Swift SMTP (formerly Welcome Email Editor)

Swift SMTP is a free & simple SMTP Plugin for WordPress.

v6.3David VongriesUpdated Added 7k+ installs84% rating
51
Score
12
Errors
62
Warnings
+0
Change

Category Scores

Security23
Repo91
Performance100
Maintainability74

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

74 findings

Maintainability

36

11 issue groups

Security

36

5 issue groups

Repo Compliance

2

2 issue groups

WARNINGMaintainabilityerror log error logerror_log() found. Debug code should not normally be used in production.10
Category
Maintainability
Occurrences
10
Severity
warning

Sample message

error_log() found. Debug code should not normally be used in production.

WARNINGSecurityMissing nonce verificationProcessing form data without nonce verification.10
Category
Security
Occurrences
10
Severity
warning

Sample message

Processing form data without nonce verification.

WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.10
Category
Security
Occurrences
10
Severity
warning

Sample message

Processing form data without nonce verification.

WARNINGSecurityRequest data is not unslashed$_GET['email_status'] not unslashed before sanitization. Use wp_unslash() or similar10
Category
Security
Occurrences
10
Severity
warning

Sample message

$_GET['email_status'] not unslashed before sanitization. Use wp_unslash() or similar

ERRORMaintainabilitywp function not compatible with requires wpFunction "get_user_locale()" requires WordPress 4.7.0, but your plugin minimum supported version is WordPress 4.6.0.7
Category
Maintainability
Occurrences
7
Severity
error

Sample message

Function "get_user_locale()" requires WordPress 4.7.0, but your plugin minimum supported version is WordPress 4.6.0.

WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$$this".4
Category
Maintainability
Occurrences
4
Severity
warning

Sample message

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$$this".

WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_GET['email_status']4
Category
Security
Occurrences
4
Severity
warning

Sample message

Detected usage of a non-sanitized input variable: $_GET['email_status']

WARNINGMaintainabilityerror log print rprint_r() found. Debug code should not normally be used in production.3
Category
Maintainability
Occurrences
3
Severity
warning

Sample message

print_r() found. Debug code should not normally be used in production.

ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;3
Category
Maintainability
Occurrences
3
Severity
error

Sample message

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.2
Category
Maintainability
Occurrences
2
Severity
warning

Sample message

Use of a direct database call is discouraged.

Show 8 more
WARNINGMaintainabilityNo Caching2
Category
Maintainability
Occurrences
2
Severity
warning

Sample message

Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().

WARNINGMaintainabilityNon-prefixed hook name2
Category
Maintainability
Occurrences
2
Severity
warning

Sample message

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "wp_new_user_notification_email".

WARNINGSecurityInput is not validated2
Category
Security
Occurrences
2
Severity
warning

Sample message

Detected usage of a possibly undefined superglobal array index: $_SERVER['DOCUMENT_ROOT']. Check that the array index exists before using it.

WARNINGMaintainabilityNo PHP code found1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

No PHP code was found in this file and short open tags are not allowed by this install of PHP. This file may be using short open tags but PHP does not allow them.

WARNINGMaintainabilityDynamic hook name1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "$filter_name".

ERRORMaintainabilityNon Enqueued Stylesheet1
Category
Maintainability
Occurrences
1
Severity
error

Sample message

Stylesheets must be registered/enqueued via wp_enqueue_style()

ERRORRepo Complianceoutdated tested upto header1
Category
Repo Compliance
Occurrences
1
Severity
error

Sample message

Tested up to: 6.9 < 7.0. The "Tested up to" value in your plugin is not set to the current version of WordPress. This means your plugin will not show up in searches, as we require plugins to be compatible and documented as tested up to the most recent version of WordPress.

WARNINGRepo Compliancereadme parser warnings no short description present1
Category
Repo Compliance
Occurrences
1
Severity
warning

Sample message

The "Short Description" section is missing. An excerpt was generated from your main plugin description.

Score History

First score snapshot

v6.3

51

Latest

Findings
74
Errors
12
Warnings
62
Check
2.0.0

Related Plugins

Configure SMTP

6k+ active installs

99
SMTP for Contact Form 7

1k+ active installs

99
SAR Friendly SMTP

2k+ active installs

98
Simple SMTP

2k+ active installs

97
WP Offload SES Lite

10k+ active installs

96