| #1 | JetBackup – Backup, Restore & Migrate | 10 | 1,563 | 149 | 200k+ | | | Exception output is not escaped |
| #2 | Membership Plugin – Kadence Memberships | 19 | 5,082 | 2,982 | 9k+ | | | Text Domain Mismatch |
| #3 | Leaky Paywall | 20 | 322 | 789 | 600 | | | Nonce verification recommended |
| #4 | Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction | 21 | 1,953 | 5,297 | 10k+ | | | Non-prefixed hook name |
| #5 | Five Star Restaurant Reservations – WordPress Booking Plugin | 21 | 1,101 | 1,159 | 10k+ | | | Output is not escaped |
| #6 | Seamless Donations is Sunset | 21 | 600 | 514 | 2k+ | | | Text Domain Mismatch |
| #7 | SeatReg | 21 | 312 | 1,637 | 400 | | | Missing nonce verification |
| #8 | Accept Stripe Payments | 21 | 373 | 892 | 20k+ | | | Missing nonce verification |
| #9 | Five Star Restaurant Menu and Food Ordering | 22 | 754 | 610 | 5k+ | | | Output is not escaped |
| #10 | FunnelKit Payment Gateway for Stripe WooCommerce | 22 | 244 | 321 | 20k+ | | | Input is not sanitized |
| #11 | WCFM Marketplace – Multivendor Marketplace for WooCommerce | 22 | 1,950 | 2,108 | 10k+ | | | Non-prefixed global variable |
| #12 | WCFM Membership – WooCommerce Memberships for Multivendor Marketplace | 22 | 559 | 675 | 10k+ | | | Non-prefixed global variable |
| #13 | Simple Shopping Cart | 22 | 800 | 541 | 10k+ | | | Unsafe printing function |
| #14 | WP Express Checkout (Fast Payments via PayPal & Stripe) | 22 | 591 | 627 | 1k+ | | | Output is not escaped |
| #15 | Easy Digital Downloads – eCommerce Payments and Subscriptions made easy | 23 | 3,719 | 10,280 | 40k+ | | | Non-prefixed namespace |
| #16 | PowerPress Podcasting plugin by Blubrry | 23 | 4,818 | 2,452 | 20k+ | | | Output is not escaped |
| #17 | Stripe Payment Forms by WP Full Pay – Accept Credit Card Payments, Donations & Subscriptions | 23 | 1,113 | 1,863 | 9k+ | | | Output is not escaped |
| #18 | Backuply – Backup, Restore, Migrate and Clone | 24 | 709 | 555 | 600k+ | | | Non-prefixed global variable |
| #19 | Barcode Scanner (+Mobile App) – Inventory manager, Order fulfillment system, POS (Point of Sale) | 24 | 1,865 | 1,089 | 1k+ | | | Text Domain Mismatch |
| #20 | Business Essentials for Contact Form 7 | 24 | 674 | 403 | 8k+ | | | Text Domain Mismatch |
| #21 | Forminator Forms – Contact Form, Payment Form & Custom Form Builder | 24 | 820 | 1,326 | 600k+ | | | Non-prefixed global variable |
| #22 | RealHomes Memberships | 24 | 519 | 254 | 1k+ | | | Non Singular String Literal Domain |
| #23 | PixelYourSite – Your smart PIXEL (TAG) & API Manager | 24 | 1,232 | 2,433 | 500k+ | | | Non-prefixed namespace |
| #24 | Simple Membership | 24 | 2,305 | 1,753 | 40k+ | | | Unsafe printing function |
| #25 | Stripe Payment Forms by WP Simple Pay – Accept Credit Card Payments + Subscriptions with Stripe | 24 | 634 | 652 | 9k+ | | | Exception output is not escaped |
| #26 | WP User Manager – User Profile Builder & Membership | 24 | 787 | 539 | 10k+ | | | Exception output is not escaped |
| #27 | Events Made Easy | 25 | 525 | 6,432 | 1k+ | | | Non-prefixed function |
| #28 | Tamara Checkout | 25 | 601 | 228 | 2k+ | | | Exception output is not escaped |
| #29 | SlimStat Analytics | 25 | 1,177 | 870 | 70k+ | | | Exception output is not escaped |
| #30 | WP Statistics – Simple, privacy-friendly Google Analytics alternative | 25 | 612 | 2,469 | 600k+ | | | Non-prefixed global variable |
| #31 | Gravity Forms + Stripe | 27 | 368 | 210 | 600 | | | Output is not escaped |
| #32 | Accept PayPal & Stripe with Subscriptions for WooCommerce | 30 | 105 | 209 | 3k+ | | | Exception output is not escaped |
| #33 | RealHomes Stripe Payments | 32 | 201 | 33 | 500 | | | Exception output is not escaped |
| #34 | Contact Form 7 – PayPal & Stripe Add-on | 34 | 93 | 233 | 7k+ | | | Exception output is not escaped |
| #35 | Stripe Tax – Sales tax automation for WooCommerce | 36 | 97 | 61 | 30k+ | | | Exception output is not escaped |
| #36 | FundEngine – Donation and Crowdfunding Platform | 37 | 89 | 9 | 1k+ | | | Exception output is not escaped |