| #51 | RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login | 22 | 3,654 | 5,061 | 8k+ | | Non-prefixed global variable |
| #52 | Data Tables Generator by Supsystic | 22 | 156 | 144 | 10k+ | | Exception output is not escaped |
| #53 | Falang multilanguage for WordPress | 22 | 716 | 769 | 1k+ | | Output is not escaped |
| #54 | File Manager Pro – Filester | 22 | 565 | 391 | 100k+ | | Request data is not unslashed |
| #55 | FireBox Popups – Increase Sales and Grow Your Email List | 22 | 153 | 812 | 7k+ | | Non-prefixed global variable |
| #56 | Five Star Restaurant Menu and Food Ordering | 22 | 752 | 609 | 5k+ | | Output is not escaped |
| #57 | FunnelKit Payment Gateway for Stripe WooCommerce | 22 | 244 | 321 | 20k+ | | Input is not sanitized |
| #58 | Anti-Malware Security and Brute-Force Firewall | 22 | 544 | 965 | 100k+ | | Output is not escaped |
| #59 | HeadSpace2 SEO | 22 | 940 | 360 | 3k+ | | Text Domain Mismatch |
| #60 | Számlázz.hu integráció WooCommerce-hez | 22 | 1,169 | 460 | 7k+ | | Text Domain Mismatch |
| #61 | InfiniteWP Client | 22 | 2,286 | 1,812 | 200k+ | | Exception output is not escaped |
| #62 | MailOptin – Popup, Optin Forms & Email Newsletters for Mailchimp, HubSpot, AWeber Etc. | 22 | 2,619 | 2,453 | 10k+ | | Output is not escaped |
| #63 | Motors – Car Dealership & Classified Listings Plugin | 22 | 5,340 | 5,958 | 9k+ | | Text Domain Mismatch |
| #64 | Newsletters | 22 | 2,968 | 2,248 | 2k+ | | Text Domain Mismatch |
| #65 | PAYCOMET for WooCommerce | 22 | 1,206 | 423 | 2k+ | | Text Domain Mismatch |
| #66 | Smart Popup by Supsystic | 22 | 3,172 | 503 | 10k+ | | Non Singular String Literal Domain |
| #67 | Product Catalog Feed by PixelYourSite | 22 | 581 | 357 | 8k+ | | Output is not escaped |
| #68 | Quick Contact Form | 22 | 260 | 623 | 1k+ | | Non-prefixed function |
| #69 | RabbitLoader Cache: Optimize your Website for Speed | 22 | 241 | 163 | 2k+ | | Output is not escaped |
| #70 | Seraphinite Accelerator | 22 | 594 | 255 | 50k+ | | Output is not escaped |
| #71 | ShortPixel Image Optimizer – Optimize Images, Convert WebP & AVIF | 22 | 1,044 | 799 | 300k+ | | Non-prefixed global variable |
| #72 | SNS Count Cache | 22 | 918 | 120 | 8k+ | | Non Singular String Literal Domain |
| #73 | SSL Zen — SSL Certificate Installer & HTTPS Redirects | 22 | 779 | 1,575 | 10k+ | | Non-prefixed global variable |
| #74 | Customize Feeds for Twitter | 22 | 92 | 171 | 4k+ | | Non-prefixed global variable |
| #75 | Welcart e-Commerce | 22 | 10,377 | 10,896 | 10k+ | | Text Domain Mismatch |
| #76 | WCFM Marketplace – Multivendor Marketplace for WooCommerce | 22 | 1,937 | 1,969 | 10k+ | | Non-prefixed global variable |
| #77 | WCFM Membership – WooCommerce Memberships for Multivendor Marketplace | 22 | 559 | 675 | 10k+ | | Non-prefixed global variable |
| #78 | Simple Shopping Cart | 22 | 796 | 536 | 10k+ | | Unsafe printing function |
| #79 | Asset CleanUp: Page Speed Booster | 22 | 2,030 | 2,485 | 100k+ | | Non-prefixed global variable |
| #80 | WP Express Checkout (Fast Payments via PayPal & Stripe) | 22 | 591 | 627 | 1k+ | | Output is not escaped |
| #81 | File Manager | 22 | 740 | 520 | 1m+ | | Unsafe printing function |
| #82 | WP Fusion Lite – Marketing Automation and CRM Integration for WordPress | 22 | 276 | 683 | 5k+ | | Nonce verification recommended |
| #83 | WP Umbrella: Update Backup Restore & Monitoring | 22 | 915 | 905 | 70k+ | | Exception output is not escaped |
| #84 | Wp-Insert | 22 | 267 | 301 | 10k+ | | Output is not escaped |
| #85 | WP Super Minify • Minify, Compress and Cache HTML, CSS & JavaScript | 22 | 164 | 257 | 9k+ | | Non-prefixed constant |
| #86 | NotifSMS – SMS Notifications OTP & 2FA for WordPress & WooCommerce | 22 | 1,353 | 1,412 | 2k+ | | Non-prefixed global variable |
| #87 | WP-WebAuthn | 22 | 957 | 396 | 2k+ | | Exception output is not escaped |
| #88 | WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell | 22 | 5,996 | 2,790 | 5k+ | | Text Domain Mismatch |
| #89 | WPSSO Core – Complete Schema Markup and Meta Tags | 22 | 1,407 | 412 | 5k+ | | Missing Translators Comment |
| #90 | YaySMTP – WP Mail SMTP with Email Logs, Tracking & Reports | 22 | 654 | 435 | 10k+ | | Exception output is not escaped |
| #91 | Recipe Cards For Your Food Blog from Zip Recipes | 22 | 1,126 | 1,731 | 1k+ | | Non-prefixed global variable |
| #92 | Affiliate Super Assistent | 23 | 1,280 | 267 | 2k+ | | Text Domain Mismatch |
| #93 | B2BKing — Ultimate WooCommerce B2B and Wholesale Plugin — Wholesale Prices, Bulk Order Form & More | 23 | 1,347 | 409 | 10k+ | | Text Domain Mismatch |
| #94 | BlossomThemes Email Newsletter | 23 | 337 | 239 | 20k+ | | Output is not escaped |
| #95 | Booking calendar, Appointment Booking System | 23 | 1,079 | 1,125 | 4k+ | | Output is not escaped |
| #96 | Business Directory Plugin – Easy Listing Directories for WordPress | 23 | 611 | 1,058 | 10k+ | | Non-prefixed global variable |
| #97 | Captivate Sync | 23 | 174 | 557 | 1k+ | | Non-prefixed global variable |
| #98 | WPBot – AI ChatBot for Live Support, Lead Generation, AI Services | 23 | 264 | 1,038 | 5k+ | | Non-prefixed global variable |
| #99 | Classified Listing – AI-Powered Classified ads & Business Directory | 23 | 155 | 1,861 | 9k+ | | Non-prefixed global variable |
| #100 | CleanTalk Anti-Spam. Spam Firewall & Bot protection | 23 | 826 | 1,078 | 200k+ | | Missing nonce verification |