| #51 | All-in-One Video Gallery – Video Player & Galleries for YouTube, Vimeo & Self-Hosted Videos | 22 | 912 | 2,885 | 20k+ | | | Non-prefixed global variable |
| #52 | ANAC XML Bandi di Gara | 22 | 294 | 244 | 500 | | | Output is not escaped |
| #53 | Accept PayPal Payments using Contact Form 7 | 22 | 359 | 127 | 600 | | | Text Domain Mismatch |
| #54 | RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login | 22 | 3,652 | 5,145 | 8k+ | | | Non-prefixed global variable |
| #55 | Database Access with Adminer | 22 | 983 | 2,553 | 1k+ | | | Non-prefixed global variable |
| #56 | Ebook Store | 22 | 410 | 1,054 | 700 | | | Non-prefixed global variable |
| #57 | FACTO – Facturación Electrónica | 22 | 244 | 423 | 400 | | | Request data is not unslashed |
| #58 | File Manager Pro – Filester | 22 | 566 | 391 | 100k+ | | | Request data is not unslashed |
| #59 | FireBox – WooCommerce Popup Builder, Exit Intent Popup, Email Optin & Cart Abandonment | 22 | 153 | 843 | 7k+ | | | Non-prefixed global variable |
| #60 | Five Star Restaurant Menu and Food Ordering | 22 | 754 | 610 | 5k+ | | | Output is not escaped |
| #61 | FunnelKit Payment Gateway for Stripe WooCommerce | 22 | 244 | 321 | 20k+ | | | Input is not sanitized |
| #62 | Számlázz.hu integráció WooCommerce-hez | 22 | 1,169 | 460 | 7k+ | | | Text Domain Mismatch |
| #63 | JCC Payment Gateway for Woocommerce | 22 | 2,273 | 1,136 | 600 | | | Text Domain Mismatch |
| #64 | Mailchimp for WooCommerce | 22 | 524 | 658 | 200k+ | | | Non-prefixed global variable |
| #65 | MailChimp Subscribe Form, Optin Builder, PopUp Builder, Form Builder | 22 | 1,120 | 3,012 | 2k+ | | | Non-prefixed global variable |
| #66 | MailOptin – Popup, Optin Forms & Email Newsletters for Mailchimp, HubSpot, AWeber Etc. | 22 | 2,625 | 2,458 | 10k+ | | | Output is not escaped |
| #67 | MarketKing — Ultimate WooCommerce Multivendor Marketplace Solution | 22 | 1,131 | 1,845 | 700 | | | Non-prefixed global variable |
| #68 | MasterStudy LMS WordPress Plugin – for Online Courses and Education | 22 | 1,444 | 4,879 | 10k+ | | | Non-prefixed global variable |
| #69 | Search Atlas SEO – Premier SEO Plugin for One-Click WP Publishing & Integrated AI Optimization | 22 | 1,359 | 2,800 | 8k+ | | | Output is not escaped |
| #70 | Motors – Car Dealership & Classified Listings Plugin | 22 | 5,391 | 6,082 | 9k+ | | | Text Domain Mismatch |
| #71 | MultiParcels Shipping For WooCommerce | 22 | 242 | 422 | 4k+ | | | Request data is not unslashed |
| #72 | Smart Popup by Supsystic | 22 | 3,028 | 439 | 10k+ | | | Non Singular String Literal Domain |
| #73 | Premium Addons for Elementor – Elementor Templates, Widgets & MCP Tools | 22 | 200 | 1,152 | 600k+ | | | Non-prefixed hook name |
| #74 | Quick Contact Form | 22 | 260 | 623 | 1k+ | | | Non-prefixed function |
| #75 | Seraphinite Accelerator | 22 | 595 | 255 | 50k+ | | | Output is not escaped |
| #76 | ShortPixel Image Optimizer – Optimize Images, Convert WebP & AVIF | 22 | 1,044 | 800 | 300k+ | | | Non-prefixed global variable |
| #77 | SNS Count Cache | 22 | 918 | 120 | 7k+ | | | Non Singular String Literal Domain |
| #78 | SSL Zen — SSL Certificate Installer & HTTPS Redirects | 22 | 751 | 1,605 | 10k+ | | | Non-prefixed global variable |
| #79 | Customize Feeds for Twitter | 22 | 92 | 171 | 4k+ | | | Non-prefixed global variable |
| #80 | RapidLoad AI – Optimize Web Vitals Automatically | 22 | 81 | 840 | 700 | | | Nonce verification recommended |
| #81 | Welcart e-Commerce | 22 | 10,366 | 10,903 | 10k+ | | | Text Domain Mismatch |
| #82 | WCFM Marketplace – Multivendor Marketplace for WooCommerce | 22 | 1,953 | 2,108 | 10k+ | | | Non-prefixed global variable |
| #83 | WCFM Membership – WooCommerce Memberships for Multivendor Marketplace | 22 | 559 | 675 | 10k+ | | | Non-prefixed global variable |
| #84 | Peach Payments Gateway | 22 | 335 | 144 | 1k+ | | | Non Singular String Literal Domain |
| #85 | Paysera Payment Gateway for WooCommerce | 22 | 1,870 | 198 | 7k+ | | | Exception output is not escaped |
| #86 | Simple Shopping Cart | 22 | 800 | 541 | 10k+ | | | Unsafe printing function |
| #87 | WP Express Checkout (Fast Payments via PayPal & Stripe) | 22 | 591 | 627 | 1k+ | | | Output is not escaped |
| #88 | File Manager | 22 | 740 | 520 | 1m+ | | | Unsafe printing function |
| #89 | WP Fusion Lite – Marketing Automation and CRM Integration for WordPress | 22 | 276 | 683 | 5k+ | | | Nonce verification recommended |
| #90 | SchedulePress – Auto Post & Publish, Auto Social Share, Schedule Posts with Editorial Calendar & Missed Schedule Post Publisher | 22 | 310 | 249 | 10k+ | | | Output is not escaped |
| #91 | NotifSMS – SMS Notifications OTP & 2FA for WordPress & WooCommerce | 22 | 1,353 | 1,412 | 1k+ | | | Non-prefixed global variable |
| #92 | WP-WebAuthn | 22 | 957 | 396 | 2k+ | | | Exception output is not escaped |
| #93 | WPSSO Core – Complete Schema Markup and Meta Tags | 22 | 1,408 | 414 | 4k+ | | | Missing Translators Comment |
| #94 | Affiliate Super Assistent | 23 | 1,280 | 267 | 1k+ | | | Text Domain Mismatch |
| #95 | BlossomThemes Email Newsletter | 23 | 337 | 239 | 20k+ | | | Output is not escaped |
| #96 | Classified Listing – AI-Powered Classified ads & Business Directory | 23 | 152 | 2,158 | 9k+ | | | Non-prefixed global variable |
| #97 | RepairBuddy – Repair Shop CRM & Booking Plugin for WordPress | 23 | 922 | 3,803 | 500 | | | Request data is not unslashed |
| #98 | Content Egg – Affiliate Product Importer & Price Comparison | 23 | 1,532 | 1,385 | 10k+ | | | Non-prefixed global variable |
| #99 | Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe | 23 | 9,396 | 26,680 | 1k+ | | | Non-prefixed global variable |
| #100 | DK PDF – WordPress PDF Generator | 23 | 744 | 335 | 3k+ | | | Exception output is not escaped |