Email WordPress Plugins That Need Review
152 indexed plugins
Plugins
152
Active Installs
8m+
Average Score
54
Audited
152
Needs Review
| Rank | Plugin | Score | Errors | Warnings | Installs | Added | Updated | Top Issue |
|---|---|---|---|---|---|---|---|---|
| #51 | WP-EMail | 36 | 340 | 95 | 1k+ | Unsafe printing function | ||
| #52 | Customize WordPress Emails and Alerts – Better Notifications for WP | 37 | 64 | 47 | 30k+ | Missing Arg Domain | ||
| #53 | Gmail SMTP | 37 | 85 | 71 | 10k+ | Unsafe printing function | ||
| #54 | MailingBoss WP Plugin | 37 | 108 | 30 | 600 | Output is not escaped | ||
| #55 | Quentn WP | 37 | 4 | 251 | 500 | Nonce verification recommended | ||
| #56 | SendWP | 37 | 47 | 42 | 10k+ | Output is not escaped | ||
| #57 | Website Pop-up Builder by BDOW! (formerly Sumo): Pop-ups + forms for email opt-ins and lead generation | 37 | 42 | 33 | 10k+ | Output is not escaped | ||
| #58 | WP WooCommerce Mailchimp | 37 | 62 | 85 | 6k+ | Non-prefixed hook name | ||
| #59 | WPO365 | MICROSOFT 365 GRAPH MAILER | 37 | 112 | 83 | 10k+ | Text Domain Mismatch | ||
| #60 | Elemailer Lite – Elementor email template & campaign builder | 38 | 44 | 50 | 5k+ | Output is not escaped | ||
| #61 | Unconfirmed | 38 | 20 | 79 | 1k+ | Nonce verification recommended | ||
| #62 | Deliverability – pass DKIM, SPF, DMARC & more | 39 | 21 | 71 | 800 | Nonce verification recommended | ||
| #63 | Drip for Gravity Forms | 39 | 41 | 21 | 500 | Unsafe printing function | ||
| #64 | Mail Subscribe List | 39 | 17 | 94 | 3k+ | Input is not validated | ||
| #65 | Smaily for WP | 39 | 52 | 36 | 600 | Output is not escaped | ||
| #66 | SMTP | 39 | 54 | 15 | 700 | Non Singular String Literal Domain | ||
| #67 | Allow Multiple Accounts | 40 | 115 | 19 | 9k+ | Non Singular String Literal Domain | ||
| #68 | Contact Form 7 to Mailjet | 40 | 70 | 39 | 600 | Output is not escaped | ||
| #69 | Contact Form 7 GetResponse Extension | 40 | 90 | 18 | 1k+ | Text Domain Mismatch | ||
| #70 | MailerSend – Official SMTP Integration | 40 | 39 | 25 | 2k+ | Unsafe printing function | ||
| #71 | turboSMTP | 40 | 114 | 112 | 400 | Unsafe printing function | ||
| #72 | WP Reroute Email | 40 | 141 | 106 | 1k+ | Output is not escaped | ||
| #73 | Developer Loggers for Simple History | 41 | 46 | 28 | 400 | Text Domain Mismatch | ||
| #74 | Essential Form – The lightest plugin for contact forms, ultra lightweight and no spam | 41 | 21 | 53 | 500 | Missing nonce verification | ||
| #75 | Comment Reply Email | 42 | 21 | 23 | 500 | Unsafe printing function | ||
| #76 | WP Email Log – PostBox | 42 | 2 | 81 | 700 | Nonce verification recommended | ||
| #77 | SMTP Mailer | 42 | 51 | 49 | 70k+ | Unsafe printing function | ||
| #78 | Comment Reply Email Notification | 43 | 44 | 19 | 3k+ | Output is not escaped | ||
| #79 | WP Mail Log | 43 | 40 | 29 | 10k+ | Text Domain Mismatch | ||
| #80 | Back In Stock Notifier for WooCommerce | WooCommerce Waitlist Pro | 45 | 26 | 117 | 20k+ | Non-prefixed hook name | ||
| #81 | Simple Membership MailChimp Integration | 45 | 34 | 27 | 1k+ | curl curl setopt | ||
| #82 | Zoho Mail for WordPress | 46 | 29 | 48 | 20k+ | Request data is not unslashed | ||
| #83 | Log Emails | 47 | 19 | 29 | 6k+ | Non-prefixed global variable | ||
| #84 | Comment Notifier | 48 | 10 | 55 | 400 | Non-prefixed global variable | ||
| #85 | Mailster Live | 48 | 22 | 37 | 600 | Missing Translators Comment | ||
| #86 | Send Emails with Mandrill | 50 | 36 | 141 | 6k+ | Non-prefixed global variable | ||
| #87 | Send Email From Admin | 53 | 27 | 13 | 700 | Text Domain Mismatch | ||
| #88 | Disqus Comment System | 54 | 17 | 33 | 40k+ | Non-prefixed hook name | ||
| #89 | Email Template Customizer for WooCommerce | 55 | 552 | 248 | 20k+ | Text Domain Mismatch | ||
| #90 | VS Contact Form | 55 | 3 | 318 | 7k+ | Non-prefixed global variable | ||
| #91 | SMTP by BestWebSoft | 56 | 486 | 175 | 1k+ | Text Domain Mismatch | ||
| #92 | Gravity PDF | 57 | 116 | 152 | 20k+ | Non-prefixed global variable | ||
| #93 | MC4WP: Mailchimp for WordPress | 57 | 238 | 1m+ | Non-prefixed global variable | |||
| #94 | Gravity Forms: Notification Attachments | 59 | 18 | 7 | 500 | Output is not escaped | ||
| #95 | Email Post Changes | 63 | 43 | 8 | 500 | Missing Arg Domain | ||
| #96 | Send From | 64 | 5 | 18 | 500 | Input is not sanitized | ||
| #97 | Email Tracker | 65 | 25 | 4 | 800 | SQL query is not prepared | ||
| #98 | SocketLabs | 65 | 15 | 18 | 900 | Output is not escaped | ||
| #99 | WP Change Default From Email | 65 | 51 | 7 | 10k+ | Non Singular String Literal Domain | ||
| #100 | Mailchimp Widget by ProteusThemes | 66 | 17 | 9 | 1k+ | Output is not escaped |