Plugin inspection:

MailPoet Newsletters

Use with caution

Last revised:

Confidence: Medium
This plugin has been given a short, targeted code review.

Before using this plugin, you should carefully consider these findings. Read more about this recommendation.

Findings

  • At over 34,000 lines of PHP this is a very large plugin, which makes it difficult to thoroughly assess
  • Uses eval (helpers/render_engine.php line 600 and 615, inc/dBug.php line 418)
  • Uses create_function but not in a manner which looks vulnerable

Reason for the 'Use with caution' result

The plugin contains or is likely to contain a vulnerability which could be exploited by a privileged user to affect the site’s confidentiality, integrity or availability in a manner exceeding their privileges:

Uses eval().