#1 JetFormBuilder — Dynamic Blocks Form Builder 18 2,131 1,623 80k+ 6 years ago 2 days ago Text Domain Mismatch #2 SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments 19 543 1,150 80k+ 4 years ago yesterday Non-prefixed global variable #3 Mapster WP Maps 21 3,594 3,020 3k+ 5 years ago 21 days ago Text Domain Mismatch #4 Frontend Admin by DynamiApps 22 5,943 3,232 8k+ 7 years ago 1 month ago Text Domain Mismatch #5 FireBox – WooCommerce Popup Builder, Exit Intent Popup, Email Optin & Cart Abandonment 22 153 847 7k+ 6 years ago 17 days ago Non-prefixed global variable #6 Groundhogg — CRM, Newsletters, and Marketing Automation 22 102 901 2k+ 8 years ago 6 days ago Non-prefixed global variable #7 RealPress – Real Estate Plugin 22 604 1,167 400 4 years ago 1 month ago Non-prefixed global variable #8 Salon Booking System – Appointment Booking for Salons, Barbershops & Spas 22 209 802 2k+ 11 years ago 7 days ago Non-prefixed global variable #9 WP Extended – The Ultimate WordPress Toolkit 22 188 348 600 4 years ago 14 days ago Exception output is not escaped #10 Advanced Custom Fields: Extended 23 1,885 329 100k+ 8 years ago 28 days ago Text Domain Mismatch #11 Advanced Custom Fields (ACF®) 23 2,469 1,248 2m+ 16 years ago 14 days ago Text Domain Mismatch #12 The Innovative Form Builder – IvyForms 23 814 390 1k+ 1 year ago 15 days ago Exception output is not escaped #13 Import WP – CSV & XML Import Export for WordPress 23 588 329 4k+ 12 years ago yesterday Exception output is not escaped #14 Molongui Authorship – Author Boxes, Guest Authors & Co-Authors for WordPress 23 931 1,247 10k+ 11 years ago 13 days ago Output is not escaped #15 Secure Custom Fields 23 240 1,377 100k+ 2 years ago 1 month ago Non-prefixed function #16 Shield Security – Smart Bot Blocking, Brute-Force Login Protection & File Scanning 23 1,202 244 30k+ 13 years ago 3 days ago Missing Translators Comment #17 WP STAGING – Backups & Restore, Migration & Clone Plugin – Cloud Backups, Scheduled Backups 23 1,642 1,839 100k+ 11 years ago yesterday Non-prefixed global variable #18 WP Webhooks – Automate repetitive tasks by creating powerful automation workflows directly within WordPress 23 4,380 888 20k+ 8 years ago 2 months ago Output is not escaped #19 WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell 23 6,272 2,779 5k+ 6 years ago 9 days ago Text Domain Mismatch #20 WP Customer Area 24 3,306 941 10k+ 13 years ago 3 months ago Text Domain Mismatch #21 EasyCommerce – Agentic AI Ecommerce & Online Store Builder 24 256 1,702 10 2 years ago 14 days ago Non-prefixed global variable #22 EmbedPress – PDF Embedder, 3D PDF FlipBook, Google Reviews, YouTube Videos, Upload & Embed PDF documents 24 704 1,594 100k+ 10 years ago 9 days ago Output is not escaped #23 Kirki – Freeform Page Builder, Website Builder & Customizer 24 224 817 500k+ 12 years ago 9 days ago Exception output is not escaped #24 Spotlight Social Feeds – Block, Shortcode, and Widget 24 411 147 60k+ 6 years ago 1 month ago Output is not escaped #25 ATUM WooCommerce Inventory Management and Stock Tracking 25 2,625 1,301 10k+ 10 years ago 9 days ago Non Singular String Literal Domain #26 Admin Columns 25 670 1,038 100k+ 15 years ago 23 days ago Non-prefixed namespace #27 F4 Post Tree 25 536 1,332 500 8 years ago 4 months ago Non-prefixed global variable #28 AnWP Football Leagues 25 3,698 2,025 700 9 years ago 2 days ago Text Domain Mismatch #29 ShopMagic – email automation for WordPress 25 235 165 10k+ 10 years ago 14 days ago Exception output is not escaped #30 OttoKit: All-in-One Automation Platform 25 1,598 1,844 90k+ 4 years ago 14 days ago Missing direct file access protection #31 FiboSearch – Ajax Search for WooCommerce 26 597 302 100k+ 10 years ago 17 days ago Output is not escaped #32 Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder 26 311 293 700k+ 9 years ago 9 days ago Text Domain Mismatch #33 Theater for WordPress 26 348 344 600 13 years ago 9 months ago Output is not escaped #34 گیتلند | درگاه پرداخت هوشمند گیتلند 27 338 298 4k+ 1 year ago 4 days ago Output is not escaped #35 aBlocks – Gutenberg Blocks, User Dashboard Builder, Popup Builder, Form Builder & Animation Builder 28 27 466 2k+ 2 years ago 9 days ago Non-prefixed global variable #36 Vertex Addons for Elementor 28 232 400 300 2 years ago 3 days ago Output is not escaped #37 AJAX Login and Registration modal popup + inline form 28 157 261 3k+ 9 years ago 11 months ago Output is not escaped #38 Essential Addons for Elementor – Popular Elementor Templates & Widgets 28 153 235 1m+ 9 years ago 8 days ago wp function not compatible with requires wp #39 Worldline Global Online Pay for WooCommerce 29 170 117 500 2 years ago 3 days ago Missing direct file access protection #40 Copy Anything to Clipboard for WordPress – Copy Button, Copy Text & Copy Code 30 523 132 10k+ 8 years ago 1 month ago Text Domain Mismatch #41 Responsive Addons for Elementor – Free Elementor Addons, Kits and Elementor Templates 30 60 387 3k+ 2 years ago 2 months ago Non-prefixed global variable #42 WPZOOM Addons for Beaver Builder 30 2,172 177 4k+ 8 years ago 2 months ago Text Domain Mismatch #43 Jooosi Fon – Use Custom Fonts, Google Fonts or Adobe Fonts 30 191 178 5k+ 3 years ago 5 days ago Text Domain Mismatch #44 Novelist 31 474 154 1k+ 10 years ago 26 days ago Output is not escaped #45 Paymattic – Secure, Simple Payment & Donation with Subscription Payments, Recurring Donations, Customer Management 31 6 561 3k+ 8 years ago 2 days ago Direct Query #46 Enter Addons – Ultimate Template Builder for Elementor 32 82 72 1k+ 4 years ago 4 months ago Output is not escaped #47 Mollie Payments for WooCommerce 32 67 136 100k+ 11 years ago 16 days ago Dynamic hook name #48 پینوا | Pinova 32 190 94 1k+ 3 months ago yesterday Output is not escaped #49 Advanced Forms for ACF 33 169 278 3k+ 10 years ago 5 months ago Non-prefixed hook name #50 FastPixel Cache – Optimize Page Speed: Compress Images, Minify, Clean Database & CDN 33 52 342 4k+ 2 years ago 2 months ago Request data is not unslashed