Free WordPress SMTP plugin with email logs, open & click tracking, reports & charts, CSV export, and WooCommerce email preview.
22
Score
1,366
Errors
477
Warnings
+0
Change
Category Scores
Security0
Repo81
Performance100
Maintainability0
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Maintainability
1,190
17 issue groups
Security
404
7 issue groups
I18n
130
1 issue group
ERRORMaintainabilityOffloaded ContentOffloading images, js, css, and other scripts to your servers or any remote service is disallowed.698
- Category
- Maintainability
- Occurrences
- 698
- Severity
- error
Sample message
Offloading images, js, css, and other scripts to your servers or any remote service is disallowed.
ERRORSecurityException output is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"$name not found on class"'.256
- Category
- Security
- Occurrences
- 256
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"$name not found on class"'.
ERRORI18nText Domain MismatchMismatched text domain. Expected 'yaysmtp' but got 'yay-smtp'.130
- Category
- I18n
- Occurrences
- 130
- Severity
- error
Sample message
Mismatched text domain. Expected 'yaysmtp' but got 'yay-smtp'.
WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.98
- Category
- Maintainability
- Occurrences
- 98
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().86
- Category
- Maintainability
- Occurrences
- 86
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$__composer_autoload_files".57
- Category
- Maintainability
- Occurrences
- 57
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$__composer_autoload_files".
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"$data is not a valid file"'.50
- Category
- Security
- Occurrences
- 50
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"$data is not a valid file"'.
ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;33
- Category
- Maintainability
- Occurrences
- 33
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
WARNINGMaintainabilityerror log trigger errortrigger_error() found. Debug code should not normally be used in production.25
- Category
- Maintainability
- Occurrences
- 25
- Severity
- warning
Sample message
trigger_error() found. Debug code should not normally be used in production.
WARNINGSecurityMissing nonce verificationProcessing form data without nonce verification.24
- Category
- Security
- Occurrences
- 24
- Severity
- warning
Sample message
Processing form data without nonce verification.
Show 15 moreShow less
WARNINGSecurityNonce verification recommended24
- Category
- Security
- Occurrences
- 24
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGMaintainabilityNon-prefixed namespace22
- Category
- Maintainability
- Occurrences
- 22
- Severity
- warning
Sample message
Namespaces declared by a theme/plugin should start with the theme/plugin prefix. Found: "Psr\Cache".
WARNINGSecurityRequest data is not unslashed22
- Category
- Security
- Occurrences
- 22
- Severity
- warning
Sample message
$_GET['code'] not unslashed before sanitization. Use wp_unslash() or similar
ERRORMaintainabilitycurl curl setopt22
- Category
- Maintainability
- Occurrences
- 22
- Severity
- error
Sample message
Using cURL functions is highly discouraged. Use wp_remote_get() instead.
ERRORMaintainabilityfile system operations fclose21
- Category
- Maintainability
- Occurrences
- 21
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fclose().
ERRORMaintainabilityfile system operations fread20
- Category
- Maintainability
- Occurrences
- 20
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fread().
WARNINGMaintainabilityerror log var export19
- Category
- Maintainability
- Occurrences
- 19
- Severity
- warning
Sample message
var_export() found. Debug code should not normally be used in production.
WARNINGMaintainabilitySchema Change18
- Category
- Maintainability
- Occurrences
- 18
- Severity
- warning
Sample message
Attempting a database schema change is discouraged.
WARNINGMaintainabilityNon-prefixed constant18
- Category
- Maintainability
- Occurrences
- 18
- Severity
- warning
Sample message
Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "INTL_IDNA_VARIANT_2003".
ERRORSecuritySQL query is not prepared16
- Category
- Security
- Occurrences
- 16
- Severity
- error
Sample message
Use placeholders and $wpdb->prepare(); found $countQuery
ERRORMaintainabilityfile system operations fopen15
- Category
- Maintainability
- Occurrences
- 15
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fopen().
ERRORMaintainabilityfile system operations fwrite15
- Category
- Maintainability
- Occurrences
- 15
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fwrite().
ERRORMaintainabilityfile system operations fputs13
- Category
- Maintainability
- Occurrences
- 13
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fputs().
WARNINGSecurityInput is not sanitized12
- Category
- Security
- Occurrences
- 12
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_ENV['SSH_AUTH_SOCK']
ERRORMaintainabilityparse url parse url10
- Category
- Maintainability
- Occurrences
- 10
- Severity
- error
Sample message
parse_url() is discouraged because of inconsistency in the output across PHP versions; use wp_parse_url() instead.
