordered. Expected "%1$d, %2$d, %3$s", but got "%d, %d, %s" in 'You are about to export <b>%d</b> subscribers from <b>%d</b> mailing lists with <b>%s</b> status.'.
ERRORI18nMissing Arg Domain30
- Category
- I18n
- Occurrences
- 30
- Severity
- error
Sample message
Missing $domain parameter in function call to __().
WARNINGMaintainabilityNon-prefixed class20
- Category
- Maintainability
- Occurrences
- 20
- Severity
- warning
Sample message
Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "BounceHandler".
ERRORMaintainabilityfile system operations fopen17
- Category
- Maintainability
- Occurrences
- 17
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fopen().
ERRORMaintainabilityfile system operations fclose14
- Category
- Maintainability
- Occurrences
- 14
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fclose().
ERRORI18nNon Singular String Literal Text12
- Category
- I18n
- Occurrences
- 12
- Severity
- error
Sample message
The $text parameter must be a single text string literal. Found: $emailfield -> errormessage
External Connections
Potential connections found in static code analysis.
Outbound calls
217
External assets
4
Incoming endpoints
79
Notable Domains
ckeditor.com64 · outbound
jqueryui.com21 · outbound
jquery.org14 · outbound
docs.jquery.com6 · outbound
php.net3 · outbound
fontawesome.io2 · outbound
Platform / Reference Domains
w3.org80 · platform/reference
External Asset Domains
tribulant.com25 · asset + outbound
placehold.it2 · asset
Incoming Endpoints
wp_ajax_nopriv_managementcurrentsubscriptionspublic
wp_ajax
wp_ajax_nopriv_managementcustomfieldspublic
wp_ajax
wp_ajax_nopriv_managementnewsubscriptionspublic
wp_ajax
wp_ajax_nopriv_managementsavefieldspublic
wp_ajax
wp_ajax_nopriv_managementsubscribepublic
wp_ajax
wp_ajax_nopriv_newsletters_apipublic
wp_ajax
Admin AJAX endpoints69
wp_ajax_newsletters_builderonauthenticated
wp_ajax
admin_post_wpml_resend_emailauthenticated
admin_post
wp_ajax_managementcurrentsubscriptionsauthenticated
wp_ajax
wp_ajax_managementcustomfieldsauthenticated
wp_ajax
wp_ajax_managementnewsubscriptionsauthenticated
wp_ajax
wp_ajax_managementsavefieldsauthenticated
wp_ajax
wp_ajax_managementsubscribeauthenticated
wp_ajax
wp_ajax_newsletter_drag_and_drop_builder_saveauthenticated
wp_ajax
wp_ajax_newsletters_admin_modeauthenticated
wp_ajax
wp_ajax_newsletters_apiauthenticated
wp_ajax
wp_ajax_newsletters_api_newkeyauthenticated
wp_ajax
wp_ajax_newsletters_autocomplete_historiesauthenticated
wp_ajax
57 more hidden
Score History
3 score snapshots
v4.17
22
Latest
- Findings
- 5,238
- Errors
- 2,977
- Warnings
- 2,261
- Check
- 2.0.0
v4.16
22
Score
- Findings
- 5,233
- Errors
- 2,976
- Warnings
- 2,257
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 22 | 5,238 | 2,977 | 2,261 | v4.17 | 2.0.0 |
| 22 | 5,233 | 2,976 | 2,257 | v4.16 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Plugin
Author
Issue
Domain
Related
Site Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreContact Form 769 scoreWooCommerce21 scoreAkismet Anti-spam: Spam Protection35 scoreAll-in-One WP Migration and Backup34 scoreJetpack – WP Security, Backup, Speed, & Growth22 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreAdvanced Custom Fields (ACF®)23 scoreWP Mail SMTP by WPForms – The Most Popular SMTP and Email Log Plugin30 scoreMC4WP: Mailchimp for WordPress57 scoreEasy WP SMTP – WordPress SMTP and Email Logs: Gmail SMTP, Office 365, Outlook, Custom SMTP, and more15 scorePost SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App22 score
Plugin
Author
Issue
Domain
Related
Site Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreContact Form 769 scoreWooCommerce21 scoreAkismet Anti-spam: Spam Protection35 scoreAll-in-One WP Migration and Backup34 scoreJetpack – WP Security, Backup, Speed, & Growth22 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreAdvanced Custom Fields (ACF®)23 scoreWP Mail SMTP by WPForms – The Most Popular SMTP and Email Log Plugin30 scoreMC4WP: Mailchimp for WordPress57 scoreEasy WP SMTP – WordPress SMTP and Email Logs: Gmail SMTP, Office 365, Outlook, Custom SMTP, and more15 scorePost SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App22 score
Related Plugins
Block for Mailchimp – grow your email list with signup forms
2k+ active installs
100
Contact Form Query
1k+ active installs
100
Email Marketing for WordPress and WooCommerce – Retainful
500 active installs
100
Stop WP Emails Going to Spam
10k+ active installs
99
Configure SMTP
6k+ active installs
99
Email Address Obfuscation
2k+ active installs
99