| #1 | PDF invoice for WP ERP | 58 | 96 | 134 | 2k+ | | | Non-prefixed global variable |
| #2 | Texty – SMS Notification for WordPress, WooCommerce, Dokan and more | 53 | 31 | 34 | 8k+ | | | Output is not escaped |
| #3 | ReCaptcha Integration for WordPress | 37 | 60 | 66 | 9k+ | | | Output is not escaped |
| #4 | Conversion Tracking for WooCommerce | 35 | 74 | 61 | 20k+ | | | Output is not escaped |
| #5 | wePOS – Point Of Sale (POS) for WooCommerce & Dokan | 35 | 47 | 66 | 2k+ | | | Output is not escaped |
| #6 | Dokan Invoice | 35 | 9 | 3 | 500 | | | Missing Translators Comment |
| #7 | weMail – Email Marketing, Newsletters Builder & Email Automations for WooCommerce | 29 | 276 | 68 | 10k+ | | | Missing direct file access protection |
| #8 | Project Manager – AI Powered Project Management, Task Management, Kanban Board & Time Tracker | 29 | 69 | 980 | 6k+ | | | Interpolated SQL is not prepared |
| #9 | StoreGrowth – Upsell, BOGO, Quick View, Direct Checkout & Side Cart for WooCommerce | 25 | 127 | 441 | 2k+ | | | Non-prefixed global variable |
| #10 | Subscribe2 – Form, Email Subscribers & Newsletters | 24 | 32 | 686 | 10k+ | | | Non-prefixed global variable |
| #11 | weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot | 24 | 279 | 542 | 4k+ | | | Non-prefixed global variable |
| #12 | ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce | 23 | 828 | 5,968 | 5k+ | | | Direct Query |
| #13 | User Frontend: AI Powered Frontend Post Submission, User Directory, User Profile, Membership & User Registration | 22 | 290 | 1,517 | 20k+ | | | Non-prefixed global variable |
