| #51 | Tutor LMS – eLearning and online course solution | 23 | 395 | 3,402 | 100k+ | | | Non-prefixed global variable |
| #52 | VK All in One Expansion Unit | 23 | 1,026 | 518 | 100k+ | | | Output is not escaped |
| #53 | ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin | 23 | 7,423 | 2,181 | 90k+ | | | Text Domain Mismatch |
| #54 | WP Crowdfunding | 23 | 199 | 1,629 | 2k+ | | | Non-prefixed global variable |
| #55 | WP Mega Menu | 23 | 992 | 792 | 8k+ | | | Non-prefixed global variable |
| #56 | Customer Support Ticket System & Helpdesk | 23 | 1,719 | 1,464 | 400 | | | Text Domain Mismatch |
| #57 | WPMobile.App | 23 | 2,983 | 1,527 | 3k+ | | | Output is not escaped |
| #58 | Academy LMS – WordPress LMS Plugin for Complete eLearning Solution | 24 | 162 | 787 | 2k+ | | | Non-prefixed global variable |
| #59 | Awesome Support – WordPress HelpDesk & Support Plugin | 24 | 225 | 1,239 | 6k+ | | | Non-prefixed global variable |
| #60 | Branda – White Label & Branding, Free Login Page Customizer | 24 | 3,174 | 820 | 20k+ | | | Text Domain Mismatch |
| #61 | RepairBuddy – Repair Shop CRM & Booking Plugin for WordPress | 24 | 828 | 3,665 | 500 | | | Request data is not unslashed |
| #62 | Conversios: Google Analytics (GA4), Google Ads, Conversion and Analytics Tracking for Multi-Channels | 24 | 107 | 1,461 | 10k+ | | | Non-prefixed global variable |
| #63 | Gallery by BestWebSoft – Customizable Image and Photo Galleries for WordPress | 24 | 536 | 324 | 10k+ | | | Text Domain Mismatch |
| #64 | HT Mega Addons for Elementor – Elementor Widgets & Template Builder | 24 | 10,894 | 440 | 70k+ | | | Text Domain Mismatch |
| #65 | My Agile Privacy® – CMP, Cookie Consent & Privacy Tools | 24 | 1,170 | 674 | 7k+ | | | Text Domain Mismatch |
| #66 | Product Catalog Simple | 24 | 1,555 | 1,982 | 1k+ | | | Output is not escaped |
| #67 | Products Compare for WooCommerce | 24 | 1,033 | 692 | 1k+ | | | Output is not escaped |
| #68 | Quick Event Manager | 24 | 152 | 388 | 1k+ | | | Non-prefixed function |
| #69 | RS WP Book Showcase – A Complete Book Catalogue & Library System | 24 | 910 | 343 | 1k+ | | | Text Domain Mismatch |
| #70 | GEO Plugin by Squirrly SEO | 24 | 1,196 | 224 | 30k+ | | | Missing Translators Comment |
| #71 | Templately – Elementor & Gutenberg Template Library: 6500+ Free & Pro Ready Templates And Cloud! | 24 | 167 | 222 | 400k+ | | | Nonce verification recommended |
| #72 | Yoast SEO – Advanced SEO with real-time guidance and built-in AI | 24 | 159 | 386 | 10m+ | | | Non-prefixed global variable |
| #73 | WP Travel – Ultimate Travel Booking System, Tour Management Engine | 24 | 226 | 1,951 | 4k+ | | | Non-prefixed hook name |
| #74 | WP Travel Engine – Tour Booking Plugin – Tour Operator Software | 24 | 2,010 | 5,688 | 20k+ | | | Non-prefixed global variable |
| #75 | Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress | 24 | 2,576 | 2,103 | 100k+ | | | Output is not escaped |
| #76 | WPAdverts – Classifieds Plugin | 24 | 1,308 | 496 | 5k+ | | | Output is not escaped |
| #77 | WpStream – Live Streaming, Video on Demand, Pay Per View | 24 | 1,712 | 740 | 4k+ | | | Text Domain Mismatch |
| #78 | FlatPM – Ad Manager, AdSense and Custom Code | 25 | 3,017 | 557 | 10k+ | | | Text Domain Mismatch |
| #79 | WP Fast Total Search – The Power of Indexed Search | 25 | 208 | 291 | 1k+ | | | Non-prefixed global variable |
| #80 | Genesis Club Lite | 25 | 513 | 317 | 900 | | | Output is not escaped |
| #81 | Solid Testimonials – Testimonial Slider, Video Testimonials & Customer Reviews | 25 | 645 | 1,585 | 1k+ | | | Non-prefixed global variable |
| #82 | HashBar – Announcement, Notification Bar & Popup Campaign | 25 | 2,718 | 610 | 8k+ | | | Text Domain Mismatch |
| #83 | Live Composer – Free WordPress Website Builder | 25 | 1,216 | 427 | 10k+ | | | Output is not escaped |
| #84 | My Calendar – Accessible Event Manager | 25 | 10 | 2,191 | 20k+ | | | Non-prefixed function |
| #85 | Sensei LMS – Online Courses, Quizzes, & Learning | 25 | 56 | 928 | 10k+ | | | Nonce verification recommended |
| #86 | SimpLy Gallery | 25 | 532 | 1,422 | 40k+ | | | Non-prefixed global variable |
| #87 | Tourfic – AI Powered Travel Booking, Hotel Booking & Car Rental WordPress Plugin | 25 | 119 | 2,700 | 2k+ | | | Non-prefixed global variable |
| #88 | WP Coupons and Deals – WordPress Coupon Plugin | 25 | 914 | 1,460 | 1k+ | | | Non-prefixed global variable |
| #89 | Video Gallery – YouTube Gallery, Playlist & Video Grid | 25 | 275 | 1,070 | 2k+ | | | Non-prefixed hook name |
| #90 | Attesa Extra | 26 | 316 | 151 | 1k+ | | | Output is not escaped |
| #91 | Ibtana – WordPress Website Builder | 26 | 173 | 409 | 10k+ | | | Non-prefixed global variable |
| #92 | Portfolio by BestWebSoft – Work and Projects Presentation Plugin for WordPress | 26 | 525 | 240 | 600 | | | Text Domain Mismatch |
| #93 | Ultimate Reviews | 26 | 515 | 345 | 500 | | | Output is not escaped |
| #94 | WPCOM Member | 26 | 432 | 638 | 1k+ | | | Non Singular String Literal Domain |
| #95 | Events Calendar for GeoDirectory | 27 | 1,229 | 462 | 2k+ | | | Text Domain Mismatch |
| #96 | picu – Online Photo Proofing Gallery | 27 | 613 | 322 | 2k+ | | | Output is not escaped |
| #97 | RS Elements Elementor Addon | 27 | 2,026 | 321 | 500 | | | Text Domain Mismatch |
| #98 | Tabbed Category Product Listing for Woocommerce | 27 | 423 | 111 | 1k+ | | | Text Domain Mismatch |
| #99 | WP Events Manager | 27 | 294 | 415 | 30k+ | | | Output is not escaped |
| #100 | Discount Rules and Dynamic Pricing for WooCommerce | 28 | 182 | 334 | 10k+ | | | Output is not escaped |