| #51 | WP Customer Area | 22 | 3,308 | 941 | 10k+ | | Text Domain Mismatch |
| #52 | Directorist: AI-Powered Business Directory, Listings & Classified Ads | 22 | 443 | 2,129 | 20k+ | | Non Prefixed Variable Found |
| #53 | Download Manager | 22 | 2,290 | 1,301 | 100k+ | | Output Not Escaped |
| #54 | Dynamic QR Code – generator | 22 | 238 | 208 | 6k+ | | missing direct file access protection |
| #55 | Easy Social Feed – Social Photos Gallery and Post Feed for WordPress | 22 | 1,567 | 1,277 | 30k+ | | Non Prefixed Variable Found |
| #56 | EleSpare – News, Magazine and Blog Addons for Elementor | 22 | 733 | 1,423 | 10k+ | | Non Prefixed Variable Found |
| #57 | Events Manager – Calendar, Bookings, Tickets, and more! | 22 | 4,722 | 5,621 | 70k+ | | Output Not Escaped |
| #58 | File Manager Pro – Filester | 22 | 565 | 391 | 100k+ | | Missing Unslash |
| #59 | Five Star Restaurant Menu and Food Ordering | 22 | 752 | 609 | 5k+ | | Output Not Escaped |
| #60 | FunnelKit Payment Gateway for Stripe WooCommerce | 22 | 244 | 321 | 20k+ | | Input Not Sanitized |
| #61 | GeoDirectory – WP Business Directory Plugin and Classified Listings Directory | 22 | 4,462 | 3,972 | 10k+ | | Output Not Escaped |
| #62 | Happyforms – Form Builder for WordPress: Drag & Drop Contact Forms, Surveys, Payments & Multipurpose Forms | 22 | 1,037 | 722 | 20k+ | | Unsafe Printing Function |
| #63 | IMPress for IDX Broker | 22 | 1,085 | 636 | 7k+ | | Text Domain Mismatch |
| #64 | InfiniteWP Client | 22 | 2,286 | 1,812 | 200k+ | | Exception Not Escaped |
| #65 | LearnPress – WordPress LMS Plugin for Create and Sell Online Courses | 22 | 2,361 | 3,384 | 70k+ | | Non Prefixed Variable Found |
| #66 | Custom Login Page Customizer – Login Designer | 22 | 588 | 1,455 | 30k+ | | Non Prefixed Variable Found |
| #67 | MailOptin – Popup, Optin Forms & Email Newsletters for Mailchimp, HubSpot, AWeber Etc. | 22 | 2,619 | 2,453 | 10k+ | | Output Not Escaped |
| #68 | Modula Image Gallery – Photo Grid & Video Gallery | 22 | 474 | 436 | 100k+ | | Text Domain Mismatch |
| #69 | Molongui Authorship – Author Boxes, Guest Authors & Co-Authors for WordPress | 22 | 919 | 1,230 | 10k+ | | Output Not Escaped |
| #70 | Smart Popup by Supsystic | 22 | 3,172 | 503 | 10k+ | | Non Singular String Literal Domain |
| #71 | Post SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App | 22 | 1,581 | 2,326 | 300k+ | | Non Prefixed Variable Found |
| #72 | Product Catalog Feed by PixelYourSite | 22 | 581 | 357 | 8k+ | | Output Not Escaped |
| #73 | PageSpeed Ninja – Cache, Minify, Defer CSS JavaScript, Critical CSS, Optimize Images, Convert WebP | 22 | 984 | 407 | 5k+ | | Unsafe Printing Function |
| #74 | Secure Custom Fields | 22 | 241 | 1,369 | 80k+ | | Non Prefixed Function Found |
| #75 | ShortPixel Image Optimizer – Optimize Images, Convert WebP & AVIF | 22 | 1,044 | 799 | 300k+ | | Non Prefixed Variable Found |
| #76 | Simple Job Board | 22 | 634 | 1,355 | 10k+ | | Non Prefixed Variable Found |
| #77 | SNS Count Cache | 22 | 918 | 120 | 8k+ | | Non Singular String Literal Domain |
| #78 | SSL Zen — SSL Certificate Installer & HTTPS Redirects | 22 | 779 | 1,575 | 10k+ | | Non Prefixed Variable Found |
| #79 | Swift Performance Lite | 22 | 2,346 | 1,325 | 7k+ | | Text Domain Mismatch |
| #80 | Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent | 22 | 225 | 519 | 8k+ | | error log error log |
| #81 | Uncanny Toolkit for LearnDash | 22 | 539 | 994 | 20k+ | | Output Not Escaped |
| #82 | URL Shortify – Simple and Easy URL Shortener | 22 | 1,520 | 2,689 | 10k+ | | Non Prefixed Variable Found |
| #83 | UserFeedback – Create Interactive Feedback Form, User Surveys, and Polls in Seconds | 22 | 444 | 243 | 200k+ | | Text Domain Mismatch |
| #84 | WCFM Marketplace – Multivendor Marketplace for WooCommerce | 22 | 1,937 | 1,969 | 10k+ | | Non Prefixed Variable Found |
| #85 | WCFM Membership – WooCommerce Memberships for Multivendor Marketplace | 22 | 559 | 675 | 10k+ | | Non Prefixed Variable Found |
| #86 | WooCommerce | 22 | 1,355 | 6,129 | 7m+ | | Non Prefixed Variable Found |
| #87 | CoDesigner – All in One Elementor WooCommerce Builder | 22 | 4,131 | 774 | 5k+ | | Text Domain Mismatch |
| #88 | Simple Shopping Cart | 22 | 796 | 536 | 10k+ | | Unsafe Printing Function |
| #89 | Asset CleanUp: Page Speed Booster | 22 | 2,030 | 2,485 | 100k+ | | Non Prefixed Variable Found |
| #90 | WP Umbrella: Update Backup Restore & Monitoring | 22 | 915 | 905 | 70k+ | | Exception Not Escaped |
| #91 | WP Super Minify • Minify, Compress and Cache HTML, CSS & JavaScript | 22 | 164 | 257 | 9k+ | | Non Prefixed Constant Found |
| #92 | User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration | 22 | 287 | 1,432 | 20k+ | | Non Prefixed Variable Found |
| #93 | WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell | 22 | 5,996 | 2,790 | 5k+ | | Text Domain Mismatch |
| #94 | WPSSO Core – Complete Schema Markup and Meta Tags | 22 | 1,407 | 412 | 5k+ | | Missing Translators Comment |
| #95 | YaySMTP – WP Mail SMTP with Email Logs, Tracking & Reports | 22 | 654 | 435 | 10k+ | | Exception Not Escaped |
| #96 | ЮKassa для WooCommerce | 22 | 591 | 168 | 9k+ | | Echo Found |
| #97 | Advanced Custom Fields: Extended | 23 | 1,885 | 329 | 100k+ | | Text Domain Mismatch |
| #98 | Advanced Contact form 7 DB | 23 | 761 | 1,959 | 70k+ | | Non Prefixed Variable Found |
| #99 | Advanced Custom Fields (ACF®) | 23 | 2,456 | 1,218 | 2m+ | | Text Domain Mismatch |
| #100 | AI Engine – The Chatbot, AI Framework & MCP for WordPress | 23 | 413 | 559 | 100k+ | | error log error log |