| #51 | WP phpMyAdmin | 21 | 4,528 | 6,435 | 50k+ | | Missing Arg Domain |
| #52 | WPScan – WordPress Security Scanner | 21 | 527 | 265 | 8k+ | | Text Domain Mismatch |
| #53 | Frontend Admin by DynamiApps | 22 | 5,922 | 3,208 | 10k+ | | Text Domain Mismatch |
| #54 | Shortcodes and extra features for Phlox theme | 22 | 413 | 426 | 90k+ | | Output Not Escaped |
| #55 | Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots | 22 | 1,604 | 2,019 | 10k+ | | Direct Query |
| #56 | Code Profiler – WordPress Performance Profiling and Debugging Made Easy | 22 | 265 | 400 | 8k+ | | Non Prefixed Variable Found |
| #57 | RegistrationMagic – User Registration Forms Plugin | 22 | 3,654 | 5,062 | 8k+ | | Non Prefixed Variable Found |
| #58 | Directorist: AI-Powered Business Directory, Listings & Classified Ads | 22 | 443 | 2,129 | 20k+ | | Non Prefixed Variable Found |
| #59 | Download Manager | 22 | 2,290 | 1,301 | 100k+ | | Output Not Escaped |
| #60 | Dynamic QR Code – generator | 22 | 238 | 208 | 6k+ | | missing direct file access protection |
| #61 | EleSpare – News, Magazine and Blog Addons for Elementor | 22 | 733 | 1,423 | 10k+ | | Non Prefixed Variable Found |
| #62 | Events Manager – Calendar, Bookings, Tickets, and more! | 22 | 4,722 | 5,621 | 70k+ | | Output Not Escaped |
| #63 | Finale Lite – Sales Countdown Timer & Discount for WooCommerce | 22 | 1,031 | 451 | 4k+ | | Output Not Escaped |
| #64 | Notification Bar, Announcement and Cookie Notice WordPress Plugin – FooBar | 22 | 1,321 | 1,371 | 3k+ | | Non Prefixed Variable Found |
| #65 | Five Star Restaurant Menu and Food Ordering | 22 | 752 | 609 | 5k+ | | Output Not Escaped |
| #66 | FunnelKit Payment Gateway for Stripe WooCommerce | 22 | 244 | 321 | 20k+ | | Input Not Sanitized |
| #67 | GeoDirectory – WP Business Directory Plugin and Classified Listings Directory | 22 | 4,462 | 3,972 | 10k+ | | Output Not Escaped |
| #68 | Anti-Malware Security and Brute-Force Firewall | 22 | 544 | 965 | 100k+ | | Output Not Escaped |
| #69 | HeadSpace2 SEO | 22 | 940 | 360 | 3k+ | | Text Domain Mismatch |
| #70 | InfiniteWP Client | 22 | 2,286 | 1,812 | 200k+ | | Exception Not Escaped |
| #71 | LearnPress – WordPress LMS Plugin for Create and Sell Online Courses | 22 | 2,361 | 3,384 | 70k+ | | Non Prefixed Variable Found |
| #72 | Custom Login Page Customizer – Login Designer | 22 | 588 | 1,455 | 30k+ | | Non Prefixed Variable Found |
| #73 | MailOptin – Popup, Optin Forms & Email Newsletters for Mailchimp, HubSpot, AWeber Etc. | 22 | 2,619 | 2,453 | 10k+ | | Output Not Escaped |
| #74 | Modula Image Gallery – Photo Grid & Video Gallery | 22 | 474 | 436 | 100k+ | | Text Domain Mismatch |
| #75 | Molongui Authorship – Author Boxes, Guest Authors & Co-Authors for WordPress | 22 | 919 | 1,230 | 10k+ | | Output Not Escaped |
| #76 | NinjaFirewall (WP Edition) – Advanced Security Plugin and Firewall | 22 | 1,265 | 2,065 | 100k+ | | Non Prefixed Variable Found |
| #77 | PagBank / PagSeguro Connect para WooCommerce | 22 | 504 | 743 | 4k+ | | Non Prefixed Variable Found |
| #78 | Smart Popup by Supsystic | 22 | 3,172 | 503 | 10k+ | | Non Singular String Literal Domain |
| #79 | Post SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App | 22 | 1,581 | 2,326 | 300k+ | | Non Prefixed Variable Found |
| #80 | Prime Mover – Migrate WordPress Website & Backups | 22 | 1,326 | 1,600 | 10k+ | | Non Prefixed Variable Found |
| #81 | Product Catalog Feed by PixelYourSite | 22 | 581 | 357 | 8k+ | | Output Not Escaped |
| #82 | Restrict User Access – Ultimate Membership & Content Protection | 22 | 977 | 1,840 | 10k+ | | Non Prefixed Variable Found |
| #83 | Secure Custom Fields | 22 | 241 | 1,369 | 80k+ | | Non Prefixed Function Found |
| #84 | ShortPixel Image Optimizer – Optimize Images, Convert WebP & AVIF | 22 | 1,044 | 799 | 300k+ | | Non Prefixed Variable Found |
| #85 | Simple Job Board | 22 | 634 | 1,355 | 10k+ | | Non Prefixed Variable Found |
| #86 | SNS Count Cache | 22 | 918 | 120 | 8k+ | | Non Singular String Literal Domain |
| #87 | NextScripts: Social Networks Auto-Poster | 22 | 2,408 | 1,133 | 30k+ | | Output Not Escaped |
| #88 | SSL Zen — SSL Certificate Installer & HTTPS Redirects | 22 | 779 | 1,575 | 10k+ | | Non Prefixed Variable Found |
| #89 | Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent | 22 | 225 | 519 | 8k+ | | error log error log |
| #90 | Tag Groups is the Advanced Way to Display Your Taxonomy Terms | 22 | 575 | 465 | 3k+ | | Unsafe Printing Function |
| #91 | Theme Editor | 22 | 798 | 685 | 50k+ | | Output Not Escaped |
| #92 | Customize Feeds for Twitter | 22 | 92 | 171 | 4k+ | | Non Prefixed Variable Found |
| #93 | Uncanny Toolkit for LearnDash | 22 | 539 | 994 | 20k+ | | Output Not Escaped |
| #94 | URL Shortify – Simple and Easy URL Shortener | 22 | 1,520 | 2,689 | 10k+ | | Non Prefixed Variable Found |
| #95 | Welcart e-Commerce | 22 | 10,377 | 10,896 | 10k+ | | Text Domain Mismatch |
| #96 | WCFM Marketplace – Multivendor Marketplace for WooCommerce | 22 | 1,937 | 1,969 | 10k+ | | Non Prefixed Variable Found |
| #97 | WCFM Membership – WooCommerce Memberships for Multivendor Marketplace | 22 | 559 | 675 | 10k+ | | Non Prefixed Variable Found |
| #98 | Advanced AJAX Product Filters | 22 | 2,683 | 1,205 | 50k+ | | Text Domain Mismatch |
| #99 | CoDesigner – All in One Elementor WooCommerce Builder | 22 | 4,131 | 774 | 5k+ | | Text Domain Mismatch |
| #100 | Simple Shopping Cart | 22 | 796 | 536 | 10k+ | | Unsafe Printing Function |