| #1 | PDF invoice for WP ERP | 58 | 96 | 134 | 2k+ | | | Non-prefixed global variable |
| #2 | Texty – SMS Notification for WordPress, WooCommerce, Dokan and more | 40 | 41 | 135 | 7k+ | | | Dynamic hook name |
| #3 | ReCaptcha Integration for WordPress | 37 | 60 | 66 | 9k+ | | | Output is not escaped |
| #4 | Conversion Tracking for WooCommerce | 35 | 74 | 61 | 20k+ | | | Output is not escaped |
| #5 | wePOS – Point Of Sale (POS) for WooCommerce & Dokan | 35 | 47 | 66 | 2k+ | | | Output is not escaped |
| #6 | Dokan Invoice | 35 | 9 | 3 | 500 | | | Missing Translators Comment |
| #7 | weMail – Email Marketing, Newsletters Builder & Email Automations for WooCommerce | 29 | 276 | 68 | 10k+ | | | Missing direct file access protection |
| #8 | Project Manager – AI Powered Project Management, Task Management, Kanban Board & Time Tracker | 28 | 69 | 1,001 | 5k+ | | | Interpolated SQL is not prepared |
| #9 | StoreGrowth – Upsell, BOGO, Quick View, Direct Checkout & Side Cart for WooCommerce | 27 | 122 | 491 | 2k+ | | | Non-prefixed global variable |
| #10 | Subscribe2 – Form, Email Subscribers & Newsletters | 25 | 30 | 681 | 10k+ | | | Non-prefixed global variable |
| #11 | weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot | 23 | 279 | 560 | 5k+ | | | Non-prefixed global variable |
| #12 | User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post Submission | 22 | 287 | 1,504 | 20k+ | | | Non-prefixed global variable |
| #13 | ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce | 22 | 830 | 5,978 | 5k+ | | | Direct Query |
