| #1 | GiveWP – Donation Plugin and Fundraising Platform | 20 | 3,435 | 3,580 | 100k+ | | Output is not escaped |
| #2 | Kadence for WooCommerce and Elementor | 35 | 39 | 21 | 3k+ | | Output is not escaped |
| #3 | Solid Performance – Your No-Code Caching, Performance, & Page Speed Solution | 35 | 75 | 61 | 4k+ | | Exception output is not escaped |
| #4 | Bookit — Booking & Appointment Calendar | 24 | 566 | 1,456 | 4k+ | | Non-prefixed global variable |
| #5 | Advanced Post Manager | 85 | 11 | 18 | 4k+ | | Request data is not unslashed |
| #6 | The Events Calendar: Category Colors | 88 | 18 | 42 | 5k+ | | Non-prefixed global variable |
| #7 | GiveWP Donation Widgets for Elementor | 38 | 483 | 13 | 7k+ | | Text Domain Mismatch |
| #8 | Membership Plugin – Kadence Memberships | 19 | 5,082 | 2,982 | 9k+ | | Text Domain Mismatch |
| #9 | Virtue/Ascend/Pinnacle Toolkit | 26 | 605 | 300 | 30k+ | | Output is not escaped |
| #10 | Kadence Central – Site Management, Backups, Security, and Reporting | 26 | 462 | 213 | 30k+ | | Text Domain Mismatch |
| #11 | Event Tickets and Registration | 24 | 3,415 | 4,210 | 90k+ | | Non-prefixed global variable |
| #12 | Kadence WooCommerce Email Designer | 34 | 119 | 230 | 100k+ | | Non-prefixed global variable |
| #13 | Image Widget | 35 | 165 | 31 | 100k+ | | Output is not escaped |
| #14 | Kadence Starter Templates — Predesigned Website Templates | 28 | 312 | 215 | 300k+ | | Missing Arg Domain |
| #15 | Kadence Blocks — Page Builder Toolkit for Gutenberg Editor | 23 | 55 | 2,127 | 600k+ | | Non-prefixed global variable |
| #16 | The Events Calendar | 23 | 3,512 | 3,848 | 700k+ | | Text Domain Mismatch |
| #17 | Kadence Security – Password, Two Factor Authentication, and Brute Force Protection | 23 | 1,053 | 967 | 700k+ | | Missing Translators Comment |
