| #101 | Content Egg – Affiliate Product Importer & Price Comparison | 23 | 1,231 | 1,257 | 10k+ | | | Non-prefixed global variable |
| #102 | Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe | 23 | 9,310 | 26,642 | 1k+ | | | Non-prefixed global variable |
| #103 | Double Opt-In for Contact Form 7 & Avada – Secure, GDPR-Compliant Email Verification | 23 | 675 | 643 | 1k+ | | | Unsafe printing function |
| #104 | Easy Digital Downloads – eCommerce Payments and Subscriptions made easy | 23 | 3,723 | 10,283 | 40k+ | | | Non-prefixed namespace |
| #105 | Error Log Monitor | 23 | 694 | 1,414 | 20k+ | | | Non-prefixed global variable |
| #106 | Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI | 23 | 395 | 1,342 | 90k+ | | | Non-prefixed global variable |
| #107 | Export WordPress Pages to Static HTML & PDF — Static Site Export | 23 | 490 | 301 | 4k+ | | | Text Domain Mismatch |
| #108 | Ezoic | 23 | 432 | 516 | 10k+ | | | Output is not escaped |
| #109 | Fastcache by Host.it | 23 | 1,327 | 203 | 700 | | | Text Domain Mismatch |
| #110 | Flexmls® IDX Plugin | 23 | 1,268 | 957 | 1k+ | | | Output is not escaped |
| #111 | FV Flowplayer Video Player | 23 | 1,311 | 1,454 | 20k+ | | | Output is not escaped |
| #112 | Groovy Menu Plugin (Free) | 23 | 1,729 | 283 | 4k+ | | | Text Domain Mismatch |
| #113 | Groundhogg — CRM, Newsletters, and Marketing Automation | 23 | 136 | 921 | 2k+ | | | Non-prefixed global variable |
| #114 | Gutenberg | 23 | 606 | 329 | 300k+ | | | Missing direct file access protection |
| #115 | Happy Addons for Elementor | 23 | 573 | 444 | 400k+ | | | Output is not escaped |
| #116 | Houzez Property Feed | 23 | 1,464 | 1,585 | 1k+ | | | Text Domain Mismatch |
| #117 | Jetpack – WP Security, Backup, Speed, & Growth | 23 | 2,821 | 1,303 | 3m+ | | | Text Domain Mismatch |
| #118 | Joli FAQ SEO – WordPress FAQ Plugin | 23 | 1,083 | 1,526 | 700 | | | Non-prefixed global variable |
| #119 | Justified Gallery | 23 | 589 | 1,417 | 8k+ | | | Non-prefixed global variable |
| #120 | King Addons for Elementor – 80+ Elementor Widgets, 4 000+ Elementor Templates, WooCommerce, Mega Menu, Popup Builder | 23 | 1,831 | 3,878 | 10k+ | | | Non-prefixed global variable |
| #121 | Locatoraid Store Locator | 23 | 318 | 645 | 1k+ | | | Non-prefixed global variable |
| #122 | MailPoet – Newsletters, Email Marketing, and Automation | 23 | 931 | 719 | 500k+ | | | Exception output is not escaped |
| #123 | MediaPress | 23 | 904 | 583 | 4k+ | | | Output is not escaped |
| #124 | MPG – Multiple Page Generator, Bulk Landing Pages & Programmatic SEO | 23 | 485 | 580 | 2k+ | | | Missing nonce verification |
| #125 | Next Active Directory Integration | 23 | 683 | 284 | 2k+ | | | Exception output is not escaped |
| #126 | Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery | 23 | 2,129 | 993 | 400k+ | | | Text Domain Mismatch |
| #127 | NitroPack – Performance, Page Speed & Cache Plugin for Core Web Vitals, CDN & Image Optimization | 23 | 316 | 639 | 100k+ | | | Output is not escaped |
| #128 | PowerPress Podcasting plugin by Blubrry | 23 | 4,807 | 2,394 | 20k+ | | | Output is not escaped |
| #129 | Pricing Table by Supsystic | 23 | 1,299 | 447 | 10k+ | | | Non Singular String Literal Domain |
| #130 | Print Anywhere & Create PDFs of Order Receipts, Invoices, Labels & More. | 23 | 1,485 | 444 | 1k+ | | | Text Domain Mismatch |
| #131 | Seriously Simple Podcasting | 23 | 548 | 627 | 30k+ | | | Non-prefixed hook name |
| #132 | Site Reviews | 23 | 1,625 | 603 | 60k+ | | | Output is not escaped |
| #133 | The Events Calendar | 23 | 3,511 | 3,851 | 700k+ | | | Text Domain Mismatch |
| #134 | The Post Grid – Shortcode, Gutenberg Blocks and Elementor Addon for Post Grid | 23 | 105 | 1,013 | 100k+ | | | Non-prefixed global variable |
| #135 | Travelpayouts | 23 | 769 | 110 | 6k+ | | | Output is not escaped |
| #136 | W3 Total Cache | 23 | 307 | 678 | 900k+ | | | Non-prefixed global variable |
| #137 | PostFinance Checkout | 23 | 979 | 214 | 1k+ | | | Text Domain Mismatch |
| #138 | Clone | 23 | 244 | 262 | 40k+ | | | Output is not escaped |
| #139 | WP STAGING – WordPress Backup, Restore, Migration & Clone | 23 | 1,494 | 1,550 | 100k+ | | | Non-prefixed global variable |
| #140 | Dynamic Team Manager – Team Member Showcase with grid, slider, table Elementor widget & shortcode | 23 | 933 | 2,002 | 900 | | | Non-prefixed global variable |
| #141 | WPCal.io – Easy Meeting Scheduler | 23 | 694 | 595 | 900 | | | Direct Query |
| #142 | Yatra – Travel Booking & Tour Operator Software | 23 | 2,226 | 3,997 | 600 | | | Non-prefixed global variable |
| #143 | YITH WooCommerce Affiliates | 23 | 549 | 1,527 | 6k+ | | | Non-prefixed global variable |
| #144 | YITH WooCommerce Ajax Product Filter | 23 | 463 | 1,527 | 80k+ | | | Non-prefixed global variable |
| #145 | Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress | 23 | 2,317 | 1,714 | 5k+ | | | Output is not escaped |
| #146 | A2 Optimized WP – Turbocharge and secure your WordPress site | 24 | 271 | 231 | 60k+ | | | Missing Arg Domain |
| #147 | Academy LMS – WordPress LMS Plugin for Complete eLearning Solution | 24 | 162 | 790 | 2k+ | | | Non-prefixed global variable |
| #148 | All-In-One Security (AIOS) – Security and Firewall | 24 | 552 | 1,228 | 1m+ | | | Non-prefixed global variable |
| #149 | Starter Templates – AI-Powered Templates for Elementor & Gutenberg | 24 | 125 | 394 | 1m+ | | | Non-prefixed hook name |
| #150 | TermsFeed AutoTerms: Privacy Policy Generator, Cookie Consent, GDPR, CCPA, Terms & Conditions, Disclaimers, Cookies Policy, EULA | 24 | 939 | 161 | 70k+ | | | Non Singular String Literal Domain |