| #1 | BetterLinks – Link Shortener, Link Cloaking, Redirects, Affiliate Link Manager & MCP | 100 | | 2 | 20k+ | | | mismatched plugin name |
| #2 | Infobox | 91 | 8 | 10 | 1k+ | | | file system operations mkdir |
| #3 | Countdown Block | 90 | 7 | 8 | 4k+ | | | file system operations mkdir |
| #4 | Image Slider Block | 90 | 7 | 10 | 3k+ | | | Non-prefixed class |
| #5 | Accordion Toggle | 90 | 10 | 10 | 2k+ | | | Non-prefixed class |
| #6 | Team Member Block | 90 | 8 | 12 | 1k+ | | | file system operations mkdir |
| #7 | Price Table Block | 90 | 8 | 11 | 800 | | | file system operations mkdir |
| #8 | Toggle Content | 90 | 9 | 10 | 700 | | | file system operations mkdir |
| #9 | Typing Text | 90 | 8 | 14 | 500 | | | file system operations mkdir |
| #10 | Testimonial Block | 90 | 7 | 11 | 500 | | | file system operations mkdir |
| #11 | Progress Bars | 90 | 8 | 12 | 500 | | | file system operations mkdir |
| #12 | Flipbox | 89 | 7 | 12 | 2k+ | | | file system operations mkdir |
| #13 | Image Gallery Block | 84 | 7 | 10 | 4k+ | | | file system operations mkdir |
| #14 | Table Of Contents Block | 80 | 8 | 7 | 10k+ | | | file system operations mkdir |
| #15 | ThinkRank AI SEO – AI SEO Plugin for WordPress: Schema, XML Sitemaps, Meta Tags, Search Console & Local SEO | 75 | | 198 | 10k+ | | | Direct Query |
| #16 | NotificationX – FOMO, Live Sales Notification, WooCommerce Sales Popup, GDPR, Social Proof, Announcement Banner & Floating Notification Bar | 74 | 10 | 23 | 30k+ | | | Non-prefixed hook name |
| #17 | xSpeed Cache: AI-Powered Performance Hub with MCP, Caching & CDN | 64 | 19 | 46 | 6k+ | | | Non-prefixed function |
| #18 | BetterDocs – AI Documentation, Knowledge Base, MCP Server, Docs, Wikis, FAQ & Chatbot | 61 | 11 | 68 | 30k+ | | | Non-prefixed hook name |
| #19 | Disable Feeds | 55 | 9 | 9 | 20k+ | | | Output is not escaped |
| #20 | Disable Comments – Remove Comments & Stop Spam [Multi-Site Support] | 47 | 23 | 109 | 1m+ | | | Non-prefixed global variable |
| #21 | WPFomo | 42 | 45 | 9 | 600 | | | Output is not escaped |
| #22 | Simple 301 Redirects By BetterLinks – Easy WordPress Redirect Manager for Redirects, 404 Error Log & More | 41 | 43 | 61 | 100k+ | | | Request data is not unslashed |
| #23 | Contact Form 7 styler for Elementor Page Builder | 40 | 126 | 10 | 800 | | | Unsafe printing function |
| #24 | Caldera Forms styler for Elementor Page Builder | 39 | 173 | 12 | 700 | | | Text Domain Mismatch |
| #25 | Parallax Slider Block | 35 | 9 | 12 | 900 | | | file system operations mkdir |
| #26 | Essential Addons for Elementor – Popular Elementor Templates & Widgets | 28 | 153 | 235 | 1m+ | | | wp function not compatible with requires wp |
| #27 | easy.jobs – AI powered Job Listing, Job Board, Career Page, Recruitment & Hiring Solution | 28 | 405 | 924 | 4k+ | | | Missing nonce verification |
| #28 | Templately – Elementor & Gutenberg Template Library: 6500+ Free & Pro Ready Templates And Cloud! | 24 | 175 | 238 | 300k+ | | | Nonce verification recommended |
| #29 | Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns | 24 | 114 | 659 | 200k+ | | | Non-prefixed global variable |
| #30 | EmbedPress – PDF Embedder, 3D PDF FlipBook, Google Reviews, YouTube Videos, Upload & Embed PDF documents | 24 | 704 | 1,594 | 100k+ | | | Output is not escaped |
| #31 | Better Payment – Instant Payments, Donations, Fundraising with Subscriptions & More | 23 | 345 | 948 | 5k+ | | | Non-prefixed global variable |
| #32 | SchedulePress – Auto Post & Publish, Auto Social Share, Schedule Posts with Editorial Calendar & Missed Schedule Post Publisher | 22 | 316 | 253 | 10k+ | | | Output is not escaped |
