| #1 | WPtouch – Make your WordPress Website Mobile-Friendly | 17 | 1,466 | 325 | 50k+ | | Text Domain Mismatch |
| #2 | Podlove Podcast Publisher | 18 | 2,326 | 1,429 | 3k+ | | Output is not escaped |
| #3 | Property Hive | 18 | 1,957 | 6,027 | 3k+ | | Missing nonce verification |
| #4 | WP Import Export Lite | 18 | 738 | 979 | 40k+ | | Non-prefixed global variable |
| #5 | Element Pack – Widgets, Templates & Addons for Elementor | 19 | 9,448 | 517 | 100k+ | | Text Domain Mismatch |
| #6 | Download Monitor | 19 | 425 | 1,364 | 80k+ | | Non-prefixed hook name |
| #7 | Event Organiser | 19 | 1,106 | 544 | 20k+ | | Text Domain Mismatch |
| #8 | Membership Plugin – Kadence Memberships | 19 | 5,082 | 2,982 | 9k+ | | Text Domain Mismatch |
| #9 | BetterDocs – AI Documentation, Knowledge Base, Docs, Wikis, FAQ with Chatbot | 20 | 508 | 1,406 | 30k+ | | Non-prefixed global variable |
| #10 | GiveWP – Donation Plugin and Fundraising Platform | 20 | 3,435 | 3,580 | 100k+ | | Output is not escaped |
| #11 | Link Library | 20 | 1,941 | 1,397 | 10k+ | | Unsafe printing function |
| #12 | MAS Videos | 20 | 519 | 1,693 | 1k+ | | Non-prefixed global variable |
| #13 | Nimble Page Builder | 20 | 1,591 | 1,684 | 30k+ | | Missing Arg Domain |
| #14 | Powered Cache – Caching and Optimization for WordPress – Easily Improve PageSpeed & Web Vitals Score | 20 | 147 | 231 | 3k+ | | Exception output is not escaped |
| #15 | bbPress | 21 | 929 | 3,672 | 100k+ | | Non-prefixed function |
| #16 | Smart Grid-Layout Design for Contact Form 7 | 21 | 1,126 | 734 | 10k+ | | Output is not escaped |
| #17 | EventPrime – Events Calendar, Bookings and Tickets | 21 | 872 | 4,297 | 7k+ | | Non-prefixed global variable |
| #18 | LA-Studio Element Kit for Elementor | 21 | 8,390 | 1,964 | 10k+ | | Text Domain Mismatch |
| #19 | MailChimp Subscribe Form, Optin Builder, PopUp Builder, Form Builder | 21 | 1,133 | 3,011 | 2k+ | | Non-prefixed global variable |
| #20 | MotoPress Hotel Booking | 21 | 3,061 | 1,037 | 10k+ | | Text Domain Mismatch |
| #21 | Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program – myCred | 21 | 1,469 | 3,333 | 10k+ | | Non-prefixed global variable |
| #22 | Landing Page Builder – Coming Soon page, Maintenance Mode, Lead Page, WordPress Landing Pages | 21 | 1,173 | 2,983 | 9k+ | | Non-prefixed global variable |
| #23 | PublishPress Planner – Editorial Calendar, Marketing Content, Kanban Board | 21 | 603 | 890 | 6k+ | | Output is not escaped |
| #24 | Royal Addons for Elementor – Addons and Templates Kit for Elementor | 21 | 13,011 | 2,530 | 600k+ | | Text Domain Mismatch |
| #25 | Testerwp ecommerce companion | 21 | 811 | 436 | 1k+ | | Text Domain Mismatch |
| #26 | ThirstyAffiliates – Affiliate Links, Link Branding, Link Tracking & Marketing Plugin | 21 | 190 | 660 | 30k+ | | Non-prefixed global variable |
| #27 | WCFM – Frontend Manager for WooCommerce | 21 | 4,721 | 5,067 | 20k+ | | Non-prefixed global variable |
| #28 | Booster for WooCommerce – PDF Invoices, Abandoned Cart, Variation Swatches & 100+ Tools | 21 | 786 | 3,395 | 30k+ | | Non-prefixed global variable |
| #29 | WP phpMyAdmin | 21 | 4,528 | 6,435 | 50k+ | | Missing Arg Domain |
| #30 | Advanced Classifieds & Directory Pro | 22 | 1,229 | 3,511 | 2k+ | | Non-prefixed global variable |
| #31 | Knowledge Base documentation & wiki plugin – BasePress Docs | 22 | 671 | 1,767 | 2k+ | | Non-prefixed global variable |
| #32 | WP Customer Area | 22 | 3,308 | 941 | 10k+ | | Text Domain Mismatch |
| #33 | Data Tables Generator by Supsystic | 22 | 156 | 144 | 10k+ | | Exception output is not escaped |
| #34 | Download Manager | 22 | 2,290 | 1,301 | 100k+ | | Output is not escaped |
| #35 | Estatik Real Estate Plugin | 22 | 3,049 | 325 | 10k+ | | Text Domain Mismatch |
| #36 | Events Manager – Calendar, Bookings, Tickets, and more! | 22 | 4,722 | 5,621 | 70k+ | | Output is not escaped |
| #37 | Falang multilanguage for WordPress | 22 | 716 | 769 | 1k+ | | Output is not escaped |
| #38 | Finale Lite – Sales Countdown Timer & Discount for WooCommerce | 22 | 1,031 | 451 | 4k+ | | Output is not escaped |
| #39 | Five Star Restaurant Menu and Food Ordering | 22 | 752 | 609 | 5k+ | | Output is not escaped |
| #40 | GeoDirectory – WP Business Directory Plugin and Classified Listings Directory | 22 | 4,462 | 3,972 | 10k+ | | Output is not escaped |
| #41 | HeadSpace2 SEO | 22 | 940 | 360 | 3k+ | | Text Domain Mismatch |
| #42 | IMPress for IDX Broker | 22 | 1,085 | 636 | 7k+ | | Text Domain Mismatch |
| #43 | Számlázz.hu integráció WooCommerce-hez | 22 | 1,169 | 460 | 7k+ | | Text Domain Mismatch |
| #44 | InfiniteWP Client | 22 | 2,286 | 1,812 | 200k+ | | Exception output is not escaped |
| #45 | LearnPress – WordPress LMS Plugin for Create and Sell Online Courses | 22 | 2,361 | 3,384 | 70k+ | | Non-prefixed global variable |
| #46 | Motors – Car Dealership & Classified Listings Plugin | 22 | 5,340 | 5,958 | 9k+ | | Text Domain Mismatch |
| #47 | Product Catalog Feed by PixelYourSite | 22 | 581 | 357 | 8k+ | | Output is not escaped |
| #48 | Seraphinite Accelerator | 22 | 594 | 255 | 50k+ | | Output is not escaped |
| #49 | Slim Jetpack | 22 | 2,586 | 1,947 | 2k+ | | Text Domain Mismatch |
| #50 | NextScripts: Social Networks Auto-Poster | 22 | 2,408 | 1,133 | 30k+ | | Output is not escaped |