#1 404 Solution 15 582 1,532 10k+ 10 years ago 5 days ago Non-prefixed class #2 MDTF – Meta Data and Taxonomies Filter 16 1,550 1,956 1k+ 12 years ago 3 months ago Non-prefixed global variable #3 RestroPress – Online Food Ordering System 17 534 3,207 1k+ 8 years ago 2 days ago Non-prefixed global variable #4 Shopping Cart & eCommerce Store 17 8,038 17,464 3k+ 13 years ago 15 days ago Non-prefixed global variable #5 wpForo Forum 17 4,306 3,026 20k+ 10 years ago 20 days ago Unsafe printing function #6 Property Hive 18 1,957 6,027 3k+ 11 years ago 2 months ago Missing nonce verification #7 WPPizza – A Restaurant Plugin 18 4,689 2,703 1k+ 13 years ago 3 months ago Text Domain Mismatch #8 Block Slider – Responsive Image Slider, Video Slider & Post Slider 19 555 1,291 3k+ 8 years ago 3 years ago Non-prefixed global variable #9 GiveWP – Donation Plugin and Fundraising Platform 19 3,413 3,569 100k+ 11 years ago 2 days ago Output is not escaped #10 Go Fetch Jobs (for WP Job Manager) 19 1,410 1,741 700 11 years ago 4 months ago Non-prefixed global variable #11 Really Simple Security – Simple and Performant Security (formerly Really Simple SSL) 19 531 378 3m+ 11 years ago 4 days ago Missing Translators Comment #12 Membership Plugin – Kadence Memberships 19 5,085 3,003 9k+ 16 years ago 2 days ago Text Domain Mismatch #13 Scrollsequence – Cinematic Scroll Image Animation Plugin 19 878 1,528 3k+ 6 years ago 3 months ago Non-prefixed global variable #14 SendPress Newsletters 19 2,293 1,422 1k+ 14 years ago 7 months ago Output is not escaped #15 SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments 19 534 1,161 80k+ 4 years ago 2 days ago Non-prefixed global variable #16 WP Email Template 19 344 345 2k+ 14 years ago 2 months ago Exception output is not escaped #17 AweBooking – Hotel Booking System 20 309 514 1k+ 9 years ago 7 years ago Non-prefixed global variable #18 Brizy – Page Builder 20 585 726 70k+ 8 years ago 12 days ago Output is not escaped #19 Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC) 20 736 2,112 900 10 years ago 1 year ago Non-prefixed global variable #20 SysBasics Customize My Account for WooCommerce – Live My Account Customizer 20 743 911 8k+ 5 years ago 2 months ago Non-prefixed global variable #21 Download Monitor 20 423 1,367 80k+ 18 years ago 3 days ago Non-prefixed hook name #22 Event Espresso – Event Registration & Ticketing Sales 20 12,698 2,135 600 12 years ago 2 months ago Text Domain Mismatch #23 EventPrime – Events Calendar, Bookings, Tickets & AI 20 846 4,224 7k+ 8 years ago yesterday Non-prefixed global variable #24 MBE eShip 20 527 740 1k+ 9 years ago 3 months ago Non-prefixed global variable #25 MAS Videos 20 519 1,693 1k+ 7 years ago 7 months ago Non-prefixed global variable #26 Microthemer Lite – Visual Editor to Customize CSS 20 1,004 1,699 10k+ 13 years ago 5 months ago Non-prefixed global variable #27 Powered Cache – Caching and Optimization for WordPress – Easily Improve PageSpeed & Web Vitals Score 20 147 231 3k+ 9 years ago 16 days ago Exception output is not escaped #28 Pronamic Pay 20 266 1,078 2k+ 15 years ago 10 days ago Non-prefixed global variable #29 Quill Forms | Conversational Multi Step Forms, Surveys & quizzes 20 400 371 3k+ 5 years ago 12 days ago Text Domain Mismatch #30 Remove Add to Cart WooCommerce 20 616 1,378 4k+ 10 years ago 11 months ago Non-prefixed global variable #31 Restrict User Access – Ultimate Membership & Content Protection 20 977 1,848 10k+ 11 years ago 9 days ago Non-prefixed global variable #32 Robin Image Optimizer – Unlimited Image Optimization, WebP & AVIF 20 556 543 100k+ 8 years ago 16 days ago Output is not escaped #33 Events Manager – OpenStreetMaps 20 559 444 600 8 years ago 4 years ago Output is not escaped #34 School Management System – WPSchoolPress 20 245 5,285 1k+ 8 years ago 29 days ago Non-prefixed global variable #35 Forumax – AI Powered Advanced Community Forum Plugin 21 4,931 4,352 600 4 years ago 23 days ago Text Domain Mismatch #36 Kadence Security – Password, Two Factor Authentication, and Brute Force Protection 21 1,060 957 700k+ 16 years ago 1 month ago Missing Translators Comment #37 SMS Extension for Contact Form 7 21 720 1,387 400 6 years ago 11 months ago Non-prefixed global variable #38 Spam protection, Honeypot, Anti-Spam by CleanTalk 21 833 1,133 200k+ 14 years ago 3 days ago Missing nonce verification #39 Directorist: AI-Powered Business Directory, Listings & Classified Ads 21 556 2,213 20k+ 9 years ago 3 days ago Non-prefixed global variable #40 Duplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More 21 2,576 1,298 1m+ 15 years ago 9 days ago Output is not escaped #41 eRoom – Webinar & Meeting Plugin for Zoom, Google Meet, Microsoft Teams 21 186 437 8k+ 6 years ago 5 months ago Non-prefixed global variable #42 Feeds for YouTube (YouTube video, channel, and gallery plugin) 21 503 995 100k+ 7 years ago 9 days ago Output is not escaped #43 Formidable Forms – WordPress Form Builder for Contact Forms, Calculators, Quizzes & More 21 52 2,118 300k+ 17 years ago 9 days ago Non-prefixed global variable #44 Ibtana – Ecommerce Product Addons 21 1,548 1,718 6k+ 5 years ago 24 days ago Non Singular String Literal Domain #45 AI Infographic Maker 21 1,382 620 600 10 years ago 8 days ago Output is not escaped #46 Jetpack – WP Security, Backup, Speed, & Growth 21 3,298 1,452 3m+ 16 years ago 4 days ago Text Domain Mismatch #47 Leyka 21 257 3,446 2k+ 14 years ago 2 months ago Request data is not unslashed #48 Mapster WP Maps 21 3,594 3,020 3k+ 5 years ago 2 days ago Text Domain Mismatch #49 Modular DS: Monitor, update, and backup multiple websites 21 199 82 40k+ 4 years ago yesterday Exception output is not escaped #50 Mooberry Book Manager 21 1,040 399 1k+ 11 years ago 2 years ago Text Domain Mismatch