| #51 | RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login | 22 | 3,654 | 5,061 | 8k+ | | Non-prefixed global variable |
| #52 | Data Tables Generator by Supsystic | 22 | 156 | 144 | 10k+ | | Exception output is not escaped |
| #53 | Falang multilanguage for WordPress | 22 | 716 | 769 | 1k+ | | Output is not escaped |
| #54 | File Manager Pro – Filester | 22 | 565 | 391 | 100k+ | | Request data is not unslashed |
| #55 | FireBox Popups – Increase Sales and Grow Your Email List | 22 | 153 | 812 | 7k+ | | Non-prefixed global variable |
| #56 | Anti-Malware Security and Brute-Force Firewall | 22 | 544 | 965 | 100k+ | | Output is not escaped |
| #57 | HeadSpace2 SEO | 22 | 940 | 360 | 3k+ | | Text Domain Mismatch |
| #58 | Számlázz.hu integráció WooCommerce-hez | 22 | 1,169 | 460 | 7k+ | | Text Domain Mismatch |
| #59 | InfiniteWP Client | 22 | 2,286 | 1,812 | 200k+ | | Exception output is not escaped |
| #60 | MailOptin – Popup, Optin Forms & Email Newsletters for Mailchimp, HubSpot, AWeber Etc. | 22 | 2,619 | 2,453 | 10k+ | | Output is not escaped |
| #61 | Motors – Car Dealership & Classified Listings Plugin | 22 | 5,340 | 5,958 | 9k+ | | Text Domain Mismatch |
| #62 | Newsletters | 22 | 2,968 | 2,248 | 2k+ | | Text Domain Mismatch |
| #63 | PAYCOMET for WooCommerce | 22 | 1,206 | 423 | 2k+ | | Text Domain Mismatch |
| #64 | Smart Popup by Supsystic | 22 | 3,172 | 503 | 10k+ | | Non Singular String Literal Domain |
| #65 | Product Catalog Feed by PixelYourSite | 22 | 581 | 357 | 8k+ | | Output is not escaped |
| #66 | Quick Contact Form | 22 | 260 | 623 | 1k+ | | Non-prefixed function |
| #67 | RabbitLoader Cache: Optimize your Website for Speed | 22 | 241 | 163 | 2k+ | | Output is not escaped |
| #68 | Seraphinite Accelerator | 22 | 594 | 255 | 50k+ | | Output is not escaped |
| #69 | ShortPixel Image Optimizer – Optimize Images, Convert WebP & AVIF | 22 | 1,044 | 799 | 300k+ | | Non-prefixed global variable |
| #70 | SNS Count Cache | 22 | 918 | 120 | 8k+ | | Non Singular String Literal Domain |
| #71 | NextScripts: Social Networks Auto-Poster | 22 | 2,408 | 1,133 | 30k+ | | Output is not escaped |
| #72 | SSL Zen — SSL Certificate Installer & HTTPS Redirects | 22 | 779 | 1,575 | 10k+ | | Non-prefixed global variable |
| #73 | Theme Editor | 22 | 798 | 685 | 50k+ | | Output is not escaped |
| #74 | Search & Replace Everything – Quick and Easy Way to Find and Replace Text, Links | 22 | 1,044 | 1,797 | 20k+ | | Non-prefixed global variable |
| #75 | URL Shortify – Simple and Easy URL Shortener | 22 | 1,520 | 2,689 | 10k+ | | Non-prefixed global variable |
| #76 | Welcart e-Commerce | 22 | 10,377 | 10,896 | 10k+ | | Text Domain Mismatch |
| #77 | WooCommerce | 22 | 1,355 | 6,129 | 7m+ | | Non-prefixed global variable |
| #78 | Asset CleanUp: Page Speed Booster | 22 | 2,030 | 2,485 | 100k+ | | Non-prefixed global variable |
| #79 | WP Easy Pay – Payment and Donation form Builder for Square | 22 | 893 | 1,828 | 1k+ | | Non-prefixed global variable |
| #80 | WP Express Checkout (Fast Payments via PayPal & Stripe) | 22 | 591 | 627 | 1k+ | | Output is not escaped |
| #81 | File Manager | 22 | 740 | 520 | 1m+ | | Unsafe printing function |
| #82 | WP Fusion Lite – Marketing Automation and CRM Integration for WordPress | 22 | 276 | 683 | 5k+ | | Nonce verification recommended |
| #83 | WP Umbrella: Update Backup Restore & Monitoring | 22 | 915 | 905 | 70k+ | | Exception output is not escaped |
| #84 | Wp-Insert | 22 | 267 | 301 | 10k+ | | Output is not escaped |
| #85 | WP Super Minify • Minify, Compress and Cache HTML, CSS & JavaScript | 22 | 164 | 257 | 9k+ | | Non-prefixed constant |
| #86 | WP-WebAuthn | 22 | 957 | 396 | 2k+ | | Exception output is not escaped |
| #87 | WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell | 22 | 5,996 | 2,790 | 5k+ | | Text Domain Mismatch |
| #88 | WPSSO Core – Complete Schema Markup and Meta Tags | 22 | 1,407 | 412 | 5k+ | | Missing Translators Comment |
| #89 | YaySMTP – WP Mail SMTP with Email Logs, Tracking & Reports | 22 | 654 | 435 | 10k+ | | Exception output is not escaped |
| #90 | Recipe Cards For Your Food Blog from Zip Recipes | 22 | 1,126 | 1,731 | 1k+ | | Non-prefixed global variable |
| #91 | AI Engine – The Chatbot, AI Framework & MCP for WordPress | 23 | 413 | 559 | 100k+ | | error log error log |
| #92 | Affiliate Super Assistent | 23 | 1,280 | 267 | 2k+ | | Text Domain Mismatch |
| #93 | B2BKing — Ultimate WooCommerce B2B and Wholesale Plugin — Wholesale Prices, Bulk Order Form & More | 23 | 1,347 | 409 | 10k+ | | Text Domain Mismatch |
| #94 | BlossomThemes Email Newsletter | 23 | 337 | 239 | 20k+ | | Output is not escaped |
| #95 | Business Directory Plugin – Easy Listing Directories for WordPress | 23 | 611 | 1,058 | 10k+ | | Non-prefixed global variable |
| #96 | Captivate Sync | 23 | 174 | 557 | 1k+ | | Non-prefixed global variable |
| #97 | WPBot – AI ChatBot for Live Support, Lead Generation, AI Services | 23 | 264 | 1,038 | 5k+ | | Non-prefixed global variable |
| #98 | Content Egg – Affiliate Product Importer & Price Comparison | 23 | 1,231 | 1,257 | 10k+ | | Non-prefixed global variable |
| #99 | DK PDF – WordPress PDF Generator | 23 | 744 | 335 | 3k+ | | Exception output is not escaped |
| #100 | Easy Digital Downloads – eCommerce Payments and Subscriptions made easy | 23 | 3,723 | 10,283 | 40k+ | | Non-prefixed namespace |