Most Installed Email WordPress Plugins
151 indexed plugins
Plugins
151
Active Installs
8m+
Average Score
55
Audited
151
Most Installed
| Rank | Plugin | Score | Errors | Warnings | Installs | Added | Updated | Top Issue |
|---|---|---|---|---|---|---|---|---|
| #101 | Simple Membership MailChimp Integration | 45 | 34 | 27 | 1k+ | curl curl setopt | ||
| #102 | Unconfirmed | 38 | 20 | 79 | 1k+ | Nonce verification recommended | ||
| #103 | WP-EMail | 36 | 340 | 95 | 1k+ | Unsafe printing function | ||
| #104 | Email Marketing Plugin – WP Email Capture | 27 | 383 | 262 | 1k+ | Output is not escaped | ||
| #105 | WP Reroute Email | 40 | 141 | 106 | 1k+ | Output is not escaped | ||
| #106 | Cryptex | E-Mail Address Protection | 35 | 62 | 10 | 900 | Output is not escaped | ||
| #107 | Mail Queue | 35 | 22 | 77 | 900 | Direct Query | ||
| #108 | Send Emails with Resend | 93 | 3 | 0 | 900 | Setting is missing a sanitization callback | ||
| #109 | SocketLabs | 65 | 15 | 18 | 900 | Output is not escaped | ||
| #110 | Deliverability – pass DKIM, SPF, DMARC & more | 39 | 21 | 71 | 800 | Nonce verification recommended | ||
| #111 | Email Tracker | 65 | 25 | 4 | 800 | SQL query is not prepared | ||
| #112 | F4 Shipping Phone and E-Mail for WooCommerce | 35 | 24 | 26 | 800 | Non-prefixed hook name | ||
| #113 | Force Email Login | 35 | 5 | 0 | 800 | Hidden files included | ||
| #114 | Pixeline's Email Protector | 35 | 77 | 5 | 800 | Unsafe printing function | ||
| #115 | Send Email From Admin | 53 | 27 | 13 | 800 | Text Domain Mismatch | ||
| #116 | Change Administrator Email Address | 71 | 12 | 9 | 700 | Output is not escaped | ||
| #117 | Gravity Forms ConvertKit Add-On | 95 | 65 | 11 | 700 | Text Domain Mismatch | ||
| #118 | Post Status Notifier Lite | 24 | 984 | 451 | 700 | Missing direct file access protection | ||
| #119 | WP Email Log – PostBox | 42 | 2 | 81 | 700 | Nonce verification recommended | ||
| #120 | Smaily for WP | 39 | 52 | 36 | 700 | Output is not escaped | ||
| #121 | SMTP | 39 | 54 | 15 | 700 | Non Singular String Literal Domain | ||
| #122 | Update Notifier | 86 | 8 | 1 | 700 | Output is not escaped | ||
| #123 | Contact Form 7 to Mailjet | 40 | 70 | 39 | 600 | Output is not escaped | ||
| #124 | Fetchify | 85 | 154 | 19 | 600 | Text Domain Mismatch | ||
| #125 | Comment Email Reply | 98 | 6 | 2 | 600 | Text Domain Mismatch | ||
| #126 | LH Multipart Email | 91 | 4 | 5 | 600 | Non-prefixed hook name | ||
| #127 | MailingBoss WP Plugin | 37 | 108 | 30 | 600 | Output is not escaped | ||
| #128 | Mailster Live | 48 | 22 | 37 | 600 | Missing Translators Comment | ||
| #129 | PDF Forms Filler for WPForms | 36 | 161 | 54 | 600 | Text Domain Mismatch | ||
| #130 | YeeMail — Email Template Builder & Customizer | 25 | 606 | 222 | 600 | wp function not compatible with requires wp | ||
| #131 | Comment Approved Notifier Extended | 74 | 5 | 10 | 500 | Output is not escaped | ||
| #132 | Comment Reply Email | 42 | 21 | 23 | 500 | Unsafe printing function | ||
| #133 | Contact Widgets For Elementor all the contact links you need in one place | 24 | 908 | 1,188 | 500 | Non-prefixed global variable | ||
| #134 | Drip for Gravity Forms | 39 | 41 | 21 | 500 | Unsafe printing function | ||
| #135 | Email Post Changes | 63 | 43 | 8 | 500 | Missing Arg Domain | ||
| #136 | Essential Form – The lightest plugin for contact forms, ultra lightweight and no spam | 41 | 21 | 53 | 500 | Missing nonce verification | ||
| #137 | Export emails | 83 | 8 | 7 | 500 | Direct Query | ||
| #138 | Gravity Forms: Notification Attachments | 59 | 18 | 7 | 500 | Output is not escaped | ||
| #139 | Gist All-In-One Marketing – Live Chat, Popups, Email | 69 | 24 | 11 | 500 | Output is not escaped | ||
| #140 | More Mails for CF7 | 78 | 13 | 6 | 500 | Text Domain Mismatch | ||
| #141 | Quentn WP | 37 | 4 | 251 | 500 | Nonce verification recommended | ||
| #142 | Send From | 64 | 5 | 18 | 500 | Input is not sanitized | ||
| #143 | Wp Default Sender Email by IT Pixelz | 34 | 682 | 25 | 500 | Output is not escaped | ||
| #144 | Anti Spam and list cleaner – AcyChecker | 24 | 462 | 88 | 400 | Output is not escaped | ||
| #145 | Comment Notifier | 48 | 10 | 55 | 400 | Non-prefixed global variable | ||
| #146 | Developer Loggers for Simple History | 41 | 46 | 28 | 400 | Text Domain Mismatch | ||
| #147 | Host Header Injection Fix | 70 | 9 | 8 | 400 | Output is not escaped | ||
| #148 | NewsmanApp | 94 | 747 | 4 | 400 | Text Domain Mismatch | ||
| #149 | turboSMTP | 40 | 114 | 112 | 400 | Unsafe printing function | ||
| #150 | WP PGP Encrypted Emails | 35 | 63 | 39 | 400 | Output is not escaped |
