| #51 | Duplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More | 21 | 2,572 | 1,277 | 1m+ | | | Output is not escaped |
| #52 | Envo Extra | 21 | 878 | 600 | 20k+ | | | Text Domain Mismatch |
| #53 | EventPrime – Events Calendar, Bookings and Tickets | 21 | 873 | 4,308 | 7k+ | | | Non-prefixed global variable |
| #54 | FileOrganizer – WordPress File Manager | 21 | 536 | 241 | 200k+ | | | unlink unlink |
| #55 | Filter Everything — WordPress & WooCommerce Filters | 21 | 643 | 933 | 50k+ | | | Non-prefixed global variable |
| #56 | Mergado Pack | 21 | 2,323 | 588 | 700 | | | Output is not escaped |
| #57 | Modular DS: Monitor, update, and backup multiple websites | 21 | 159 | 82 | 40k+ | | | Exception output is not escaped |
| #58 | Mooberry Book Manager | 21 | 1,040 | 399 | 1k+ | | | Text Domain Mismatch |
| #59 | MotoPress Hotel Booking | 21 | 3,067 | 1,037 | 10k+ | | | Text Domain Mismatch |
| #60 | PublishPress Planner – Editorial Calendar, Marketing Content, Kanban Board | 21 | 603 | 890 | 6k+ | | | Output is not escaped |
| #61 | Razorpay Quick Payments | 21 | 399 | 63 | 2k+ | | | Exception output is not escaped |
| #62 | Five Star Restaurant Reservations – WordPress Booking Plugin | 21 | 1,101 | 1,159 | 10k+ | | | Output is not escaped |
| #63 | Royal Addons for Elementor – Addons and Templates Kit for Elementor | 21 | 13,011 | 2,530 | 600k+ | | | Text Domain Mismatch |
| #64 | SeatReg | 21 | 312 | 1,637 | 400 | | | Missing nonce verification |
| #65 | Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin | 21 | 1,064 | 2,975 | 40k+ | | | Direct Query |
| #66 | UPC/EAN/GTIN Barcode Generator/Importer | 21 | 776 | 311 | 500 | | | Exception output is not escaped |
| #67 | Buckaroo Woocommerce Payments Plugin | 21 | 638 | 321 | 2k+ | | | Exception output is not escaped |
| #68 | Wise Chat | 21 | 470 | 506 | 5k+ | | | Output is not escaped |
| #69 | WooCommerce | 21 | 1,343 | 6,212 | 7m+ | | | Non-prefixed global variable |
| #70 | Booster for WooCommerce – PDF Invoices, Abandoned Cart, Variation Swatches & 100+ Tools | 21 | 786 | 3,393 | 30k+ | | | Non-prefixed global variable |
| #71 | PPOM – Product Addons & Custom Fields for WooCommerce | 21 | 336 | 1,319 | 20k+ | | | Non-prefixed global variable |
| #72 | Wordfence Security – Firewall, Malware Scan, and Login Security | 21 | 1,592 | 2,973 | 5m+ | | | Output is not escaped |
| #73 | WP Compress – Instant Performance & Speed Optimization | 21 | 3,367 | 3,253 | 10k+ | | | Non Singular String Literal Domain |
| #74 | WP-Lister Lite for eBay | 21 | 6,696 | 5,128 | 2k+ | | | Output is not escaped |
| #75 | WP phpMyAdmin | 21 | 4,528 | 6,435 | 50k+ | | | Missing Arg Domain |
| #76 | WP Extended – The Ultimate WordPress Toolkit | 21 | 1,253 | 398 | 600 | | | Non Singular String Literal Domain |
| #77 | WebTotem Security | 21 | 1,110 | 213 | 900 | | | Text Domain Mismatch |
| #78 | Ajax Load More – Infinite Scroll, Load More, & Lazy Load | 22 | 641 | 592 | 30k+ | | | Unsafe printing function |
| #79 | All-in-One Video Gallery | 22 | 911 | 2,892 | 20k+ | | | Non-prefixed global variable |
| #80 | ANAC XML Bandi di Gara | 22 | 294 | 244 | 500 | | | Output is not escaped |
| #81 | Borderless – Addons and Templates for Elementor | 22 | 438 | 1,388 | 5k+ | | | Non-prefixed global variable |
| #82 | Captcha by BestWebSoft – Advanced Spam Protection, Math & OCR-Friendly Captcha for Site Forms | 22 | 493 | 295 | 10k+ | | | Text Domain Mismatch |
| #83 | Clearfy Cache – WordPress optimization plugin, Minify HTML, CSS & JS, Defer | 22 | 2,854 | 1,269 | 50k+ | | | Text Domain Mismatch |
| #84 | Code Profiler – WordPress Performance Profiling and Debugging Made Easy | 22 | 265 | 400 | 8k+ | | | Non-prefixed global variable |
| #85 | RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login | 22 | 3,652 | 5,134 | 8k+ | | | Non-prefixed global variable |
| #86 | Data Tables Generator by Supsystic | 22 | 164 | 198 | 10k+ | | | Exception output is not escaped |
| #87 | Database Access with Adminer | 22 | 983 | 2,553 | 1k+ | | | Non-prefixed global variable |
| #88 | Directorist: AI-Powered Business Directory, Listings & Classified Ads | 22 | 560 | 2,202 | 20k+ | | | Non-prefixed global variable |
| #89 | Download Manager | 22 | 2,513 | 1,459 | 100k+ | | | Output is not escaped |
| #90 | Dynamic QR Code – generator | 22 | 238 | 208 | 5k+ | | | Missing direct file access protection |
| #91 | E2Pdf – Export Pdf Tool for WordPress | 22 | 1,081 | 847 | 10k+ | | | Unsafe printing function |
| #92 | easyReservations | 22 | 5,307 | 2,480 | 800 | | | Text Domain Mismatch |
| #93 | Ebook Store | 22 | 410 | 1,054 | 700 | | | Non-prefixed global variable |
| #94 | Events Manager – Calendar, Bookings, Tickets, and more! | 22 | 4,716 | 5,690 | 70k+ | | | Output is not escaped |
| #95 | FACTO – Facturación Electrónica | 22 | 244 | 423 | 400 | | | Request data is not unslashed |
| #96 | FireBox Popups – Increase Sales and Grow Your Email List | 22 | 157 | 826 | 7k+ | | | Non-prefixed global variable |
| #97 | GeoDirectory – WP Business Directory Plugin and Classified Listings Directory | 22 | 4,465 | 3,976 | 10k+ | | | Output is not escaped |
| #98 | Happy Addons for Elementor | 22 | 652 | 446 | 400k+ | | | Output is not escaped |
| #99 | Hesabfa Accounting | 22 | 467 | 718 | 500 | | | Text Domain Mismatch |
| #100 | Csomagpontok és Címkék WooCommerce-hez | 22 | 2,002 | 769 | 7k+ | | | Text Domain Mismatch |