| #51 | Events Manager – Calendar, Bookings, Tickets, and more! | 22 | 4,713 | 5,655 | 70k+ | | | Output is not escaped |
| #52 | FunnelKit Payment Gateway for Stripe WooCommerce | 22 | 244 | 321 | 20k+ | | | Input is not sanitized |
| #53 | IMPress for IDX Broker | 22 | 1,085 | 636 | 6k+ | | | Text Domain Mismatch |
| #54 | LearnPress – WordPress LMS Plugin for Create and Sell Online Courses | 22 | 2,346 | 3,341 | 70k+ | | | Non-prefixed global variable |
| #55 | Mail Baby SMTP | 22 | 385 | 699 | 600 | | | SQL query is not prepared |
| #56 | MailOptin – Popup, Optin Forms & Email Newsletters for Mailchimp, HubSpot, AWeber Etc. | 22 | 2,619 | 2,453 | 10k+ | | | Output is not escaped |
| #57 | MarketKing — Ultimate WooCommerce Multivendor Marketplace Solution | 22 | 1,131 | 1,844 | 800 | | | Non-prefixed global variable |
| #58 | myCred Toolkit with AI Assistant – Scale Your Loyalty & Gamification Rewards With Integrations | 22 | 1,588 | 1,172 | 400 | | | Output is not escaped |
| #59 | Newsletters | 22 | 2,968 | 2,248 | 2k+ | | | Text Domain Mismatch |
| #60 | Post SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App | 22 | 1,581 | 2,326 | 300k+ | | | Non-prefixed global variable |
| #61 | Quick Contact Form | 22 | 260 | 623 | 1k+ | | | Non-prefixed function |
| #62 | RabbitLoader Cache: Optimize your Website for Speed | 22 | 241 | 163 | 2k+ | | | Output is not escaped |
| #63 | Request a Quote Form Plugin – Price Quote Request Management Made Easy | 22 | 241 | 1,109 | 1k+ | | | Non-prefixed hook name |
| #64 | Sellsy | 22 | 586 | 490 | 400 | | | Non Singular String Literal Domain |
| #65 | Slim Jetpack | 22 | 2,586 | 1,947 | 2k+ | | | Text Domain Mismatch |
| #66 | Swift Performance Lite | 22 | 2,346 | 1,325 | 7k+ | | | Text Domain Mismatch |
| #67 | Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent | 22 | 225 | 519 | 8k+ | | | error log error log |
| #68 | Theme Editor | 22 | 798 | 685 | 50k+ | | | Output is not escaped |
| #69 | ThemeHunk Customizer | 22 | 3,969 | 582 | 6k+ | | | Text Domain Mismatch |
| #70 | RapidLoad AI – Optimize Web Vitals Automatically | 22 | 81 | 840 | 700 | | | Nonce verification recommended |
| #71 | Search & Replace Everything – Quick and Easy Way to Find and Replace Text, Links | 22 | 1,044 | 1,797 | 20k+ | | | Non-prefixed global variable |
| #72 | URL Shortify – Simple and Easy URL Shortener | 22 | 1,520 | 2,689 | 10k+ | | | Non-prefixed global variable |
| #73 | Walker Core | 22 | 1,351 | 1,436 | 800 | | | Non-prefixed global variable |
| #74 | WCFM – Frontend Manager for WooCommerce | 22 | 4,754 | 5,054 | 20k+ | | | Non-prefixed global variable |
| #75 | WCFM Marketplace – Multivendor Marketplace for WooCommerce | 22 | 1,934 | 1,966 | 10k+ | | | Non-prefixed global variable |
| #76 | WCFM Membership – WooCommerce Memberships for Multivendor Marketplace | 22 | 559 | 675 | 10k+ | | | Non-prefixed global variable |
| #77 | Fraud Prevention For WooCommerce and EDD | 22 | 572 | 1,394 | 5k+ | | | Non-prefixed global variable |
| #78 | Advanced AJAX Product Filters | 22 | 2,683 | 1,205 | 50k+ | | | Text Domain Mismatch |
| #79 | Master Accordion ( Former WP Awesome FAQ Plugin ) | 22 | 1,774 | 1,286 | 700 | | | Non-prefixed global variable |
| #80 | WP Express Checkout (Fast Payments via PayPal & Stripe) | 22 | 591 | 627 | 1k+ | | | Output is not escaped |
| #81 | File Manager | 22 | 740 | 520 | 1m+ | | | Unsafe printing function |
| #82 | AidWP – Donation & Payment Forms (Stripe Powered) | 22 | 1,317 | 1,675 | 800 | | | Non-prefixed global variable |
| #83 | Recipe Cards For Your Food Blog from Zip Recipes | 22 | 1,126 | 1,731 | 1k+ | | | Non-prefixed global variable |
| #84 | Print Labels with Barcodes. Create price tags, product labels, order labels for WooCommerce | 23 | 1,185 | 1,027 | 1k+ | | | Text Domain Mismatch |
| #85 | Gutenberg Blocks – ACF Blocks Suite | 23 | 1,097 | 1,449 | 400 | | | Non-prefixed global variable |
| #86 | Advanced Product Labels for WooCommerce | 23 | 921 | 559 | 20k+ | | | Text Domain Mismatch |
| #87 | Autoptimize | 23 | 288 | 191 | 800k+ | | | Output is not escaped |
| #88 | Beds24 Online Booking | 23 | 532 | 374 | 2k+ | | | wp function not compatible with requires wp |
| #89 | Brave Popup Builder – Popup, Optins, Lead Generation, Survey & Interactive Content | 23 | 238 | 294 | 20k+ | | | error log print r |
| #90 | Builderall for WordPress | 23 | 4,782 | 1,308 | 1k+ | | | Text Domain Mismatch |
| #91 | Burger Companion | 23 | 3,274 | 472 | 10k+ | | | Text Domain Mismatch |
| #92 | Cart Notices for WooCommerce | 23 | 650 | 471 | 2k+ | | | Text Domain Mismatch |
| #93 | Products Suggestions for WooCommerce | 23 | 718 | 502 | 700 | | | Output is not escaped |
| #94 | WPBot – AI ChatBot for Live Support, Lead Generation, AI Services | 23 | 624 | 1,245 | 5k+ | | | Non-prefixed global variable |
| #95 | Church Admin | 23 | 1,643 | 4,202 | 900 | | | Direct Query |
| #96 | CLUEVO LMS, E-Learning Platform | 23 | 1,843 | 1,176 | 400 | | | Text Domain Mismatch |
| #97 | Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe | 23 | 9,310 | 26,642 | 900 | | | Non-prefixed global variable |
| #98 | Free Theme Builder for Elementor – CRT Addons (Header, Footer, Archive, WooCommerce & 50+ Widgets) | 23 | 791 | 2,331 | 400 | | | Non-prefixed global variable |
| #99 | Currency Exchange for WooCommerce | 23 | 703 | 502 | 500 | | | Output is not escaped |
| #100 | Ecwid by Lightspeed Ecommerce Shopping Cart | 23 | 339 | 307 | 20k+ | | | Missing direct file access protection |