Create email newsletters with the block editor and distribute them with your favorite ESP mailing lists.
61
Score
53
Errors
47
Warnings
+0
Change
Category Scores
Security38
Repo100
Performance100
Maintainability73
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
I18n
42
3 issue groups
Security
34
3 issue groups
Maintainability
24
10 issue groups
WARNINGSecurityRequest data is not unslashed$_GET['code'] not unslashed before sanitization. Use wp_unslash() or similar28
- Category
- Security
- Occurrences
- 28
- Severity
- warning
Sample message
$_GET['code'] not unslashed before sanitization. Use wp_unslash() or similar
ERRORI18nText Domain MismatchMismatched text domain. Expected 'newspack-newsletters' but got 'newspack-newsletter'.26
- Category
- I18n
- Occurrences
- 26
- Severity
- error
Sample message
Mismatched text domain. Expected 'newspack-newsletters' but got 'newspack-newsletter'.
ERRORI18nMissing Arg DomainMissing $domain parameter in function call to __().15
- Category
- I18n
- Occurrences
- 15
- Severity
- error
Sample message
Missing $domain parameter in function call to __().
WARNINGMaintainabilityslow db query meta keyDetected usage of meta_key, possible slow query.7
- Category
- Maintainability
- Occurrences
- 7
- Severity
- warning
Sample message
Detected usage of meta_key, possible slow query.
ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;5
- Category
- Maintainability
- Occurrences
- 5
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
WARNINGMaintainabilityNon-prefixed hook nameHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "edit_term_taxonomy".4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "edit_term_taxonomy".
WARNINGSecurityDatabase parameter is not escapedUnescaped parameter $user_scope_sql used in $wpdb->get_col()\n$user_scope_sql used without escaping.3
- Category
- Security
- Occurrences
- 3
- Severity
- warning
Sample message
Unescaped parameter $user_scope_sql used in $wpdb->get_col()\n$user_scope_sql used without escaping.
ERRORSecurityUnsafe printing functionAll output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.3
- Category
- Security
- Occurrences
- 3
- Severity
- error
Sample message
All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.
WARNINGMaintainabilityunexpected markdown fileUnexpected markdown file "AGENTS.md" detected in plugin root. Only specific markdown files are expected in production plugins.2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
Unexpected markdown file "AGENTS.md" detected in plugin root. Only specific markdown files are expected in production plugins.
WARNINGI18nDiscouraged text-domain loadingload_plugin_textdomain() has been discouraged since WordPress version 4.6. When your plugin is hosted on WordPress.org, you no longer need to manually include this function call for translations under your plugin slug. WordPress will automatically load the translations for you as needed.1
- Category
- I18n
- Occurrences
- 1
- Severity
- warning
Sample message
load_plugin_textdomain() has been discouraged since WordPress version 4.6. When your plugin is hosted on WordPress.org, you no longer need to manually include this function call for translations under your plugin slug. WordPress will automatically load the translations for you as needed.
Show 6 moreShow less
ERRORMaintainabilityPlugin Directory Write1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
Plugin folders are deleted when upgraded. Do not save data to the plugin folder using file_put_contents(). Detected usage of constant WP_CONTENT_DIR. Use wp_upload_dir() to get the uploads directory path or save to the database instead.
WARNINGMaintainabilityNon-prefixed constant1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "CS_REST_CALL_TIMEOUT".
ERRORMaintainabilityfile system operations fclose1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fclose().
ERRORMaintainabilityunlink unlink1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
unlink() is discouraged. Use wp_delete_file() to delete a file.
WARNINGMaintainabilitymissing composer json file1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
The "/vendor" directory using composer exists, but "composer.json" file is missing.
ERRORMaintainabilitytrunk stable tag1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
Incorrect Stable Tag. It's recommended not to use "Stable Tag: trunk". Your Stable Tag is meant to be the stable version of your plugin and it needs to be exactly the same with the Version in your main plugin file's header. Any mismatch can prevent users from downloading the correct plugin files from WordPress.org.
External Connections
Potential connections found in static code analysis.
Outbound calls
123
External assets
0
Incoming endpoints
4
Notable Domains
cl.cam.ac.uk16 · outbound
createsend.com9 · outbound
newspack.com7 · outbound
campaignmonitor.com6 · outbound
preview.createsend.com6 · outbound
subdomain.example.com6 · outbound
Platform / Reference Domains
github.com5 · platform/reference
w3.org5 · platform/reference
codex.wordpress.org2 · platform/reference
opensource.org1 · platform/reference
External Asset Domains
No external asset domains detected.
Incoming Endpoints
wp_ajax_nopriv_public
wp_ajax
/wp-json/newspack-newsletters/v1/newsletters-list/filter-optionsREST
register_rest_route
Admin AJAX endpoints1
wp_ajax_newspack_newsletters_activation_nag_dismissalauthenticated
wp_ajax
Score History
6 score snapshots
v3.36.0
61
Latest
- Findings
- 100
- Errors
- 53
- Warnings
- 47
- Check
- 2.0.0
v3.35.2
61
Score
- Findings
- 100
- Errors
- 53
- Warnings
- 47
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 61 | 100 | 53 | 47 | v3.36.0 | 2.0.0 |
| 61 | 100 | 53 | 47 | v3.35.2 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Author
Category
Issue
Domain
Related
WooCommerce22 scoreJetpack – WP Security, Backup, Speed, & Growth22 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreClassic Editor63 scoreLiteSpeed Cache35 scoreAll-in-One WP Migration and Backup34 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreAkismet Anti-spam: Spam Protection35 scoreMC4WP: Mailchimp for WordPress57 scoreWP Super Cache25 scoreWooCommerce Legacy REST API31 scoreLimit Login Attempts40 score
Author
Category
Issue
Domain
Related
WooCommerce22 scoreJetpack – WP Security, Backup, Speed, & Growth22 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreClassic Editor63 scoreLiteSpeed Cache35 scoreAll-in-One WP Migration and Backup34 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreAkismet Anti-spam: Spam Protection35 scoreMC4WP: Mailchimp for WordPress57 scoreWP Super Cache25 scoreWooCommerce Legacy REST API31 scoreLimit Login Attempts40 score
Related Plugins
Block for Mailchimp – Add Email Subscription Forms and Collect Leads
2k+ active installs
100
Send Images to RSS
3k+ active installs
98
Gutena Newsletter – Subscriber Block & Connect Mailchimp
1k+ active installs
97
Lucky Wheel Giveaway
500 active installs
96
RSS Featured Image
2k+ active installs
96
MB ImageChimp RSS Feed Enhancer
700 active installs
92