PluginScore

Newsletters

Newsletter plugin for WordPress to capture subscribers and send beautiful, bulk newsletter emails.

v4.15Tribulant SoftwareUpdated Added 2k+ installs92% rating
bulk emailemailmailing listnewsletterssubscribers
22
Score
2,968
Errors
2,248
Warnings
+0
Change

Category Scores

Security0
Repo84
Performance93
Maintainability0

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

5,216 findings

Security

2,006

9 issue groups

I18n

1,564

5 issue groups

Maintainability

1,525

11 issue groups

ERRORI18nText Domain MismatchMismatched text domain. Expected 'newsletters-lite' but got "wp-mailinglist".1,377
Category
I18n
Occurrences
1,377
Severity
error

Sample message

Mismatched text domain. Expected 'newsletters-lite' but got "wp-mailinglist".

WordPress.WP.I18n.TextDomainMismatchReference
WARNINGSecurityMissing nonce verificationProcessing form data without nonce verification.457
Category
Security
Occurrences
457
Severity
warning

Sample message

Processing form data without nonce verification.

WordPress.Security.NonceVerification.Missing
ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;354
Category
Maintainability
Occurrences
354
Severity
error

Sample message

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

missing_direct_file_access_protectionReference
WARNINGSecurityRequest data is not unslashed$_COOKIE[$this -> pre . 'autoresponderemailsfilter_autoresponder_id'] not unslashed before sanitization. Use wp_unslash() or similar323
Category
Security
Occurrences
323
Severity
warning

Sample message

$_COOKIE[$this -> pre . 'autoresponderemailsfilter_autoresponder_id'] not unslashed before sanitization. Use wp_unslash() or similar

WordPress.Security.ValidatedSanitizedInput.MissingUnslash
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$autorespondlist".307
Category
Maintainability
Occurrences
307
Severity
warning

Sample message

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$autorespondlist".

WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedVariableFound
ERRORSecuritySQL query is not preparedUse placeholders and $wpdb->prepare(); found $Html267
Category
Security
Occurrences
267
Severity
error

Sample message

Use placeholders and $wpdb->prepare(); found $Html

WordPress.DB.PreparedSQL.NotPrepared
WARNINGSecurityInput is not validatedDetected usage of a possibly undefined superglobal array index: $_FILES[$field -> slug]. Check that the array index exists before using it.267
Category
Security
Occurrences
267
Severity
warning

Sample message

Detected usage of a possibly undefined superglobal array index: $_FILES[$field -> slug]. Check that the array index exists before using it.

WordPress.Security.ValidatedSanitizedInput.InputNotValidated
WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.254
Category
Maintainability
Occurrences
254
Severity
warning

Sample message

Use of a direct database call is discouraged.

WordPress.DB.DirectDatabaseQuery.DirectQuery
WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().254
Category
Maintainability
Occurrences
254
Severity
warning

Sample message

Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().

WordPress.DB.DirectDatabaseQuery.NoCaching
ERRORSecurityDatabase parameter is not escapedUnescaped parameter $Theme->table used in $wpdb->query()\n$Theme->table used without escaping.237
Category
Security
Occurrences
237
Severity
error

Sample message

Unescaped parameter $Theme->table used in $wpdb->query()\n$Theme->table used without escaping.

PluginCheck.Security.DirectDB.UnescapedDBParameter
Show 15 more
ERRORMaintainabilitywp function not compatible with requires wp189
Category
Maintainability
Occurrences
189
Severity
error

Sample message

Function "get_preview_post_link()" requires WordPress 4.4.0, but your plugin minimum supported version is WordPress 3.8.0.

wp_function_not_compatible_with_requires_wpReference
ERRORSecurityOutput is not escaped183
Category
Security
Occurrences
183
Severity
error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"$data is not a valid file"'.

WordPress.Security.EscapeOutput.OutputNotEscapedReference
ERRORI18nMissing Translators Comment113
Category
I18n
Occurrences
113
Severity
error

Sample message

A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.

WordPress.WP.I18n.MissingTranslatorsCommentReference
WARNINGSecurityNonce verification recommended100
Category
Security
Occurrences
100
Severity
warning

Sample message

Processing form data without nonce verification.

