Log, view, and resend all emails sent from your WordPress site. Great for resolving email sending issues or keeping a copy for auditing.
34
Score
76
Errors
258
Warnings
+0
Change
Category Scores
Security0
Repo94
Performance100
Maintainability51
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Security
216
13 issue groups
Maintainability
86
9 issue groups
I18n
18
3 issue groups
WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.57
- Category
- Security
- Occurrences
- 57
- Severity
- warning
Sample message
Processing form data without nonce verification.
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '" data-wp-lists='list:$singular'"'.35
- Category
- Security
- Occurrences
- 35
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '" data-wp-lists='list:$singular'"'.
WARNINGSecurityRequest data is not unslashed$_GET['order'] not unslashed before sanitization. Use wp_unslash() or similar29
- Category
- Security
- Occurrences
- 29
- Severity
- warning
Sample message
$_GET['order'] not unslashed before sanitization. Use wp_unslash() or similar
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_GET['order']28
- Category
- Security
- Occurrences
- 28
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_GET['order']
WARNINGMaintainabilityNon-prefixed hook nameHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "bulk_actions-{$this->screen->id}".24
- Category
- Maintainability
- Occurrences
- 24
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "bulk_actions-{$this->screen->id}".
WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.20
- Category
- Maintainability
- Occurrences
- 20
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().19
- Category
- Maintainability
- Occurrences
- 19
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
WARNINGSecurityInterpolated SQL is not preparedUse placeholders and $wpdb->prepare(); found interpolated variable $tableName at CREATE TABLE IF NOT EXISTS `$tableName` (\n13
- Category
- Security
- Occurrences
- 13
- Severity
- warning
Sample message
Use placeholders and $wpdb->prepare(); found interpolated variable $tableName at CREATE TABLE IF NOT EXISTS `$tableName` (\n
WARNINGSecurityUnquoted Complex PlaceholderComplex placeholders used for values in the query string in $wpdb->prepare() will NOT be quoted automagically. Found: %1$s.13
- Category
- Security
- Occurrences
- 13
- Severity
- warning
Sample message
Complex placeholders used for values in the query string in $wpdb->prepare() will NOT be quoted automagically. Found: %1$s.
WARNINGSecurityDatabase parameter is not escapedUnescaped parameter $tableName used in $wpdb->get_results()\n$tableName assigned unsafely at line 118.11
- Category
- Security
- Occurrences
- 11
- Severity
- warning
Sample message
Unescaped parameter $tableName used in $wpdb->get_results()\n$tableName assigned unsafely at line 118.
Show 15 moreShow less
WARNINGMaintainabilitySchema Change9
- Category
- Maintainability
- Occurrences
- 9
- Severity
- warning
Sample message
Attempting a database schema change is discouraged.
WARNINGSecurityInput is not validated9
- Category
- Security
- Occurrences
- 9
- Severity
- warning
Sample message
Detected usage of a possibly undefined superglobal array index: $_REQUEST[$this->_args['singular']]. Check that the array index exists before using it.
ERRORI18nMissing Arg Domain9
- Category
- I18n
- Occurrences
- 9
- Severity
- error
Sample message
Missing $domain parameter in function call to __().
WARNINGSecurityMissing nonce verification8
- Category
- Security
- Occurrences
- 8
- Severity
- warning
Sample message
Processing form data without nonce verification.
ERRORI18nMissing Translators Comment7
- Category
- I18n
- Occurrences
- 7
- Severity
- error
Sample message
A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.
ERRORSecurityException output is not escaped4
- Category
- Security
- Occurrences
- 4
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"Service '{$key}' is not registered"'.
ERRORSecurityUnsafe printing function4
- Category
- Security
- Occurrences
- 4
- Severity
- error
Sample message
All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.
ERRORSecuritySQL query is not prepared3
- Category
- Security
- Occurrences
- 3
- Severity
- error
Sample message
Use placeholders and $wpdb->prepare(); found $query
WARNINGMaintainabilityNon-prefixed global variable3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$loader".
WARNINGMaintainabilityNot In Footer3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
In footer ($in_footer) is not set explicitly wp_enqueue_script; It is recommended to load scripts in the footer. Please set this value to `true` to load it in the footer, or explicitly `false` if it should be loaded in the header.
ERRORMaintainabilitybadly named files3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- error
Sample message
File and folder names must not contain spaces or special characters.
WARNINGMaintainabilitytrademarked term3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
The plugin name includes a restricted term. Your chosen plugin name - "WP Mail Logging" - contains the restricted term "wp" which cannot be used at all in your plugin name.
ERRORSecurityDatabase parameter is not escaped2
- Category
- Security
- Occurrences
- 2
- Severity
- error
Sample message
Unescaped parameter $query used in $wpdb->get_results()\n$query assigned unsafely at line 403.
WARNINGMaintainabilityNon-prefixed constant2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "WP_MAIL_LOGGING_PLUGIN_DIR".
ERRORI18nMissing Singular Placeholder2
- Category
- I18n
- Occurrences
- 2
- Severity
- error
Sample message
Missing singular placeholder, needed for some languages. See https://codex.wordpress.org/I18n_for_WordPress_Developers#Plurals
External Connections
Not analyzed yet.
Score History
First score snapshot
v1.16.0
34
Latest
- Findings
- 334
- Errors
- 76
- Warnings
- 258
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 34 | 334 | 76 | 258 | v1.16.0 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueRelated
Relationship links
Plugin
Author
Issue
Related
WP Mail SMTP by WPForms – The Most Popular SMTP and Email Log Plugin30 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce22 scoreAkismet Anti-spam: Spam Protection35 scoreAll-in-One WP Migration and Backup34 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder35 scoreClassic Editor63 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWPForms – AI Form Builder for WordPress – Contact Forms, Payment Forms, Survey Form, Quiz & More32 scoreAll in One SEO – AI SEO Plugin to Boost SEO Rankings & Traffic (Schema, Local SEO, Sitemap & SEO Insights)97 scoreWPCode – Insert Headers and Footers + Custom Code Snippets – WordPress Code Manager88 scoreMC4WP: Mailchimp for WordPress57 scoreDuplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More21 score
Plugin
Author
Issue
Related
WP Mail SMTP by WPForms – The Most Popular SMTP and Email Log Plugin30 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce22 scoreAkismet Anti-spam: Spam Protection35 scoreAll-in-One WP Migration and Backup34 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder35 scoreClassic Editor63 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWPForms – AI Form Builder for WordPress – Contact Forms, Payment Forms, Survey Form, Quiz & More32 scoreAll in One SEO – AI SEO Plugin to Boost SEO Rankings & Traffic (Schema, Local SEO, Sitemap & SEO Insights)97 scoreWPCode – Insert Headers and Footers + Custom Code Snippets – WordPress Code Manager88 scoreMC4WP: Mailchimp for WordPress57 scoreDuplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More21 score
Related Plugins
Block for Mailchimp – Add Email Subscription Forms and Collect Leads
2k+ active installs
100
Contact Form Query
1k+ active installs
100
Configure SMTP
6k+ active installs
99
Email Address Obfuscation
2k+ active installs
99
Emails Catch All
600 active installs
99
SMTP for Contact Form 7
1k+ active installs
99