#1 JetFormBuilder — Dynamic Blocks Form Builder 19 2,103 1,604 80k+ 6 years ago 5 days ago Text Domain Mismatch #2 SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments 19 533 1,149 80k+ 4 years ago 5 days ago Non-prefixed global variable #3 Mapster WP Maps 21 3,440 2,894 3k+ 5 years ago 24 days ago Text Domain Mismatch #4 WP Extended – The Ultimate WordPress Toolkit 21 1,253 398 600 4 years ago 2 months ago Non Singular String Literal Domain #5 FireBox Popups – Increase Sales and Grow Your Email List 22 157 826 7k+ 5 years ago 25 days ago Non-prefixed global variable #6 The Innovative Form Builder – IvyForms 22 750 309 800 1 year ago 26 days ago Exception output is not escaped #7 Molongui Authorship – Author Boxes, Guest Authors & Co-Authors for WordPress 22 919 1,230 10k+ 11 years ago 6 months ago Output is not escaped #8 RealPress – Real Estate Plugin 22 604 1,167 400 4 years ago 5 months ago Non-prefixed global variable #9 Advanced Custom Fields: Extended 23 1,885 329 100k+ 7 years ago 2 months ago Text Domain Mismatch #10 Frontend Admin by DynamiApps 23 5,946 3,231 9k+ 7 years ago 7 days ago Text Domain Mismatch #11 Advanced Custom Fields (ACF®) 23 2,472 1,239 2m+ 15 years ago 6 days ago Text Domain Mismatch #12 Content Egg – Affiliate Product Importer & Price Comparison 23 1,532 1,385 10k+ 11 years ago yesterday Non-prefixed global variable #13 Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder 23 407 236 700k+ 9 years ago 7 days ago Text Domain Mismatch #14 Groundhogg — CRM, Newsletters, and Marketing Automation 23 136 919 2k+ 8 years ago 21 days ago Non-prefixed global variable #15 Import WP – Export and Import CSV and XML files to WordPress 23 579 324 4k+ 12 years ago 7 days ago Exception output is not escaped #16 Salon Booking System – Free Version 23 145 627 2k+ 11 years ago 2 days ago Non-prefixed global variable #17 Secure Custom Fields 23 240 1,377 90k+ 2 years ago 3 days ago Non-prefixed function #18 Shield Security – Smart Bot Blocking, Brute-Force Login Protection & File Scanning 23 1,118 202 30k+ 13 years ago 2 months ago Missing Translators Comment #19 WP STAGING – WordPress Backups, Restore, Migration & Clone 23 1,525 1,610 100k+ 11 years ago 7 days ago Non-prefixed global variable #20 WP Webhooks – Automate repetitive tasks by creating powerful automation workflows directly within WordPress 23 4,380 888 20k+ 7 years ago 26 days ago Output is not escaped #21 WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell 23 6,004 2,761 5k+ 5 years ago 4 days ago Text Domain Mismatch #22 WP Customer Area 24 3,306 941 10k+ 13 years ago 1 month ago Text Domain Mismatch #23 EmbedPress – PDF Embedder, 3D PDF FlipBook, Google Reviews, YouTube Videos, Upload & Embed PDF documents 24 711 1,592 100k+ 10 years ago 4 days ago Output is not escaped #24 Kirki – Freeform Page Builder, Website Builder & Customizer 24 222 814 500k+ 12 years ago 4 days ago Exception output is not escaped #25 Spotlight Social Feeds – Block, Shortcode, and Widget 24 411 147 60k+ 6 years ago 2 months ago Output is not escaped #26 ATUM WooCommerce Inventory Management and Stock Tracking 25 2,611 1,296 10k+ 10 years ago 13 days ago Non Singular String Literal Domain #27 Admin Columns 25 613 995 100k+ 15 years ago 2 months ago Non-prefixed namespace #28 F4 Post Tree 25 536 1,332 500 7 years ago 2 months ago Non-prefixed global variable #29 AnWP Football Leagues 25 3,598 1,955 800 8 years ago 1 month ago Text Domain Mismatch #30 ShopMagic – email automation for WordPress 25 228 148 10k+ 10 years ago 4 days ago Exception output is not escaped #31 OttoKit: All-in-One Automation Platform 25 1,589 1,826 90k+ 4 years ago 11 days ago Missing direct file access protection #32 FiboSearch – Ajax Search for WooCommerce 26 597 302 100k+ 10 years ago 7 days ago Output is not escaped #33 Theater for WordPress 26 348 344 600 13 years ago 8 months ago Output is not escaped #34 Vertex Addons for Elementor 28 232 413 400 2 years ago 3 months ago Output is not escaped #35 AJAX Login and Registration modal popup + inline form 28 157 261 3k+ 8 years ago 9 months ago Output is not escaped #36 گیتلند | درگاه پرداخت هوشمند گیتلند 28 327 235 3k+ 1 year ago 20 days ago Output is not escaped #37 Worldline Global Online Pay for WooCommerce 29 167 114 500 2 years ago 3 days ago Missing direct file access protection #38 Novelist 30 475 158 1k+ 10 years ago 1 year ago Output is not escaped #39 Responsive Addons for Elementor – Free Elementor Addons, Kits and Elementor Templates 30 60 387 3k+ 2 years ago 24 days ago Non-prefixed global variable #40 Ultimate Post Kit Addons for Elementor 30 13 403 30k+ 5 years ago 6 days ago Missing nonce verification #41 WPZOOM Addons for Beaver Builder 30 2,168 177 4k+ 8 years ago 1 month ago Text Domain Mismatch #42 Essential Addons for Elementor – Popular Elementor Templates & Widgets 31 143 189 2m+ 9 years ago 12 days ago wp function not compatible with requires wp #43 Enter Addons – Ultimate Template Builder for Elementor 32 82 72 1k+ 4 years ago 2 months ago Output is not escaped #44 Mollie Payments for WooCommerce 32 71 134 100k+ 11 years ago 21 days ago Dynamic hook name #45 Advanced Forms for ACF 33 169 278 3k+ 10 years ago 3 months ago Non-prefixed hook name #46 FastPixel Cache – Optimize Page Speed: Compress Images, Minify, Clean Database & CDN 33 52 342 4k+ 2 years ago 24 days ago Request data is not unslashed #47 پینوا | Pinova 33 180 88 700 2 months ago 13 days ago Output is not escaped #48 Paymattic – Secure, Simple Payment & Donation with Subscription Payments, Recurring Donations, Customer Management 33 538 3k+ 7 years ago 1 month ago Direct Query #49 Inavii Social Feed – Live Social Proof Gallery 34 532 180 9k+ 4 years ago 28 days ago Text Domain Mismatch #50 Yabe Webfont – Use Custom Fonts, Google Fonts or Adobe Fonts 34 45 116 5k+ 3 years ago 13 days ago Non-prefixed hook name