WordPress.Security.NonceVerification.Recommended
WARNINGSecurityInput is not sanitized93
Category
Security
Occurrences
93
Severity
warning

Sample message

Detected usage of a non-sanitized input variable: $_COOKIE[$this -> pre . 'autoresponderemailsfilter_autoresponder_id']

WordPress.Security.ValidatedSanitizedInput.InputNotSanitized
ERRORSecurityUnsafe printing function79
Category
Security
Occurrences
79
Severity
error

Sample message

All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.

WordPress.Security.EscapeOutput.UnsafePrintingFunctionReference
WARNINGMaintainabilityNon-prefixed constant43
Category
Maintainability
Occurrences
43
Severity
warning

Sample message

Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "DOING_AJAX".

WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedConstantFound
WARNINGMaintainabilityNon-prefixed hook name40
Category
Maintainability
Occurrences
40
Severity
warning

Sample message

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "begin_fetch_post_thumbnail_html".

WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedHooknameFound
WARNINGMaintainabilityDynamic hook name33
Category
Maintainability
Occurrences
33
Severity
warning

Sample message

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "$hook".

WordPress.NamingConventions.PrefixAllGlobals.DynamicHooknameFound
ERRORI18nUnordered Placeholders Text32
Category
I18n
Occurrences
32
Severity
error

Sample message

Multiple placeholders in translatable strings should be ordered. Expected "%1$d, %2$d, %3$s", but got "%d, %d, %s" in 'You are about to export <b>%d</b> subscribers from <b>%d</b> mailing lists with <b>%s</b> status.'.

WordPress.WP.I18n.UnorderedPlaceholdersTextReference
ERRORI18nMissing Arg Domain30
Category
I18n
Occurrences
30
Severity
error

Sample message

Missing $domain parameter in function call to __().

WordPress.WP.I18n.MissingArgDomainReference
WARNINGMaintainabilityNon-prefixed class20
Category
Maintainability
Occurrences
20
Severity
warning

Sample message

Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: &quot;BounceHandler&quot;.

WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedClassFound
ERRORMaintainabilityfile system operations fopen17
Category
Maintainability
Occurrences
17
Severity
error

Sample message

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fopen().

WordPress.WP.AlternativeFunctions.file_system_operations_fopen
ERRORMaintainabilityfile system operations fclose14
Category
Maintainability
Occurrences
14
Severity
error

Sample message

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fclose().

WordPress.WP.AlternativeFunctions.file_system_operations_fclose
ERRORI18nNon Singular String Literal Text12
Category
I18n
Occurrences
12
Severity
error

Sample message

The $text parameter must be a single text string literal. Found: $emailfield -> errormessage

WordPress.WP.I18n.NonSingularStringLiteralTextReference

External Connections

Not analyzed yet.

Score History

First score snapshot

v4.15

22

Latest

Findings
5,216
Errors
2,968
Warnings
2,248
Check
2.0.0

Relationship Map

Author, categories, issues, domains, and nearby plugins.

29 nodes

Related

Site Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreContact Form 769 scoreLiteSpeed Cache35 scoreWooCommerce22 scoreAkismet Anti-spam: Spam Protection35 scoreAll-in-One WP Migration and Backup34 scoreJetpack – WP Security, Backup, Speed, & Growth23 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreWP Mail SMTP by WPForms – The Most Popular SMTP and Email Log Plugin30 scoreMC4WP: Mailchimp for WordPress57 scoreEasy WP SMTP – WordPress SMTP and Email Logs: Gmail, Office 365, Outlook, Custom SMTP, and more15 scorePost SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App22 score

Related Plugins

Block for Mailchimp – Add Email Subscription Forms and Collect Leads

2k+ active installs

100
Contact Form Query

1k+ active installs

100
Email Marketing for WordPress and WooCommerce – Retainful

500 active installs

100
Configure SMTP

6k+ active installs

99
Email Address Obfuscation

2k+ active installs

99
Stop WP Emails Going to Spam

10k+ active installs

99