External Connections
Potential connections found in static code analysis.
Outbound calls
276
External assets
0
Incoming endpoints
24
Notable Domains
apache.org49 · outbound
tools.ietf.org41 · outbound
yaycommerce.com16 · outbound
php.net14 · outbound
developers.google.com8 · outbound
docs.aws.amazon.com7 · outbound
Platform / Reference Domains
downloads.wordpress.org19 · platform/reference
ps.w.org19 · platform/reference
w3.org16 · platform/reference
github.com11 · platform/reference
wordpress.org3 · platform/reference
profiles.wordpress.org1 · platform/reference
External Asset Domains
No external asset domains detected.
Incoming Endpoints
No public endpoints detected.
Admin AJAX endpoints24
wp_ajax_yay_recommended_activate_pluginauthenticated
wp_ajax
wp_ajax_yay_recommended_get_plugin_dataauthenticated
wp_ajax
wp_ajax_yay_recommended_upgrade_pluginauthenticated
wp_ajax
wp_ajax_yaysmtp_close_popup_import_smtp_settingsauthenticated
wp_ajax
wp_ajax_yaysmtp_delete_all_email_logsauthenticated
wp_ajax
wp_ajax_yaysmtp_delete_email_logsauthenticated
wp_ajax
wp_ajax_yaysmtp_detail_email_logsauthenticated
wp_ajax
wp_ajax_yaysmtp_email_logsauthenticated
wp_ajax
wp_ajax_yaysmtp_export_email_logauthenticated
wp_ajax
wp_ajax_yaysmtp_fallback_send_mailauthenticated
wp_ajax
wp_ajax_yaysmtp_gmail_remove_authauthenticated
wp_ajax
wp_ajax_yaysmtp_gmail_remove_auth_fallbackauthenticated
wp_ajax
12 more hidden
Score History
3 score snapshots
v2.7.7
22
Latest
- Findings
- 1,843
- Errors
- 1,366
- Warnings
- 477
- Check
- 2.1.0
v2.7.6
22
Score
- Findings
- 1,089
- Errors
- 654
- Warnings
- 435
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 22 | 1,843 | 1,366 | 477 | v2.7.7 | 2.1.0 |
| 22 | 1,089 | 654 | 435 | v2.7.6 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Author
Issue
Domain
Related
WP Mail SMTP by WPForms – The Most Popular SMTP and Email Log Plugin30 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce22 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreElementor Website Builder – more than just a page builder39 scoreLiteSpeed Cache35 scoreJetpack – WP Security, Backup, Speed, & Growth22 scoreFluentSMTP – WP Mail SMTP Plugin with Amazon SES, SendGrid, Mailgun, Postmark, Cloudflare, toSend, Gmail and Any SMTP27 scoreEasy WP SMTP – WordPress SMTP and Email Logs: Gmail SMTP, Office 365, Outlook, Custom SMTP, and more15 scoreGoSMTP – SMTP for WordPress38 scorePost SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App22 scoreWP Mail Logging34 scoreCheck & Log Email – Easy Email Testing & Mail logging98 score
Author
Issue
Domain
Related
WP Mail SMTP by WPForms – The Most Popular SMTP and Email Log Plugin30 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce22 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreElementor Website Builder – more than just a page builder39 scoreLiteSpeed Cache35 scoreJetpack – WP Security, Backup, Speed, & Growth22 scoreFluentSMTP – WP Mail SMTP Plugin with Amazon SES, SendGrid, Mailgun, Postmark, Cloudflare, toSend, Gmail and Any SMTP27 scoreEasy WP SMTP – WordPress SMTP and Email Logs: Gmail SMTP, Office 365, Outlook, Custom SMTP, and more15 scoreGoSMTP – SMTP for WordPress38 scorePost SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App22 scoreWP Mail Logging34 scoreCheck & Log Email – Easy Email Testing & Mail logging98 score
Related Plugins
Configure SMTP
6k+ active installs
99
SMTP for Contact Form 7
1k+ active installs
99
Emails Catch All
600 active installs
99
iConvert Email Marketer
600 active installs
99
Check & Log Email – Easy Email Testing & Mail logging
100k+ active installs
98
SAR Friendly SMTP
2k+ active installs
98