| #101 | WPO365 | MICROSOFT 365 GRAPH MAILER | 37 | 112 | 83 | 10k+ | | | Text Domain Mismatch |
| #102 | Email Before Download | 36 | 89 | 29 | 6k+ | | | Unsafe printing function |
| #103 | PDF Forms Filler for CF7 | 36 | 185 | 79 | 3k+ | | | Text Domain Mismatch |
| #104 | PDF Forms Filler for WPForms | 36 | 161 | 54 | 600 | | | Text Domain Mismatch |
| #105 | ActiveCampaign Postmark for WordPress | 36 | 47 | 75 | 50k+ | | | Text Domain Mismatch |
| #106 | Subscribe to Comments | 36 | 129 | 163 | 10k+ | | | Output is not escaped |
| #107 | WP-EMail | 36 | 340 | 95 | 1k+ | | | Unsafe printing function |
| #108 | Kit (formerly ConvertKit) for WooCommerce | 35 | 213 | 18 | 4k+ | | | Text Domain Mismatch |
| #109 | Cryptex | E-Mail Address Protection | 35 | 62 | 10 | 900 | | | Output is not escaped |
| #110 | Additional Custom Emails & Recipients for WooCommerce | 35 | 1 | 0 | 2k+ | | | Hidden files included |
| #111 | EnvíaloSimple: Email Marketing y Newsletters | 35 | 147 | 250 | 2k+ | | | Nonce verification recommended |
| #112 | F4 Shipping Phone and E-Mail for WooCommerce | 35 | 24 | 26 | 800 | | | Non-prefixed hook name |
| #113 | Force Email Login | 35 | 5 | 0 | 800 | | | Hidden files included |
| #114 | Mail Queue | 35 | 22 | 77 | 900 | | | Direct Query |
| #115 | Pixeline's Email Protector | 35 | 77 | 5 | 800 | | | Unsafe printing function |
| #116 | Print, PDF & Email by PrintFriendly | 35 | 1 | 5 | 20k+ | | | Not In Footer |
| #117 | WP Mailto Links – Protect Email Addresses | 35 | 95 | 69 | 8k+ | | | Output is not escaped |
| #118 | WP PGP Encrypted Emails | 35 | 63 | 39 | 400 | | | Output is not escaped |
| #119 | HollerBox — Fast & Effective Popups & Lead-Generation | 34 | 78 | 92 | 2k+ | | | Output is not escaped |
| #120 | Kadence WooCommerce Email Designer | 34 | 119 | 230 | 100k+ | | | Non-prefixed global variable |
| #121 | Wp Default Sender Email by IT Pixelz | 34 | 682 | 25 | 500 | | | Output is not escaped |
| #122 | Email Template Designer – WP HTML Mail | 34 | 62 | 80 | 20k+ | | | badly named files |
| #123 | WP Mail Logging | 34 | 76 | 258 | 300k+ | | | Nonce verification recommended |
| #124 | AWeber – Free Sign Up Form and Landing Page Builder Plugin for Lead Generation and Email Newsletter Growth | 33 | 33 | 229 | 9k+ | | | Non-prefixed global variable |
| #125 | Notification Master – Real-Time WordPress Notifications With Email, SMS, Webhooks & More | 33 | 293 | 215 | 1k+ | | | Text Domain Mismatch |
| #126 | SMTP2GO for WordPress – Email Made Easy | 33 | 186 | 111 | 30k+ | | | Output is not escaped |
| #127 | Subscribe2 – Form, Email Subscribers & Newsletters | 32 | 32 | 410 | 10k+ | | | Direct Query |
| #128 | Email Templates Customizer and Designer for WordPress and WooCommerce | 30 | 250 | 349 | 20k+ | | | Non-prefixed global variable |
| #129 | WP Mail SMTP by WPForms – The Most Popular SMTP and Email Log Plugin | 30 | 32 | 346 | 4m+ | | | Non-prefixed hook name |
| #130 | Notification – Custom Notifications and Alerts for WordPress | 28 | 186 | 219 | 10k+ | | | Non-prefixed global variable |
| #131 | WPO365 | SEAMLESS WORDPRESS + MICROSOFT INTEGRATION (WPO365 | LOGIN) | 28 | 209 | 217 | 10k+ | | | Exception output is not escaped |
| #132 | Email Marketing Plugin – WP Email Capture | 27 | 383 | 262 | 1k+ | | | Output is not escaped |
| #133 | Contact Form Email | 25 | 409 | 898 | 9k+ | | | Non-prefixed global variable |
| #134 | YeeMail — Email Template Builder & Customizer | 25 | 606 | 222 | 600 | | | wp function not compatible with requires wp |
| #135 | Anti Spam and list cleaner – AcyChecker | 24 | 462 | 88 | 400 | | | Output is not escaped |
| #136 | Contact Widgets For Elementor all the contact links you need in one place | 24 | 908 | 1,188 | 500 | | | Non-prefixed global variable |
| #137 | Mail Mint – Email Marketing, Newsletter, Email Automation & WooCommerce Emails | 24 | 4,696 | 1,480 | 5k+ | | | Text Domain Mismatch |
| #138 | Mailchimp for WooCommerce | 24 | 523 | 663 | 200k+ | | | Non-prefixed global variable |
| #139 | Mailjet Email Marketing | 24 | 435 | 206 | 10k+ | | | Unsafe printing function |
| #140 | Post Status Notifier Lite | 24 | 984 | 451 | 700 | | | Missing direct file access protection |
| #141 | Sailthru for WordPress | 24 | 239 | 266 | 2k+ | | | Non-prefixed global variable |
| #142 | BlossomThemes Email Newsletter | 23 | 337 | 239 | 20k+ | | | Output is not escaped |
| #143 | Postie | 23 | 407 | 261 | 10k+ | | | Output is not escaped |
| #144 | E2Pdf – Export Pdf Tool for WordPress | 22 | 1,075 | 836 | 10k+ | | | Unsafe printing function |
| #145 | Newsletters | 22 | 2,968 | 2,248 | 2k+ | | | Text Domain Mismatch |
| #146 | Post SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App | 22 | 1,581 | 2,326 | 300k+ | | | Non-prefixed global variable |
| #147 | Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent | 22 | 225 | 519 | 8k+ | | | error log error log |
| #148 | MailChimp Subscribe Form, Optin Builder, PopUp Builder, Form Builder | 21 | 1,133 | 3,011 | 2k+ | | | Non-prefixed global variable |
| #149 | SpeakOut! Email Petitions | 20 | 850 | 994 | 3k+ | | | Missing nonce verification |
| #150 | WP Email Template | 19 | 342 | 350 | 2k+ | | | Exception output is not escaped |