Email WordPress Plugins That Need Review
151 indexed plugins
Plugins
151
Active Installs
8m+
Average Score
55
Audited
151
Needs Review
| Rank | Plugin | Score | Errors | Warnings | Installs | Added | Updated | Top Issue |
|---|---|---|---|---|---|---|---|---|
| #101 | Gist All-In-One Marketing – Live Chat, Popups, Email | 69 | 24 | 11 | 500 | Output is not escaped | ||
| #102 | Host Header Injection Fix | 70 | 9 | 8 | 400 | Output is not escaped | ||
| #103 | Change Administrator Email Address | 71 | 12 | 9 | 700 | Output is not escaped | ||
| #104 | SmartSMTP | 71 | 8 | 42 | 2k+ | Nonce verification recommended | ||
| #105 | Contact Form to Brevo | 73 | 67 | 11 | 1k+ | Text Domain Mismatch | ||
| #106 | Email Test – Check if your emails are being delivered | 73 | 8 | 7 | 1k+ | Exception output is not escaped | ||
| #107 | Comment Approved Notifier Extended | 74 | 5 | 10 | 500 | Output is not escaped | ||
| #108 | Contact Form 7 Email Validation | 74 | 8 | 10 | 1k+ | Input is not validated | ||
| #109 | Email Deliverability – SMTP Replacement, Email API Deliverability & Email Log | 74 | 8 | 23 | 200k+ | Output is not escaped | ||
| #110 | Change Mail Sender | 76 | 97 | 19 | 20k+ | Text Domain Mismatch | ||
| #111 | Ecomail | 77 | 7 | 13 | 1k+ | Non-prefixed global variable | ||
| #112 | More Mails for CF7 | 78 | 13 | 6 | 500 | Text Domain Mismatch | ||
| #113 | WP Simple Mail Sender | 78 | 21 | 6 | 3k+ | Non Singular String Literal Domain | ||
| #114 | Disable Theme and Plugin Auto-Update Emails | 79 | 21 | 5 | 10k+ | Text Domain Mismatch | ||
| #115 | Klaviyo | 79 | 26 | 86 | 100k+ | Non-prefixed function | ||
| #116 | Yandex Mail | 79 | 16 | 4 | 400 | Non Singular String Literal Domain | ||
| #117 | SureMail – SMTP and Email Logs Plugin with Amazon SES, Postmark, and Other Providers | 80 | 45 | 65 | 200k+ | Non-prefixed hook name | ||
| #118 | Stop Emails | 82 | 9 | 3 | 5k+ | Missing direct file access protection | ||
| #119 | Export emails | 83 | 8 | 7 | 500 | Direct Query | ||
| #120 | Mailster SendGrid Integration | 83 | 23 | 3 | 1k+ | Missing Translators Comment | ||
| #121 | Make Disable Admin Email Verification Prompt| Aims Infosoft | 83 | 10 | 4 | 2k+ | Text Domain Mismatch | ||
| #122 | Change Admin Email | 84 | 4 | 4 | 50k+ | Missing nonce verification | ||
| #123 | Fetchify | 85 | 154 | 19 | 600 | Text Domain Mismatch | ||
| #124 | Mailchimp List Subscribe Form | 86 | 22 | 156 | 60k+ | Non-prefixed global variable | ||
| #125 | Update Notifier | 86 | 8 | 1 | 700 | Output is not escaped | ||
| #126 | Smaily Connect | 87 | 52 | 2k+ | Non-prefixed global variable | |||
| #127 | LH Multipart Email | 91 | 4 | 5 | 600 | Non-prefixed hook name | ||
| #128 | Email Blacklist For Elementor Forms | 92 | 7 | 5 | 1k+ | Text Domain Mismatch | ||
| #129 | Generate PDF using Contact Form 7 | 93 | 3 | 4k+ | Input is not sanitized | |||
| #130 | Send Emails with Resend | 93 | 3 | 0 | 900 | Setting is missing a sanitization callback | ||
| #131 | Floating Chat Buttons – Click to Call or Chat, Email | 94 | 1 | 1 | 1k+ | Output is not escaped | ||
| #132 | NewsmanApp | 94 | 747 | 4 | 400 | Text Domain Mismatch | ||
| #133 | Check & Log Email – Easy Email Testing & Mail logging | 95 | 3 | 11 | 100k+ | Non-prefixed constant | ||
| #134 | Gravity Forms ConvertKit Add-On | 95 | 65 | 11 | 700 | Text Domain Mismatch | ||
| #135 | Email Log | 95 | 5 | 53 | 80k+ | Non-prefixed hook name | ||
| #136 | Bit SMTP – Easy SMTP Solution with Email Logs | 96 | 6 | 13 | 2k+ | Missing Version | ||
| #137 | Kit (formerly ConvertKit) for WPForms | 96 | 11 | 16 | 1k+ | Non-prefixed global variable | ||
| #138 | Selection Sharer by Hans van Gent | 96 | 6 | 4 | 2k+ | wp function not compatible with requires wp | ||
| #139 | Disable auto-update Email Notifications | 97 | 3 | 2 | 30k+ | Missing direct file access protection | ||
| #140 | Disable New User Notification Emails | 97 | 2 | 6 | 4k+ | Non-prefixed hook name | ||
| #141 | Simple SMTP | 97 | 3 | 10 | 2k+ | Non-prefixed hook name | ||
| #142 | Comment Email Reply | 98 | 6 | 2 | 600 | Text Domain Mismatch | ||
| #143 | Disable WordPress Core Update Email | 98 | 2 | 3 | 2k+ | trademarked term | ||
| #144 | No Login by Email Address | 98 | 4 | 0 | 1k+ | Missing Arg Domain | ||
| #145 | SAR Friendly SMTP | 98 | 2 | 11 | 2k+ | Non-prefixed function | ||
| #146 | Send Images to RSS | 98 | 3 | 4 | 3k+ | Non-prefixed hook name | ||
| #147 | Configure SMTP | 99 | 2 | 1 | 6k+ | Discouraged text-domain loading | ||
| #148 | Email Address Obfuscation | 99 | 3 | 0 | 2k+ | wp function not compatible with requires wp | ||
| #149 | Stop WP Emails Going to Spam | 99 | 1 | 3 | 10k+ | trademarked term | ||
| #150 | Block for Mailchimp – Add Email Subscription Forms and Collect Leads | 100 | 1 | 2k+ | Non-prefixed class |