| #101 | Stylish Price List – Price Table Builder & QR Code Restaurant Menu | 22 | 674 | 678 | 3k+ | | | Output is not escaped |
| #102 | Swift Performance Lite | 22 | 2,346 | 1,325 | 7k+ | | | Text Domain Mismatch |
| #103 | Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent | 22 | 225 | 519 | 8k+ | | | error log error log |
| #104 | Tag Groups is the Advanced Way to Display Your Taxonomy Terms | 22 | 575 | 465 | 3k+ | | | Unsafe printing function |
| #105 | Uncanny Toolkit for LearnDash | 22 | 539 | 994 | 20k+ | | | Output is not escaped |
| #106 | URL Shortify – Simple and Easy URL Shortener | 22 | 1,520 | 2,689 | 10k+ | | | Non-prefixed global variable |
| #107 | UserFeedback – Create Interactive Feedback Form, User Surveys, and Polls in Seconds | 22 | 444 | 243 | 200k+ | | | Text Domain Mismatch |
| #108 | WCFM Marketplace – Multivendor Marketplace for WooCommerce | 22 | 1,937 | 1,969 | 10k+ | | | Non-prefixed global variable |
| #109 | WCFM Membership – WooCommerce Memberships for Multivendor Marketplace | 22 | 559 | 675 | 10k+ | | | Non-prefixed global variable |
| #110 | WooCommerce | 22 | 1,355 | 6,129 | 7m+ | | | Non-prefixed global variable |
| #111 | CoDesigner – All in One Elementor WooCommerce Builder | 22 | 4,131 | 774 | 5k+ | | | Text Domain Mismatch |
| #112 | Simple Shopping Cart | 22 | 796 | 536 | 10k+ | | | Unsafe printing function |
| #113 | Asset CleanUp: Page Speed Booster | 22 | 2,030 | 2,485 | 100k+ | | | Non-prefixed global variable |
| #114 | WP Easy Pay – Payment and Donation form Builder for Square | 22 | 893 | 1,828 | 1k+ | | | Non-prefixed global variable |
| #115 | WP Express Checkout (Fast Payments via PayPal & Stripe) | 22 | 591 | 627 | 1k+ | | | Output is not escaped |
| #116 | WP Umbrella: Update Backup Restore & Monitoring | 22 | 915 | 905 | 70k+ | | | Exception output is not escaped |
| #117 | WP Super Minify • Minify, Compress and Cache HTML, CSS & JavaScript | 22 | 164 | 257 | 9k+ | | | Non-prefixed constant |
| #118 | NotifSMS – SMS Notifications OTP & 2FA for WordPress & WooCommerce | 22 | 1,353 | 1,412 | 2k+ | | | Non-prefixed global variable |
| #119 | User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration | 22 | 287 | 1,432 | 20k+ | | | Non-prefixed global variable |
| #120 | WP-WebAuthn | 22 | 957 | 396 | 2k+ | | | Exception output is not escaped |
| #121 | WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell | 22 | 5,996 | 2,790 | 5k+ | | | Text Domain Mismatch |
| #122 | WPSSO Core – Complete Schema Markup and Meta Tags | 22 | 1,407 | 412 | 5k+ | | | Missing Translators Comment |
| #123 | YaySMTP – WP Mail SMTP with Email Logs, Tracking & Reports | 22 | 654 | 435 | 10k+ | | | Exception output is not escaped |
| #124 | ЮKassa для WooCommerce | 22 | 591 | 168 | 9k+ | | | Short PHP open tag found |
| #125 | Advanced Custom Fields: Extended | 23 | 1,885 | 329 | 100k+ | | | Text Domain Mismatch |
| #126 | Advanced Contact form 7 DB | 23 | 761 | 1,959 | 70k+ | | | Non-prefixed global variable |
| #127 | Advanced Custom Fields (ACF®) | 23 | 2,456 | 1,218 | 2m+ | | | Text Domain Mismatch |
| #128 | AI Engine – The Chatbot, AI Framework & MCP for WordPress | 23 | 413 | 559 | 100k+ | | | error log error log |
| #129 | Affiliate Super Assistent | 23 | 1,280 | 267 | 2k+ | | | Text Domain Mismatch |
| #130 | Autoptimize | 23 | 288 | 191 | 800k+ | | | Output is not escaped |
| #131 | BA Book Everything | 23 | 1,184 | 1,086 | 10k+ | | | Output is not escaped |
| #132 | Kadence Security – Password, Two Factor Authentication, and Brute Force Protection | 23 | 1,053 | 967 | 700k+ | | | Missing Translators Comment |
| #133 | BlossomThemes Email Newsletter | 23 | 337 | 239 | 20k+ | | | Output is not escaped |
| #134 | Brave Popup Builder – Popup, Optins, Lead Generation, Survey & Interactive Content | 23 | 238 | 294 | 20k+ | | | error log print r |
| #135 | BuddyDrive | 23 | 722 | 1,597 | 1k+ | | | Non-prefixed global variable |
| #136 | Classified Listing – AI-Powered Classified ads & Business Directory | 23 | 155 | 1,861 | 9k+ | | | Non-prefixed global variable |
| #137 | CleanTalk Anti-Spam. Spam Firewall & Bot protection | 23 | 826 | 1,078 | 200k+ | | | Missing nonce verification |
| #138 | Content Egg – Affiliate Product Importer & Price Comparison | 23 | 1,231 | 1,257 | 10k+ | | | Non-prefixed global variable |
| #139 | Content Views – Post Grid & Filter, Recent Posts, Category Posts … (Shortcode, Gutenberg Blocks, and Widgets for Elementor) | 23 | 306 | 587 | 100k+ | | | Dynamic hook name |
| #140 | DK PDF – WordPress PDF Generator | 23 | 744 | 335 | 3k+ | | | Exception output is not escaped |
| #141 | Dokan: AI Powered WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy | 23 | 170 | 821 | 40k+ | | | Non-prefixed global variable |
| #142 | Easy Age Verify | 23 | 1,138 | 2,631 | 1k+ | | | Non-prefixed global variable |
| #143 | Easy Digital Downloads – eCommerce Payments and Subscriptions made easy | 23 | 3,723 | 10,283 | 40k+ | | | Non-prefixed namespace |
| #144 | EventON – Events Calendar | 23 | 2,585 | 1,021 | 6k+ | | | Text Domain Mismatch |
| #145 | Export WordPress Pages to Static HTML & PDF — Static Site Export | 23 | 490 | 301 | 5k+ | | | Text Domain Mismatch |
| #146 | Ezoic | 23 | 432 | 516 | 10k+ | | | Output is not escaped |
| #147 | Feed Them Social – Social Media Feeds, Video, and Photo Galleries | 23 | 563 | 535 | 20k+ | | | Output is not escaped |
| #148 | Flexmls® IDX Plugin | 23 | 1,268 | 957 | 1k+ | | | Output is not escaped |
| #149 | Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder | 23 | 4,746 | 1,279 | 30k+ | | | Non Singular String Literal Domain |
| #150 | GamiPress – Gamification plugin to reward points, achievements, badges & ranks in WordPress | 23 | 3,662 | 2,971 | 10k+ | | | Output is not escaped |