| #101 | Cozy Blocks – Page Builder for Gutenberg Editor & FSE with 500+ Patterns, 57 Blocks & Templates | 22 | 2,167 | 4,175 | 7k+ | | Non-prefixed global variable |
| #102 | RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login | 22 | 3,654 | 5,061 | 8k+ | | Non-prefixed global variable |
| #103 | WP Customer Area | 22 | 3,308 | 941 | 10k+ | | Text Domain Mismatch |
| #104 | SysBasics Customize My Account for WooCommerce – Dashboard, Endpoints, Avatar & Menu Manager | 22 | 703 | 841 | 8k+ | | Non-prefixed global variable |
| #105 | Data Tables Generator by Supsystic | 22 | 156 | 144 | 10k+ | | Exception output is not escaped |
| #106 | Directorist: AI-Powered Business Directory, Listings & Classified Ads | 22 | 443 | 2,129 | 20k+ | | Non-prefixed global variable |
| #107 | Download Manager | 22 | 2,290 | 1,301 | 100k+ | | Output is not escaped |
| #108 | Dynamic QR Code – generator | 22 | 238 | 208 | 6k+ | | Missing direct file access protection |
| #109 | Easy Social Feed – Social Photos Gallery and Post Feed for WordPress | 22 | 1,567 | 1,277 | 30k+ | | Non-prefixed global variable |
| #110 | EleSpare – News, Magazine and Blog Addons for Elementor | 22 | 733 | 1,423 | 10k+ | | Non-prefixed global variable |
| #111 | Estatik Real Estate Plugin | 22 | 3,049 | 325 | 10k+ | | Text Domain Mismatch |
| #112 | Events Manager – Calendar, Bookings, Tickets, and more! | 22 | 4,722 | 5,621 | 70k+ | | Output is not escaped |
| #113 | Falang multilanguage for WordPress | 22 | 716 | 769 | 1k+ | | Output is not escaped |
| #114 | File Manager Pro – Filester | 22 | 565 | 391 | 100k+ | | Request data is not unslashed |
| #115 | Finale Lite – Sales Countdown Timer & Discount for WooCommerce | 22 | 1,031 | 451 | 4k+ | | Output is not escaped |
| #116 | FireBox Popups – Increase Sales and Grow Your Email List | 22 | 153 | 812 | 7k+ | | Non-prefixed global variable |
| #117 | Notification Bar, Announcement and Cookie Notice WordPress Plugin – FooBar | 22 | 1,321 | 1,371 | 3k+ | | Non-prefixed global variable |
| #118 | Five Star Restaurant Menu and Food Ordering | 22 | 752 | 609 | 5k+ | | Output is not escaped |
| #119 | FunnelKit Payment Gateway for Stripe WooCommerce | 22 | 244 | 321 | 20k+ | | Input is not sanitized |
| #120 | Gutenberg | 22 | 628 | 342 | 300k+ | | Missing direct file access protection |
| #121 | Happyforms – Form Builder for WordPress: Drag & Drop Contact Forms, Surveys, Payments & Multipurpose Forms | 22 | 1,037 | 722 | 20k+ | | Unsafe printing function |
| #122 | HeadSpace2 SEO | 22 | 940 | 360 | 3k+ | | Text Domain Mismatch |
| #123 | IMPress for IDX Broker | 22 | 1,085 | 636 | 7k+ | | Text Domain Mismatch |
| #124 | Insert or Embed Articulate Content into WordPress | 22 | 659 | 1,437 | 2k+ | | Non-prefixed global variable |
| #125 | InfiniteWP Client | 22 | 2,286 | 1,812 | 200k+ | | Exception output is not escaped |
| #126 | LearnPress – WordPress LMS Plugin for Create and Sell Online Courses | 22 | 2,361 | 3,384 | 70k+ | | Non-prefixed global variable |
| #127 | Custom Login Page Customizer – Login Designer | 22 | 588 | 1,455 | 30k+ | | Non-prefixed global variable |
| #128 | MailOptin – Popup, Optin Forms & Email Newsletters for Mailchimp, HubSpot, AWeber Etc. | 22 | 2,619 | 2,453 | 10k+ | | Output is not escaped |
| #129 | Slider, Gallery, and Carousel by MetaSlider – Image Slider, Video Slider | 22 | 207 | 323 | 500k+ | | Non-prefixed global variable |
| #130 | Modula Image Gallery – Photo Grid & Video Gallery | 22 | 474 | 436 | 100k+ | | Text Domain Mismatch |
| #131 | Motors – Car Dealership & Classified Listings Plugin | 22 | 5,340 | 5,958 | 9k+ | | Text Domain Mismatch |
| #132 | Newsletters | 22 | 2,968 | 2,248 | 2k+ | | Text Domain Mismatch |
| #133 | NinjaScanner – Virus & Malware scan | 22 | 596 | 551 | 30k+ | | Non-prefixed global variable |
| #134 | WP OAuth Server (OAuth Authentication) | 22 | 189 | 347 | 3k+ | | Non-prefixed function |
| #135 | oik | 22 | 489 | 180 | 2k+ | | Non Singular String Literal Domain |
| #136 | PagBank / PagSeguro Connect para WooCommerce | 22 | 504 | 743 | 4k+ | | Non-prefixed global variable |
| #137 | PAYCOMET for WooCommerce | 22 | 1,206 | 423 | 2k+ | | Text Domain Mismatch |
| #138 | Post SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App | 22 | 1,581 | 2,326 | 300k+ | | Non-prefixed global variable |
| #139 | Prime Mover – Migrate WordPress Website & Backups | 22 | 1,326 | 1,600 | 10k+ | | Non-prefixed global variable |
| #140 | PageSpeed Ninja – Cache, Minify, Defer CSS JavaScript, Critical CSS, Optimize Images, Convert WebP | 22 | 984 | 407 | 5k+ | | Unsafe printing function |
| #141 | Quick Contact Form | 22 | 260 | 623 | 1k+ | | Non-prefixed function |
| #142 | RabbitLoader Cache: Optimize your Website for Speed | 22 | 241 | 163 | 2k+ | | Output is not escaped |
| #143 | Restrict User Access – Ultimate Membership & Content Protection | 22 | 977 | 1,840 | 10k+ | | Non-prefixed global variable |
| #144 | Simple Job Board | 22 | 634 | 1,355 | 10k+ | | Non-prefixed global variable |
| #145 | Slick Popup: Contact Form 7 Popup Plugin | 22 | 2,322 | 316 | 2k+ | | Text Domain Mismatch |
| #146 | Slim Jetpack | 22 | 2,586 | 1,947 | 2k+ | | Text Domain Mismatch |
| #147 | SNS Count Cache | 22 | 918 | 120 | 8k+ | | Non Singular String Literal Domain |
| #148 | SportsPress – Sports Club & League Manager | 22 | 460 | 2,242 | 10k+ | | Non-prefixed global variable |
| #149 | SSL Zen — SSL Certificate Installer & HTTPS Redirects | 22 | 779 | 1,575 | 10k+ | | Non-prefixed global variable |
| #150 | Stylish Price List – Price Table Builder & QR Code Restaurant Menu | 22 | 674 | 678 | 3k+ | | Output is not escaped |