| #1 | WebToffee eCommerce Marketing Automation – Email marketing, Popups, Email customizer | 98 | 2 | 12 | 10k+ | | | Non-prefixed class |
| #2 | Gutena Newsletter – Subscriber Block & Connect Mailchimp | 97 | 18 | 3 | 1k+ | | | Text Domain Mismatch |
| #3 | SureContact – Newsletters, Email Marketing, Automation, Revenue Tracking & CRM | 36 | 314 | 132 | 4k+ | | | Text Domain Mismatch |
| #4 | Poptin – Email Marketing Automation, Newsletter & Exit Pop Ups, Email Popups | 35 | 173 | 34 | 20k+ | | | Output is not escaped |
| #5 | Newsletter Sign-Up for CleverReach | 31 | 174 | 72 | 2k+ | | | Output is not escaped |
| #6 | CleverReach® WP | 31 | 103 | 93 | 4k+ | | | Non-prefixed global variable |
| #7 | Sender – Newsletter, SMS and Email Marketing Automation for WooCommerce | 29 | 148 | 246 | 5k+ | | | Unsafe printing function |
| #8 | weMail – Email Marketing, Newsletter Builder & Email Automations for WooCommerce | 29 | 276 | 68 | 10k+ | | | Missing direct file access protection |
| #9 | Mail Mint – Email Marketing, Newsletter, Email Automation & WooCommerce Emails | 25 | 4,675 | 1,455 | 5k+ | | | Text Domain Mismatch |
| #10 | Email Subscribers & Newsletters – Email Marketing, Post Notifications & Newsletter Plugin for WordPress | 24 | 652 | 1,495 | 60k+ | | | Non-prefixed hook name |
| #11 | Groundhogg — CRM, Newsletters, and Marketing Automation | 23 | 132 | 914 | 2k+ | | | Non-prefixed global variable |
| #12 | MailPoet – Newsletters, Email Marketing, and Automation | 23 | 926 | 710 | 500k+ | | | Exception output is not escaped |
