| #51 | Wise Chat | 21 | 470 | 506 | 5k+ | | | Output is not escaped |
| #52 | Pay For Post with WooCommerce | 21 | 960 | 1,474 | 1k+ | | | Non-prefixed global variable |
| #53 | PPOM – Product Addons & Custom Fields for WooCommerce | 21 | 336 | 1,325 | 20k+ | | | Non-prefixed global variable |
| #54 | Frontend Admin by DynamiApps | 22 | 5,922 | 3,208 | 10k+ | | | Text Domain Mismatch |
| #55 | Advanced Classifieds & Directory Pro | 22 | 1,229 | 3,511 | 2k+ | | | Non-prefixed global variable |
| #56 | Advanced Form Integration — Connect Forms to 200+ Apps | 22 | 5,771 | 4,678 | 10k+ | | | wp function not compatible with requires wp |
| #57 | All-in-One Video Gallery | 22 | 911 | 2,892 | 20k+ | | | Non-prefixed global variable |
| #58 | Shortcodes and extra features for Phlox theme | 22 | 413 | 426 | 90k+ | | | Output is not escaped |
| #59 | Knowledge Base documentation & wiki plugin – BasePress Docs | 22 | 671 | 1,767 | 2k+ | | | Non-prefixed global variable |
| #60 | Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots | 22 | 1,604 | 2,019 | 10k+ | | | Direct Query |
| #61 | BuddyPress | 22 | 583 | 9,008 | 100k+ | | | Non-prefixed function |
| #62 | Passster – Password Protect Pages and Content | 22 | 539 | 1,419 | 10k+ | | | Non-prefixed global variable |
| #63 | Cozy Blocks – Page Builder for Gutenberg Editor & FSE with 500+ Patterns, 57 Blocks & Templates | 22 | 2,167 | 4,175 | 7k+ | | | Non-prefixed global variable |
| #64 | RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login | 22 | 3,654 | 5,061 | 8k+ | | | Non-prefixed global variable |
| #65 | WP Customer Area | 22 | 3,308 | 941 | 10k+ | | | Text Domain Mismatch |
| #66 | Data Tables Generator by Supsystic | 22 | 156 | 144 | 10k+ | | | Exception output is not escaped |
| #67 | Directorist: AI-Powered Business Directory, Listings & Classified Ads | 22 | 443 | 2,129 | 20k+ | | | Non-prefixed global variable |
| #68 | Download Manager | 22 | 2,290 | 1,301 | 100k+ | | | Output is not escaped |
| #69 | EleSpare – News, Magazine and Blog Addons for Elementor | 22 | 733 | 1,423 | 10k+ | | | Non-prefixed global variable |
| #70 | Estatik Real Estate Plugin | 22 | 3,049 | 325 | 10k+ | | | Text Domain Mismatch |
| #71 | Events Manager – Calendar, Bookings, Tickets, and more! | 22 | 4,722 | 5,621 | 70k+ | | | Output is not escaped |
| #72 | Finale Lite – Sales Countdown Timer & Discount for WooCommerce | 22 | 1,031 | 451 | 4k+ | | | Output is not escaped |
| #73 | GeoDirectory – WP Business Directory Plugin and Classified Listings Directory | 22 | 4,462 | 3,972 | 10k+ | | | Output is not escaped |
| #74 | Gutenberg | 22 | 628 | 342 | 300k+ | | | Missing direct file access protection |
| #75 | Happyforms – Form Builder for WordPress: Drag & Drop Contact Forms, Surveys, Payments & Multipurpose Forms | 22 | 1,037 | 722 | 20k+ | | | Unsafe printing function |
| #76 | Csomagpontok és Címkék WooCommerce-hez | 22 | 2,001 | 769 | 7k+ | | | Text Domain Mismatch |
| #77 | Számlázz.hu integráció WooCommerce-hez | 22 | 1,169 | 460 | 7k+ | | | Text Domain Mismatch |
| #78 | Import WP – Export and Import CSV and XML files to WordPress | 22 | 580 | 330 | 4k+ | | | Exception output is not escaped |
| #79 | LearnPress – WordPress LMS Plugin for Create and Sell Online Courses | 22 | 2,361 | 3,384 | 70k+ | | | Non-prefixed global variable |
| #80 | Leyka | 22 | 253 | 3,445 | 2k+ | | | Request data is not unslashed |
| #81 | Slider, Gallery, and Carousel by MetaSlider – Image Slider, Video Slider | 22 | 207 | 323 | 500k+ | | | Non-prefixed global variable |
| #82 | Modula Image Gallery – Photo Grid & Video Gallery | 22 | 474 | 436 | 100k+ | | | Text Domain Mismatch |
| #83 | Molongui Authorship – Author Boxes, Guest Authors & Co-Authors for WordPress | 22 | 919 | 1,230 | 10k+ | | | Output is not escaped |
| #84 | Motors – Car Dealership & Classified Listings Plugin | 22 | 5,340 | 5,958 | 9k+ | | | Text Domain Mismatch |
| #85 | WP OAuth Server (OAuth Authentication) | 22 | 189 | 347 | 3k+ | | | Non-prefixed function |
| #86 | oik | 22 | 489 | 180 | 2k+ | | | Non Singular String Literal Domain |
| #87 | PagBank / PagSeguro Connect para WooCommerce | 22 | 504 | 743 | 4k+ | | | Non-prefixed global variable |
| #88 | Pronamic Pay | 22 | 258 | 1,077 | 3k+ | | | Non-prefixed global variable |
| #89 | Restrict User Access – Ultimate Membership & Content Protection | 22 | 977 | 1,840 | 10k+ | | | Non-prefixed global variable |
| #90 | Salon Booking System – Free Version | 22 | 650 | 619 | 3k+ | | | Missing direct file access protection |
| #91 | Secure Custom Fields | 22 | 241 | 1,369 | 80k+ | | | Non-prefixed function |
| #92 | Slim Jetpack | 22 | 2,586 | 1,947 | 2k+ | | | Text Domain Mismatch |
| #93 | SNS Count Cache | 22 | 918 | 120 | 8k+ | | | Non Singular String Literal Domain |
| #94 | NextScripts: Social Networks Auto-Poster | 22 | 2,408 | 1,133 | 30k+ | | | Output is not escaped |
| #95 | SportsPress – Sports Club & League Manager | 22 | 460 | 2,242 | 10k+ | | | Non-prefixed global variable |
| #96 | Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent | 22 | 225 | 519 | 8k+ | | | error log error log |
| #97 | Tag Groups is the Advanced Way to Display Your Taxonomy Terms | 22 | 575 | 465 | 3k+ | | | Unsafe printing function |
| #98 | ThemeHunk Customizer | 22 | 3,969 | 582 | 7k+ | | | Text Domain Mismatch |
| #99 | Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin | 22 | 530 | 2,334 | 40k+ | | | Direct Query |
| #100 | Welcart e-Commerce | 22 | 10,377 | 10,896 | 10k+ | | | Text Domain Mismatch |