| #101 | WP BackItUp Community Edition | 23 | 257 | 989 | 6k+ | | Non-prefixed global variable |
| #102 | Clone | 23 | 244 | 262 | 40k+ | | Output is not escaped |
| #103 | WP Compress – Instant Performance & Speed Optimization | 23 | 3,053 | 2,384 | 10k+ | | Non Singular String Literal Domain |
| #104 | WP Migrate Lite – Migration Made Easy | 23 | 368 | 254 | 200k+ | | Exception output is not escaped |
| #105 | Shield Security – Smart Bot Blocking, Brute-Force Login Protection & File Scanning | 23 | 1,118 | 202 | 40k+ | | Missing Translators Comment |
| #106 | WP STAGING – WordPress Backup, Restore & Migration | 23 | 1,414 | 1,327 | 100k+ | | Non-prefixed global variable |
| #107 | WP Ultimate CSV Importer – WordPress Import & Export for CSV, XML & Excel | 23 | 1,119 | 3,516 | 20k+ | | Interpolated SQL is not prepared |
| #108 | WP Webhooks – Automate repetitive tasks by creating powerful automation workflows directly within WordPress | 23 | 4,376 | 890 | 20k+ | | Output is not escaped |
| #109 | 404 Solution | 24 | 483 | 1,087 | 10k+ | | Request data is not unslashed |
| #110 | A2 Optimized WP – Turbocharge and secure your WordPress site | 24 | 271 | 231 | 60k+ | | Missing Arg Domain |
| #111 | Academy LMS – WordPress LMS Plugin for Complete eLearning Solution | 24 | 162 | 787 | 2k+ | | Non-prefixed global variable |
| #112 | AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress | 24 | 5,230 | 1,464 | 7k+ | | Output is not escaped |
| #113 | Backuply – Backup, Restore, Migrate and Clone | 24 | 704 | 551 | 700k+ | | Non-prefixed global variable |
| #114 | Product Feed Manager For WooCommerce – Sell on 200+ Online Marketplaces | 24 | 2,248 | 3,338 | 10k+ | | slow db query meta key |
| #115 | Bulk Edit Categories and Tags – Create Thousands Quickly on the Editor | 24 | 1,025 | 984 | 4k+ | | Text Domain Mismatch |
| #116 | Bulk Edit and Create User Profiles – WP Sheet Editor | 24 | 979 | 969 | 1k+ | | Text Domain Mismatch |
| #117 | Calculated Fields Form | 24 | 243 | 525 | 40k+ | | Non-prefixed global variable |
| #118 | SilentShield – Captcha & Anti-Spam for WordPress (CF7, WPForms, Elementor, WooCommerce) | 24 | 236 | 214 | 10k+ | | Database parameter is not escaped |
| #119 | Complianz – GDPR/CCPA Cookie Consent | 24 | 487 | 403 | 1m+ | | Missing Arg Domain |
| #120 | Contact Form by Supsystic | 24 | 1,913 | 633 | 6k+ | | Non Singular String Literal Domain |
| #121 | Customer Reviews for WooCommerce | 24 | 2,206 | 2,443 | 80k+ | | Output is not escaped |
| #122 | Defender Security – Malware Scanner, Login Security & Firewall | 24 | 306 | 518 | 80k+ | | Non-prefixed namespace |
| #123 | WP Delicious – Recipe Plugin for Food Bloggers (formerly Delicious Recipes) | 24 | 845 | 2,665 | 4k+ | | Non-prefixed global variable |
| #124 | Doubly – Cross Domain Copy Paste for WordPress | 24 | 252 | 55 | 10k+ | | Output is not escaped |
| #125 | Easy Form Builder by WhiteStudio — Drag & Drop Form Builder | 24 | 193 | 363 | 1k+ | | Nonce verification recommended |
| #126 | Email Subscribers & Newsletters – Email Marketing, Post Notifications & Newsletter Plugin for WordPress | 24 | 652 | 1,495 | 60k+ | | Non-prefixed hook name |
| #127 | Import and export users and customers | 24 | 1,046 | 356 | 70k+ | | Unsafe printing function |
| #128 | Koko Analytics – Privacy-Friendly WordPress Analytics | 24 | 161 | 280 | 60k+ | | Short PHP open tag found |
| #129 | LatePoint – Calendar Booking Plugin for Appointments and Events | 24 | 1,837 | 931 | 100k+ | | Output is not escaped |
| #130 | LearnPress – Backup & Migration Tool | 24 | 385 | 469 | 5k+ | | Output is not escaped |
| #131 | LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes | 24 | 414 | 1,176 | 10k+ | | Non-prefixed global variable |
| #132 | Media Library Folders | 24 | 889 | 807 | 10k+ | | Text Domain Mismatch |
| #133 | My Agile Privacy® – CMP, Cookie Consent & Privacy Tools | 24 | 1,170 | 674 | 7k+ | | Text Domain Mismatch |
| #134 | Database Manager – WP Adminer | 24 | 1,005 | 2,752 | 20k+ | | Non-prefixed global variable |
| #135 | PixelYourSite – Your smart PIXEL (TAG) & API Manager | 24 | 1,160 | 2,407 | 500k+ | | Non-prefixed namespace |
| #136 | Pz-LinkCard | 24 | 951 | 1,581 | 20k+ | | Non-prefixed global variable |
| #137 | Security Plugin, Firewall & Malware Scanner with Auto Removal | 24 | 1,192 | 770 | 30k+ | | Output is not escaped |
| #138 | ShortPixel Adaptive Images – WebP, AVIF, CDN, Image Optimization | 24 | 926 | 322 | 10k+ | | Output is not escaped |
| #139 | SiteGuard WP Plugin | 24 | 329 | 333 | 500k+ | | Output is not escaped |
| #140 | Support Genix – Helpdesk, AI Chatbot, Knowledge Base & Customer Support Ticketing System | 24 | 589 | 897 | 2k+ | | Non-prefixed global variable |
| #141 | Tainacan | 24 | 156 | 598 | 1k+ | | Direct Query |
| #142 | Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin | 24 | 938 | 2,935 | 200k+ | | Non-prefixed global variable |
| #143 | Unlimited Elements For Elementor | 24 | 710 | 2,093 | 300k+ | | Non-prefixed global variable |
| #144 | User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder | 24 | 664 | 3,318 | 60k+ | | Non-prefixed global variable |
| #145 | Vimeography: Vimeo Video Gallery WordPress Plugin | 24 | 98 | 212 | 5k+ | | Nonce verification recommended |
| #146 | Bulk Edit Products for WooCommerce – WP Sheet Editor | 24 | 941 | 936 | 10k+ | | Text Domain Mismatch |
| #147 | WPML Multilingual & Multicurrency for WooCommerce | 24 | 1,453 | 1,618 | 100k+ | | SQL query is not prepared |
| #148 | WP-Appbox | 24 | 418 | 390 | 2k+ | | Missing Arg Domain |
| #149 | WP Fastest Cache – WordPress Cache Plugin | 24 | 541 | 753 | 1m+ | | Unsafe printing function |
| #150 | Iptanus File Upload | 24 | 509 | 1,325 | 10k+ | | Non-prefixed function |