| #51 | SMS Alert – SMS & OTP for WooCommerce, Order Notifications & Abandoned Cart Recovery | 24 | 831 | 1,903 | 4k+ | | | Non-prefixed global variable |
| #52 | Social Media Auto Publish | 24 | 1,468 | 713 | 6k+ | | | Unsafe printing function |
| #53 | TI WooCommerce Wishlist | 24 | 467 | 546 | 100k+ | | | Output is not escaped |
| #54 | Coupon Affiliates – Affiliate Plugin for WooCommerce | 24 | 1,022 | 3,074 | 5k+ | | | Non-prefixed global variable |
| #55 | WPSpeed – WordPress Speed, Cache & Performance Optimization (Core Web Vitals, PageSpeed 100) | 24 | 482 | 189 | 2k+ | | | Output is not escaped |
| #56 | 3DPrint Lite | 25 | 175 | 1,029 | 700 | | | Non-prefixed global variable |
| #57 | Advanced WordPress Reset – Debug, Recover & Reset WP | 25 | 475 | 464 | 20k+ | | | Output is not escaped |
| #58 | AliExpress Dropshipping Plugin for WooCommerce Stores | 25 | 550 | 728 | 5k+ | | | Text Domain Mismatch |
| #59 | AIO Forms – Craft Complex Forms Easily | 25 | 189 | 418 | 700 | | | Mixed line endings |
| #60 | Appointment Booking Calendar | 25 | 327 | 1,070 | 1k+ | | | Non-prefixed global variable |
| #61 | Booking Calendar Contact Form | 25 | 371 | 884 | 500 | | | Input is not validated |
| #62 | Gallery Images Ape | 25 | 588 | 341 | 1k+ | | | Output is not escaped |
| #63 | Gift Cards (Gift Vouchers and Packages) (WooCommerce Supported) | 25 | 50 | 1,043 | 1k+ | | | Non-prefixed global variable |
| #64 | Index WP MySQL For Speed | 25 | 250 | 255 | 50k+ | | | Output is not escaped |
| #65 | Knit Pay – Cashfree, Instamojo, Razorpay, PayPal and more | 25 | 4,019 | 1,265 | 2k+ | | | Text Domain Mismatch |
| #66 | Live Composer – Free WordPress Website Builder | 25 | 1,216 | 427 | 10k+ | | | Output is not escaped |
| #67 | Nexter Extension – Security, Performance, Code Snippets & Site Toolkit | 25 | 198 | 710 | 10k+ | | | Nonce verification recommended |
| #68 | PDF Importer for WPForms | 25 | 332 | 329 | 400 | | | Non-prefixed global variable |
| #69 | Rate limiting for Contact Form 7 | 25 | 547 | 1,306 | 500 | | | Non-prefixed global variable |
| #70 | Spexo Addons for Elementor – Elementor Widgets, Mega Menu, Popup Builder, Template Kits and Starter Templates for Elementor | 25 | 9 | 981 | 5k+ | | | Non-prefixed global variable |
| #71 | Toocheke Companion | 25 | 409 | 1,113 | 1k+ | | | Non-prefixed global variable |
| #72 | PDF Builder for WooCommerce. Create invoices,packing slips and more | 25 | 372 | 503 | 2k+ | | | Non-prefixed global variable |
| #73 | HUSKY – Products Filter Professional for WooCommerce | 25 | | 1,895 | 90k+ | | | Non-prefixed global variable |
| #74 | ActiveCampaign for WooCommerce | 26 | 541 | 190 | 6k+ | | | Exception output is not escaped |
| #75 | Event Monster – Event Manager, Ticket Booking & Registration | 26 | 781 | 781 | 700 | | | Non-prefixed global variable |
| #76 | ezCache | 26 | 127 | 269 | 10k+ | | | Direct Query |
| #77 | Kadence Central – Site Management, Backups, Security, and Reporting | 26 | 462 | 213 | 30k+ | | | Text Domain Mismatch |
| #78 | Send Users Email – Email Subscribers, Email Marketing Newsletter | 26 | 188 | 415 | 5k+ | | | Non-prefixed global variable |
| #79 | Magical Shop Builder – WooCommerce Template Builder for Elementor | Shop, Cart, Checkout & Product Page Builder | 27 | 76 | 459 | 3k+ | | | Non-prefixed namespace |
| #80 | Pie Register – User Registration, Profiles & Content Restriction | 27 | | 1,779 | 1k+ | | | Non-prefixed global variable |
| #81 | Robokassa payment gateway for Woocommerce | 27 | 95 | 211 | 3k+ | | | Non-prefixed global variable |
| #82 | Watu Quiz | 27 | 1,089 | 1,014 | 3k+ | | | Output is not escaped |
| #83 | WP to LinkedIn Auto Publish | 28 | 734 | 250 | 900 | | | Unsafe printing function |
| #84 | Responsive Lightbox & Gallery | 28 | 139 | 513 | 100k+ | | | Non-prefixed hook name |
| #85 | Transliterator – Multilingual and Multi-script Text Conversion | 28 | 305 | 320 | 3k+ | | | Output is not escaped |
| #86 | AI Copilot – Content Generator | 29 | 166 | 161 | 1k+ | | | wp function not compatible with requires wp |
| #87 | Bitcoin Payments – Blockonomics | 29 | 208 | 227 | 2k+ | | | Output is not escaped |
| #88 | Post Views Counter | 29 | 179 | 398 | 200k+ | | | Non-prefixed hook name |
| #89 | ووسلام – همگام سازی ووکامرس و باسلام | 29 | 192 | 611 | 4k+ | | | Non-prefixed global variable |
| #90 | AI Product Tools – Bulk Product Content Generator & AI Toolkit for WooCommerce | 30 | 502 | 560 | 400 | | | SQL query is not prepared |
| #91 | Analytics Insights – Google Analytics Dashboard for WordPress | 30 | 241 | 170 | 10k+ | | | Unsafe printing function |
| #92 | Private groups | 30 | 583 | 316 | 1k+ | | | Unsafe printing function |
| #93 | QA Assistants – Driven by data | 30 | 4 | 867 | 2k+ | | | Non-prefixed global variable |
| #94 | Widget Manager Light | 30 | 233 | 83 | 600 | | | Text Domain Mismatch |
| #95 | Widgetize Pages Light | 30 | 145 | 104 | 3k+ | | | Output is not escaped |
| #96 | FOX – Currency Switcher Professional for WooCommerce | 30 | 211 | 1,022 | 50k+ | | | Non-prefixed global variable |
| #97 | Advanced Category Excluder | 31 | 349 | 160 | 700 | | | Output is not escaped |
| #98 | Яндекс Доставка (Boxberry) | 31 | 46 | 150 | 600 | | | Missing nonce verification |
| #99 | Compliance by Hu-manity.co | 31 | 153 | 335 | 900k+ | | | Missing nonce verification |
| #100 | HFD ePost Integration | 31 | 186 | 110 | 1k+ | | | Text Domain Mismatch |