| #101 | MediaPress | 23 | 904 | 583 | 3k+ | | | Output is not escaped |
| #102 | MPG – Multiple Page Generator, Bulk Landing Pages & Programmatic SEO | 23 | 492 | 604 | 2k+ | | | Missing nonce verification |
| #103 | Next Active Directory Integration | 23 | 683 | 284 | 2k+ | | | Exception output is not escaped |
| #104 | Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery | 23 | 2,154 | 1,027 | 300k+ | | | Text Domain Mismatch |
| #105 | NitroPack – Performance, Page Speed & Cache Plugin for Core Web Vitals, CDN & Image Optimization | 23 | 311 | 635 | 90k+ | | | Output is not escaped |
| #106 | Photo Gallery by 10Web – Mobile-Friendly Image Gallery | 23 | 4,157 | 1,553 | 100k+ | | | Output is not escaped |
| #107 | Security Plugin, Firewall & Malware Scanner with Auto Removal | 23 | 1,204 | 789 | 40k+ | | | Output is not escaped |
| #108 | Seraphinite Post .DOCX Source | 23 | 1,156 | 110 | 900 | | | Output is not escaped |
| #109 | Slider by 10Web – Responsive Image Slider | 23 | 5,814 | 976 | 10k+ | | | Output is not escaped |
| #110 | Travelpayouts | 23 | 761 | 114 | 6k+ | | | Output is not escaped |
| #111 | Unlimited Elements For Elementor | 23 | 711 | 2,101 | 300k+ | | | Non-prefixed global variable |
| #112 | Cart PDF for WooCommerce | 23 | 531 | 172 | 1k+ | | | Exception output is not escaped |
| #113 | Web Directory Free | 23 | 2,641 | 1,202 | 400 | | | Text Domain Mismatch |
| #114 | ManageWP Worker | 23 | 506 | 565 | 1m+ | | | Non-prefixed class |
| #115 | Worth The Read | 23 | 873 | 138 | 3k+ | | | Text Domain Mismatch |
| #116 | WP BackItUp Community Edition | 23 | 257 | 989 | 6k+ | | | Non-prefixed global variable |
| #117 | Clone | 23 | 244 | 262 | 40k+ | | | Output is not escaped |
| #118 | WP Free SSL | 23 | 735 | 1,345 | 1k+ | | | Non-prefixed global variable |
| #119 | WP-Lister Lite for Amazon | 23 | 3,061 | 4,177 | 800 | | | Output is not escaped |
| #120 | WP Migrate Lite – Migration Made Easy | 23 | 371 | 257 | 200k+ | | | Exception output is not escaped |
| #121 | Shield Security – Smart Bot Blocking, Brute-Force Login Protection & File Scanning | 23 | 1,118 | 202 | 30k+ | | | Missing Translators Comment |
| #122 | WP STAGING – WordPress Backups, Restore, Migration & Clone | 23 | 1,523 | 1,670 | 100k+ | | | Non-prefixed global variable |
| #123 | WP Ultimate CSV Importer – WordPress Import & Export for CSV, XML & Excel | 23 | 1,158 | 3,642 | 20k+ | | | Interpolated SQL is not prepared |
| #124 | WP Webhooks – Automate repetitive tasks by creating powerful automation workflows directly within WordPress | 23 | 4,380 | 888 | 20k+ | | | Output is not escaped |
| #125 | 1 Click Migration & Backup: Free WordPress Migration Plugin with Zero Downtime & Easy Clone | 24 | 140 | 193 | 400 | | | Direct Query |
| #126 | 404 Solution | 24 | 483 | 1,355 | 10k+ | | | Non-prefixed class |
| #127 | A2 Optimized WP – Turbocharge and secure your WordPress site | 24 | 271 | 231 | 60k+ | | | Missing Arg Domain |
| #128 | Backuply – Backup, Restore, Migrate and Clone | 24 | 711 | 556 | 600k+ | | | Non-prefixed global variable |
| #129 | Barcode Scanner (+Mobile App) – Inventory manager, Order fulfillment system, POS (Point of Sale) | 24 | 1,865 | 1,089 | 1k+ | | | Text Domain Mismatch |
| #130 | Product Feed Manager For WooCommerce – Sell on 200+ Online Marketplaces | 24 | 2,317 | 3,375 | 10k+ | | | slow db query meta key |
| #131 | Calculated Fields Form – AI Form Builder for WordPress – Contact, Payment, Quote, Quiz & More | 24 | 359 | 637 | 40k+ | | | Non-prefixed global variable |
| #132 | Kognetiks Chatbot for WordPress | 24 | 651 | 1,486 | 600 | | | Non-prefixed global variable |
| #133 | Church Admin | 24 | 1,556 | 4,200 | 800 | | | Direct Query |
| #134 | Complianz – GDPR/CCPA Cookie Consent | 24 | 398 | 370 | 1m+ | | | Missing Arg Domain |
| #135 | Contact Form by Supsystic | 24 | 1,764 | 613 | 6k+ | | | Non Singular String Literal Domain |
| #136 | Customer Reviews for WooCommerce | 24 | 2,202 | 2,441 | 80k+ | | | Output is not escaped |
| #137 | Defender Security – Malware Scanner, Login Security & Firewall | 24 | 550 | 593 | 80k+ | | | Non-prefixed namespace |
| #138 | WP Delicious – Recipe Plugin for Food Bloggers (formerly Delicious Recipes) | 24 | 845 | 2,643 | 4k+ | | | Non-prefixed global variable |
| #139 | Double Opt-In for Contact Form 7 – Secure, GDPR-Compliant Email Verification | 24 | 233 | 441 | 1k+ | | | Non-prefixed hook name |
| #140 | Doubly – Cross Domain Copy Paste for WordPress | 24 | 252 | 55 | 10k+ | | | Output is not escaped |
| #141 | Easy Form Builder by WhiteStudio – Drag & Drop Form Builder | 24 | 212 | 433 | 1k+ | | | Nonce verification recommended |
| #142 | Easy Optimizer – PageSpeed, Cache & Core Web Vitals (Unused CSS, Delay JS, Lazy Load) | 24 | 206 | 521 | 500 | | | Direct Query |
| #143 | Export WordPress Pages to Static HTML & PDF — Static Site Export | 24 | 509 | 304 | 4k+ | | | Text Domain Mismatch |
| #144 | F12 Profiler | 24 | 282 | 451 | 500 | | | Direct Query |
| #145 | Featured Post with thumbnail | 24 | 158 | 122 | 300 | | | Output is not escaped |
| #146 | Filr – Secure document library | 24 | 590 | 1,315 | 800 | | | Non-prefixed global variable |
| #147 | Formidable PRO2PDF | 24 | 218 | 477 | 1k+ | | | Non-prefixed global variable |
| #148 | Fuse Social Floating Sidebar | 24 | 1,838 | 1,578 | 10k+ | | | Non-prefixed global variable |
| #149 | GG Woo Feed for WooCommerce Shopping Feed on Google and Other Channels | 24 | 469 | 592 | 1k+ | | | Non-prefixed global variable |
| #150 | Import from YML | 24 | 97 | 306 | 400 | | | Non-prefixed global variable |