| #1 | WebToffee eCommerce Marketing Automation – Email marketing, Popups, Email customizer | 98 | 2 | 12 | 10k+ | | | Non-prefixed class |
| #2 | Gutena Newsletter – Subscriber Block & Connect Mailchimp | 97 | 18 | 3 | 1k+ | | | Text Domain Mismatch |
| #3 | Official CleverReach® Plugin for WooCommerce | 46 | 37 | 98 | 400 | | | Non-prefixed global variable |
| #4 | SureContact – Newsletters, Email Marketing, Automation, Revenue Tracking & CRM | 36 | 314 | 132 | 10k+ | | | Text Domain Mismatch |
| #5 | Poptin – Email Marketing Automation, Newsletter & Exit Pop Ups, Email Popups | 35 | 157 | 29 | 20k+ | | | Text Domain Mismatch |
| #6 | CleverReach® WP | 31 | 103 | 93 | 4k+ | | | Non-prefixed global variable |
| #7 | Newsletter Sign-Up for CleverReach | 31 | 174 | 72 | 2k+ | | | Output is not escaped |
| #8 | weMail – Email Marketing, Newsletters Builder & Email Automations for WooCommerce | 29 | 276 | 68 | 10k+ | | | Missing direct file access protection |
| #9 | Sender – Newsletter, SMS and Email Marketing Automation for WooCommerce | 29 | 148 | 245 | 5k+ | | | Unsafe printing function |
| #10 | Mail Mint – Email Marketing, Newsletter, Email Automation & WooCommerce Emails | 24 | 4,696 | 1,480 | 5k+ | | | Text Domain Mismatch |
| #11 | MailerPress – Email Marketing, Newsletter, Email Automation & WooCommerce Emails | 24 | 805 | 3,934 | 1k+ | | | Direct Query |
| #12 | YayReviews – Advanced Customer Reviews for WooCommerce | 24 | 314 | 1,256 | 100 | | | Non-prefixed global variable |
| #13 | MailPoet – Newsletters, Email Marketing, and Automation | 23 | 871 | 718 | 500k+ | | | Exception output is not escaped |
| #14 | Email Subscribers & Newsletters – Email Marketing, Post Notifications & Newsletter Plugin for WordPress | 23 | 653 | 1,496 | 50k+ | | | Non-prefixed hook name |
| #15 | Groundhogg — CRM, Newsletters, and Marketing Automation | 23 | 136 | 919 | 2k+ | | | Non-prefixed global variable |
