| #1 | Hustle – Email Marketing, Lead Generation, Optins, Popups | 37 | 4,894 | 5,942 | 90k+ | | | Non-prefixed global variable |
| #2 | Mail Mint – Email Marketing, Newsletter, Email Automation & WooCommerce Emails | 25 | 4,996 | 1,724 | 5k+ | | | Text Domain Mismatch |
| #3 | MailOptin – Popup, Optin Forms & Email Newsletters for Mailchimp, HubSpot, AWeber Etc. | 22 | 2,625 | 2,458 | 10k+ | | | Output is not escaped |
| #4 | MailerPress – Email Marketing, Newsletter, Email Automation & WooCommerce Emails | 24 | 805 | 3,934 | 1k+ | | | Direct Query |
| #5 | SendPress Newsletters | 19 | 2,293 | 1,422 | 1k+ | | | Output is not escaped |
| #6 | Smart Marketing SMS and Newsletters Forms | 23 | 2,232 | 1,015 | 1k+ | | | Text Domain Mismatch |
| #7 | Newsletter – Send awesome emails from WordPress | 24 | 899 | 2,230 | 200k+ | | | Non-prefixed global variable |
| #8 | FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce | 23 | 798 | 2,193 | 20k+ | | | SQL query is not prepared |
| #9 | Email Subscribers & Newsletters – Email Marketing, Post Notifications & Newsletter Plugin for WordPress | 23 | 653 | 1,510 | 50k+ | | | Non-prefixed hook name |
| #10 | Arigato Autoresponder and Newsletter | 24 | 1,318 | 769 | 500 | | | Text Domain Mismatch |
| #11 | Sitepact's Contact Form 7 Extension For Klaviyo | 24 | 541 | 1,412 | 500 | | | Non-prefixed global variable |
| #12 | RSS Chimp – Add Featured Images to WP RSS Feeds (Mailchimp, Google News, Feedly) | 25 | 622 | 1,310 | 400 | | | Non-prefixed global variable |
| #13 | MailPoet – Newsletters, Email Marketing, and Automation | 23 | 871 | 718 | 500k+ | | | Exception output is not escaped |
| #14 | Brevo – Email, SMS, Web Push, Chat, and more. | 20 | 460 | 646 | 100k+ | | | Request data is not unslashed |
| #15 | FluentCRM – Email Newsletter, Automation, Email Marketing, Email Campaigns, Optins, Leads, and CRM Solution | 24 | 203 | 797 | 80k+ | | | Direct Query |
| #16 | Email Subscription Popup — Newsletter & GDPR Consent | 35 | 683 | 193 | 1k+ | | | Output is not escaped |
| #17 | NewsmanApp | 94 | 747 | 4 | 500 | | | Text Domain Mismatch |
| #18 | Simple Newsletter Plugin – Noptin | 22 | 73 | 599 | 10k+ | | | Non-prefixed global variable |
| #19 | Mailjet Email Marketing | 24 | 435 | 206 | 10k+ | | | Unsafe printing function |
| #20 | MailerLite – Signup forms (official) | 36 | 430 | 158 | 100k+ | | | Output is not escaped |
| #21 | BlossomThemes Email Newsletter | 23 | 337 | 239 | 20k+ | | | Output is not escaped |
| #22 | WP Offload SES Lite | 96 | 541 | 5 | 10k+ | | | Text Domain Mismatch |
| #23 | Mailrelay | 31 | 317 | 170 | 1k+ | | | Text Domain Mismatch |
| #24 | AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress | 26 | 245 | 225 | 6k+ | | | Exception output is not escaped |
| #25 | SureContact – Newsletters, Email Marketing, Automation, Revenue Tracking & CRM | 36 | 314 | 132 | 10k+ | | | Text Domain Mismatch |
| #26 | EnvíaloSimple: Email Marketing y Newsletters | 35 | 147 | 250 | 2k+ | | | Nonce verification recommended |
| #27 | Sender – Newsletter, SMS and Email Marketing Automation for WooCommerce | 29 | 148 | 245 | 5k+ | | | Unsafe printing function |
| #28 | Telegram Bot & Channel | 33 | 182 | 113 | 600 | | | Unsafe printing function |
| #29 | Get a Newsletter | 35 | 138 | 144 | 400 | | | Output is not escaped |
| #30 | Enormail Sign Up Forms | 36 | 133 | 126 | 400 | | | Output is not escaped |
| #31 | Newsletter Sign-Up for CleverReach | 31 | 174 | 72 | 2k+ | | | Output is not escaped |
| #32 | MC4WP: Mailchimp for WordPress | 57 | 1 | 238 | 1m+ | | | Non-prefixed global variable |
| #33 | Constant Contact Forms by MailMunch | 37 | 147 | 53 | 2k+ | | | wp function not compatible with requires wp |
| #34 | CleverReach® WP | 31 | 103 | 93 | 4k+ | | | Non-prefixed global variable |
| #35 | Poptin – Email Marketing Automation, Newsletter & Exit Pop Ups, Email Popups | 35 | 157 | 29 | 20k+ | | | Text Domain Mismatch |
| #36 | Brevo for WooCommerce | 35 | 116 | 67 | 30k+ | | | Output is not escaped |
| #37 | Mailchimp List Subscribe Form | 86 | 22 | 156 | 60k+ | | | Non-prefixed global variable |
| #38 | Mass Email To Users | 40 | 84 | 81 | 800 | | | Output is not escaped |
| #39 | WP Subscribe | 29 | 79 | 79 | 7k+ | | | Non-prefixed class |
| #40 | MailMunch – Grow your Email List | 36 | 102 | 49 | 6k+ | | | Output is not escaped |
| #41 | Popup addon for Ninja Forms | 40 | 121 | 25 | 900 | | | Output is not escaped |
| #42 | MailingBoss WP Plugin | 37 | 108 | 30 | 500 | | | Output is not escaped |
| #43 | Easy Subscribe | 44 | | 136 | 900 | | | Direct Query |
| #44 | Official CleverReach® Plugin for WooCommerce | 46 | 37 | 98 | 400 | | | Non-prefixed global variable |
| #45 | Constant Contact Forms | 35 | 41 | 89 | 20k+ | | | Missing nonce verification |
| #46 | rapidmail: Newsletter & E-Mail Marketing for WooCommerce | 37 | 79 | 47 | 400 | | | Text Domain Mismatch |
| #47 | Mail Subscribe List | 39 | 17 | 94 | 3k+ | | | Input is not validated |
| #48 | Benchmark Email Lite | 39 | 86 | 23 | 1k+ | | | Output is not escaped |
| #49 | Easy GDPR Consent Forms – MailChimp | 57 | 72 | 22 | 500 | | | Text Domain Mismatch |
| #50 | Mailster Gravity Forms | 50 | 46 | 32 | 800 | | | Text Domain Mismatch |