| #51 | Welcart e-Commerce | 22 | 10,377 | 10,896 | 10k+ | | | Text Domain Mismatch |
| #52 | WCFM Marketplace – Multivendor Marketplace for WooCommerce | 22 | 1,937 | 1,969 | 10k+ | | | Non-prefixed global variable |
| #53 | WCFM Membership – WooCommerce Memberships for Multivendor Marketplace | 22 | 559 | 675 | 10k+ | | | Non-prefixed global variable |
| #54 | Simple Shopping Cart | 22 | 796 | 536 | 10k+ | | | Unsafe printing function |
| #55 | WP Express Checkout (Fast Payments via PayPal & Stripe) | 22 | 591 | 627 | 1k+ | | | Output is not escaped |
| #56 | File Manager | 22 | 740 | 520 | 1m+ | | | Unsafe printing function |
| #57 | WP Fusion Lite – Marketing Automation and CRM Integration for WordPress | 22 | 276 | 683 | 5k+ | | | Nonce verification recommended |
| #58 | WP Umbrella: Update Backup Restore & Monitoring | 22 | 918 | 916 | 70k+ | | | Exception output is not escaped |
| #59 | AidWP – Donation & Payment Forms (Stripe Powered) | 22 | 1,317 | 1,675 | 800 | | | Non-prefixed global variable |
| #60 | WP-WebAuthn | 22 | 957 | 396 | 2k+ | | | Exception output is not escaped |
| #61 | WPSSO Core – Complete Schema Markup and Meta Tags | 22 | 1,407 | 412 | 5k+ | | | Missing Translators Comment |
| #62 | YaySMTP – WP Mail SMTP with Email Logs, Tracking & Reports | 22 | 654 | 435 | 10k+ | | | Exception output is not escaped |
| #63 | B2BKing — Ultimate WooCommerce B2B and Wholesale Plugin — Wholesale Prices, Bulk Order Form & More | 23 | 1,347 | 409 | 10k+ | | | Text Domain Mismatch |
| #64 | BlossomThemes Email Newsletter | 23 | 337 | 239 | 20k+ | | | Output is not escaped |
| #65 | Business Directory Plugin – Easy Listing Directories for WordPress | 23 | 611 | 1,058 | 10k+ | | | Non-prefixed global variable |
| #66 | WPBot – AI ChatBot for Live Support, Lead Generation, AI Services | 23 | 264 | 1,038 | 5k+ | | | Non-prefixed global variable |
| #67 | Church Admin | 23 | 1,643 | 4,202 | 900 | | | Direct Query |
| #68 | Content Egg – Affiliate Product Importer & Price Comparison | 23 | 1,231 | 1,257 | 10k+ | | | Non-prefixed global variable |
| #69 | Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe | 23 | 9,310 | 26,642 | 1k+ | | | Non-prefixed global variable |
| #70 | Easy Digital Downloads – eCommerce Payments and Subscriptions made easy | 23 | 3,723 | 10,283 | 40k+ | | | Non-prefixed namespace |
| #71 | Essential Real Estate | 23 | 529 | 5,060 | 8k+ | | | Non-prefixed global variable |
| #72 | Feed Them Social – Social Media Feeds, Video, and Photo Galleries | 23 | 563 | 535 | 20k+ | | | Output is not escaped |
| #73 | FV Flowplayer Video Player | 23 | 1,311 | 1,454 | 20k+ | | | Output is not escaped |
| #74 | GAinWP Google Analytics Integration for WordPress | 23 | 525 | 176 | 8k+ | | | Output is not escaped |
| #75 | Houzez Property Feed | 23 | 1,464 | 1,615 | 1k+ | | | Text Domain Mismatch |
| #76 | RealHomes Memberships | 23 | 516 | 264 | 1k+ | | | Non Singular String Literal Domain |
| #77 | Link Whisper Free | 23 | 3,882 | 5,303 | 30k+ | | | Text Domain Mismatch |
| #78 | MailPoet – Newsletters, Email Marketing, and Automation | 23 | 926 | 710 | 500k+ | | | Exception output is not escaped |
| #79 | MasterStudy LMS WordPress Plugin – for Online Courses and Education | 23 | 1,419 | 4,875 | 10k+ | | | Non-prefixed global variable |
| #80 | Restaurant Menu and Food Ordering | 23 | 385 | 853 | 2k+ | | | Non-prefixed global variable |
| #81 | MStore API – Create Native Android & iOS Apps On The Cloud | 23 | 618 | 764 | 3k+ | | | SQL query is not prepared |
| #82 | MyWorks Sync for WooCommerce & QuickBooks Online | 23 | 2,292 | 9,101 | 5k+ | | | Non-prefixed global variable |
| #83 | Next Active Directory Integration | 23 | 683 | 284 | 2k+ | | | Exception output is not escaped |
| #84 | PayPal Brasil para WooCommerce | 23 | 554 | 328 | 1k+ | | | Unsafe printing function |
| #85 | Postie | 23 | 407 | 261 | 10k+ | | | Output is not escaped |
| #86 | PowerPress Podcasting plugin by Blubrry | 23 | 4,807 | 2,394 | 20k+ | | | Output is not escaped |
| #87 | Simple URLs – Link Cloaking, Product Displays, and Affiliate Link Management | 23 | 295 | 298 | 4k+ | | | Non-prefixed global variable |
| #88 | Directory Listings WordPress plugin – uListing | 23 | 947 | 1,573 | 1k+ | | | Non-prefixed global variable |
| #89 | W3 Total Cache | 23 | 307 | 678 | 900k+ | | | Non-prefixed global variable |
| #90 | Peach Payments Gateway | 23 | 298 | 129 | 1k+ | | | Non Singular String Literal Domain |
| #91 | Billingo Plus integráció WooCommerce-hez | 23 | 1,119 | 507 | 800 | | | Text Domain Mismatch |
| #92 | PostFinance Checkout | 23 | 979 | 214 | 1k+ | | | Text Domain Mismatch |
| #93 | ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin | 23 | 7,423 | 2,181 | 90k+ | | | Text Domain Mismatch |
| #94 | WP Free SSL | 23 | 735 | 1,345 | 1k+ | | | Non-prefixed global variable |
| #95 | Stripe Payment Forms by WP Full Pay – Accept Credit Card Payments, Donations & Subscriptions | 23 | 1,123 | 1,860 | 9k+ | | | Output is not escaped |
| #96 | پارسی دیت – Parsi Date | 23 | 102 | 289 | 100k+ | | | Non-prefixed hook name |
| #97 | Subscribe Forms – Beautiful Email Forms, Embedded Newsletter Forms & MailChimp Form | 23 | 419 | 542 | 2k+ | | | Non-prefixed global variable |
| #98 | Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress | 23 | 2,317 | 1,714 | 5k+ | | | Output is not escaped |
| #99 | AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress | 24 | 5,230 | 1,464 | 7k+ | | | Output is not escaped |
| #100 | Advanced iFrame | 24 | 887 | 1,120 | 40k+ | | | Non-prefixed global variable |