| #1 | SchedulePress – Auto Post & Publish, Auto Social Share, Schedule Posts with Editorial Calendar & Missed Schedule Post Publisher | 22 | 310 | 249 | 10k+ | | | Output is not escaped |
| #2 | Better Payment – Instant Payments, Donations, Fundraising with Subscriptions & More | 24 | 343 | 932 | 6k+ | | | Non-prefixed global variable |
| #3 | EmbedPress – PDF Embedder, 3D PDF FlipBook, Google Reviews, YouTube Videos, Upload & Embed PDF documents | 24 | 711 | 1,592 | 100k+ | | | Output is not escaped |
| #4 | Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns | 24 | 119 | 703 | 200k+ | | | Non-prefixed global variable |
| #5 | Templately – Elementor & Gutenberg Template Library: 6500+ Free & Pro Ready Templates And Cloud! | 24 | 173 | 235 | 300k+ | | | Nonce verification recommended |
| #6 | easy.jobs – AI powered Job Listing, Job Board, Career Page, Recruitment & Hiring Solution | 28 | 405 | 924 | 4k+ | | | Missing nonce verification |
| #7 | Essential Addons for Elementor – Popular Elementor Templates & Widgets | 30 | 146 | 192 | 2m+ | | | wp function not compatible with requires wp |
| #8 | ThinkRank – AI SEO Plugin: Keywords, Metadata, Schema, llms.txt, MCP & Search Console | 33 | 52 | 194 | 4k+ | | | Direct Query |
| #9 | Caldera Forms styler for Elementor Page Builder | 39 | 173 | 12 | 700 | | | Text Domain Mismatch |
| #10 | Contact Form 7 styler for Elementor Page Builder | 40 | 126 | 10 | 800 | | | Unsafe printing function |
| #11 | Simple 301 Redirects By BetterLinks – Easy WordPress Redirect Manager for Redirects, 404 Error Log & More | 41 | 43 | 61 | 100k+ | | | Request data is not unslashed |
| #12 | WPFomo | 42 | 45 | 9 | 600 | | | Output is not escaped |
| #13 | Disable Comments – Remove Comments & Stop Spam [Multi-Site Support] | 52 | 17 | 57 | 1m+ | | | Non-prefixed global variable |
| #14 | Disable Feeds | 55 | 9 | 9 | 20k+ | | | Output is not escaped |
| #15 | Flipbox | 80 | 14 | 17 | 2k+ | | | wp function not compatible with requires wp |
| #16 | Table Of Contents Block | 80 | 8 | 7 | 10k+ | | | file system operations mkdir |
| #17 | Countdown Block | 81 | 14 | 10 | 4k+ | | | wp function not compatible with requires wp |
| #18 | Price Table Block | 81 | 15 | 16 | 900 | | | file system operations mkdir |
| #19 | Progress Bars | 81 | 15 | 14 | 500 | | | file system operations mkdir |
| #20 | Team Member Block | 81 | 15 | 14 | 1k+ | | | file system operations mkdir |
| #21 | Toggle Content | 81 | 16 | 12 | 700 | | | file system operations mkdir |
| #22 | Typing Text | 81 | 15 | 16 | 600 | | | file system operations mkdir |
| #23 | Accordion Toggle | 82 | 17 | 11 | 2k+ | | | Non-prefixed class |
| #24 | BetterDocs – AI Documentation, Knowledge Base, Docs, Wikis, FAQ with Chatbot | 82 | 7 | 50 | 30k+ | | | Direct Query |
| #25 | Image Gallery Block | 82 | 13 | 10 | 3k+ | | | wp function not compatible with requires wp |
| #26 | Infobox | 82 | 15 | 12 | 1k+ | | | file system operations mkdir |
| #27 | Parallax Slider Block | 82 | 15 | 12 | 900 | | | file system operations mkdir |
| #28 | Image Slider Block | 82 | 13 | 14 | 3k+ | | | wp function not compatible with requires wp |
| #29 | Testimonial Block | 82 | 13 | 12 | 500 | | | wp function not compatible with requires wp |
| #30 | BetterLinks – Link Shortener, Link Cloaking, Redirects & Affiliate Link Manager | 91 | | 8 | 20k+ | | | Interpolated SQL is not prepared |
| #31 | NotificationX – FOMO, Live Sales Notification, WooCommerce Sales Popup, GDPR, Social Proof, Announcement Banner & Floating Notification Bar | 98 | 4 | 12 | 30k+ | | | Non-prefixed hook name |
