| #1 | Elementor Website Builder – more than just a page builder | 35 | 46 | 428 | 10m+ | | | Non-prefixed global variable |
| #2 | Image Optimizer – Optimize Images and Convert to WebP or AVIF | 87 | 14 | 24 | 1m+ | | | Missing Translators Comment |
| #3 | Ally – Web Accessibility & Usability | 41 | 47 | 35 | 500k+ | | | Output is not escaped |
| #4 | Activity Log – Monitor & Record User Changes | 38 | 81 | 149 | 200k+ | | | Nonce verification recommended |
| #5 | Site Mailer – SMTP Replacement, Email API Deliverability & Email Log | 74 | 8 | 23 | 200k+ | | | Output is not escaped |
| #6 | Elementor Beta (Developer Edition) | 57 | 36 | 32 | 30k+ | | | Output is not escaped |
| #7 | Hello Plus | 94 | 15 | 38 | 80k+ | | | Post Not In exclude |
| #8 | Angie – Agentic AI (Beta) | 98 | | 17 | 80k+ | | | Discouraged PHP function |
| #9 | Manage – Centralized site maintenance and monitoring | 95 | 5 | 47 | 60k+ | | | Direct Query |
| #10 | Elementor Blocks for Gutenberg | 80 | 7 | 6 | 10k+ | | | Output is not escaped |
| #11 | Temporary Login | 75 | 3 | 25 | 40k+ | | | Nonce verification recommended |
| #12 | Linker – URL shortener & track outbound link clicks | 43 | 17 | 17 | 2k+ | | | Output is not escaped |
| #13 | Cookie Consent – GDPR & CCPA Cookie Banner & Consent Manager | 92 | | 16 | 10k+ | | | Direct Query |
