| #51 | Daily Prayer Time | 21 | 947 | 1,780 | 1k+ | | | Non-prefixed global variable |
| #52 | DELUCKS SEO | 21 | 362 | 1,171 | 400 | | | Missing nonce verification |
| #53 | Free Downloads WooCommerce | 21 | 430 | 359 | 4k+ | | | Output is not escaped |
| #54 | Duplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More | 21 | 2,572 | 1,277 | 1m+ | | | Output is not escaped |
| #55 | Eupago Gateway For Woocommerce | 21 | 576 | 233 | 2k+ | | | Output is not escaped |
| #56 | EventPrime – Events Calendar, Bookings and Tickets | 21 | 873 | 4,308 | 7k+ | | | Non-prefixed global variable |
| #57 | FileOrganizer – WordPress File Manager | 21 | 536 | 241 | 200k+ | | | unlink unlink |
| #58 | Formidable Forms – WordPress Form Builder for Contact Forms, Calculators, Quizzes & More | 21 | 52 | 2,063 | 300k+ | | | Non-prefixed global variable |
| #59 | Campaign Monitor for WordPress | 21 | 386 | 461 | 2k+ | | | Non-prefixed global variable |
| #60 | Frontend Dashboard | 21 | 384 | 945 | 500 | | | Non-prefixed function |
| #61 | Leyka | 21 | 257 | 3,446 | 2k+ | | | Request data is not unslashed |
| #62 | Mapster WP Maps | 21 | 3,440 | 2,894 | 3k+ | | | Text Domain Mismatch |
| #63 | Mooberry Book Manager | 21 | 1,040 | 399 | 1k+ | | | Text Domain Mismatch |
| #64 | MotoPress Hotel Booking | 21 | 3,067 | 1,037 | 10k+ | | | Text Domain Mismatch |
| #65 | Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program – myCred | 21 | 1,478 | 3,337 | 10k+ | | | Non-prefixed global variable |
| #66 | Landing Page Builder – Coming Soon page, Maintenance Mode, Lead Page, WordPress Landing Pages | 21 | 1,120 | 2,913 | 9k+ | | | Non-prefixed global variable |
| #67 | PeachPay — Payments & Express Checkout for WooCommerce (supports Stripe, PayPal, Square, Authorize.net, NMI) | 21 | 485 | 813 | 300 | | | Missing direct file access protection |
| #68 | User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor | 21 | 703 | 1,463 | 40k+ | | | Missing Translators Comment |
| #69 | PublishPress Planner – Editorial Calendar, Marketing Content, Kanban Board | 21 | 603 | 890 | 6k+ | | | Output is not escaped |
| #70 | Five Star Restaurant Reservations – WordPress Booking Plugin | 21 | 1,101 | 1,159 | 10k+ | | | Output is not escaped |
| #71 | Rocket Maintenance Mode & Coming Soon Page | 21 | 1,176 | 1,406 | 4k+ | | | Non-prefixed global variable |
| #72 | Seamless Donations is Sunset | 21 | 600 | 514 | 2k+ | | | Text Domain Mismatch |
| #73 | Professional Social Sharing Buttons, Icons & Related Posts – Shareaholic | 21 | 327 | 181 | 10k+ | | | Output is not escaped |
| #74 | Accept Stripe Payments | 21 | 373 | 892 | 20k+ | | | Missing nonce verification |
| #75 | Trace My IP – Visitor IP Tracker, Stats Analytics & Page Views Counter with Email Alerts | 21 | 871 | 338 | 1k+ | | | wp function not compatible with requires wp |
| #76 | Revive Social – Social Media Auto Post and Scheduling Automation Plugin | 21 | 256 | 431 | 20k+ | | | Non-prefixed hook name |
| #77 | URL Shortify – Simple and Easy URL Shortener | 21 | 1,511 | 2,669 | 10k+ | | | Non-prefixed global variable |
| #78 | Buckaroo Woocommerce Payments Plugin | 21 | 638 | 321 | 2k+ | | | Exception output is not escaped |
| #79 | WebP Express | 21 | 160 | 427 | 300k+ | | | Non-prefixed global variable |
| #80 | Paysera Payment Gateway for WooCommerce | 21 | 1,868 | 196 | 7k+ | | | Exception output is not escaped |
| #81 | Booster for WooCommerce – PDF Invoices, Abandoned Cart, Variation Swatches & 100+ Tools | 21 | 786 | 3,393 | 30k+ | | | Non-prefixed global variable |
| #82 | Pay For Post with WooCommerce | 21 | 958 | 1,477 | 1k+ | | | Non-prefixed global variable |
| #83 | PPOM – Product Addons & Custom Fields for WooCommerce | 21 | 336 | 1,319 | 20k+ | | | Non-prefixed global variable |
| #84 | WP Compress – Instant Performance & Speed Optimization | 21 | 3,367 | 3,253 | 10k+ | | | Non Singular String Literal Domain |
| #85 | WP-Lister Lite for eBay | 21 | 6,696 | 5,128 | 2k+ | | | Output is not escaped |
| #86 | WP phpMyAdmin | 21 | 4,528 | 6,435 | 50k+ | | | Missing Arg Domain |
| #87 | WPScan – WordPress Security Scanner | 21 | 527 | 265 | 8k+ | | | Text Domain Mismatch |
| #88 | 12 Step Meeting List | 22 | 156 | 593 | 900 | | | Non-prefixed global variable |
| #89 | Code Profiler – WordPress Performance Profiling and Debugging Made Easy | 22 | 265 | 400 | 8k+ | | | Non-prefixed global variable |
| #90 | RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login | 22 | 3,652 | 5,134 | 8k+ | | | Non-prefixed global variable |
| #91 | Data Tables Generator by Supsystic | 22 | 164 | 198 | 10k+ | | | Exception output is not escaped |
| #92 | Directorist: AI-Powered Business Directory, Listings & Classified Ads | 22 | 560 | 2,202 | 20k+ | | | Non-prefixed global variable |
| #93 | Download Manager | 22 | 2,513 | 1,459 | 100k+ | | | Output is not escaped |
| #94 | Diverse Solutions IDX Real Estate Listings & MLS Search | 22 | 745 | 605 | 1k+ | | | Heredoc Output Not Escaped |
| #95 | Dynamic QR Code – generator | 22 | 238 | 208 | 5k+ | | | Missing direct file access protection |
| #96 | Ebook Store | 22 | 410 | 1,054 | 700 | | | Non-prefixed global variable |
| #97 | EleSpare – News, Magazine and Blog Addons for Elementor | 22 | 733 | 1,423 | 10k+ | | | Non-prefixed global variable |
| #98 | Events Manager – Calendar, Bookings, Tickets, and more! | 22 | 4,716 | 5,690 | 70k+ | | | Output is not escaped |
| #99 | FACTO – Facturación Electrónica | 22 | 244 | 423 | 400 | | | Request data is not unslashed |
| #100 | Falang multilanguage for WordPress | 22 | 716 | 769 | 1k+ | | | Output is not escaped |