| #51 | Oasis Workflow | 21 | 775 | 575 | 700 | | | Text Domain Mismatch |
| #52 | Landing Page Builder – Coming Soon page, Maintenance Mode, Lead Page, WordPress Landing Pages | 21 | 1,120 | 2,913 | 9k+ | | | Non-prefixed global variable |
| #53 | PeachPay — Payments & Express Checkout for WooCommerce (supports Stripe, PayPal, Square, Authorize.net, NMI) | 21 | 485 | 813 | 300 | | | Missing direct file access protection |
| #54 | User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor | 21 | 703 | 1,463 | 40k+ | | | Missing Translators Comment |
| #55 | Quill Forms | Conversational Multi Step Forms, Surveys & quizzes | 21 | 401 | 370 | 3k+ | | | Text Domain Mismatch |
| #56 | Razorpay for Gravity Forms | 21 | 411 | 47 | 600 | | | Exception output is not escaped |
| #57 | Rocket Maintenance Mode & Coming Soon Page | 21 | 1,176 | 1,406 | 4k+ | | | Non-prefixed global variable |
| #58 | Seamless Donations is Sunset | 21 | 600 | 514 | 2k+ | | | Text Domain Mismatch |
| #59 | Professional Social Sharing Buttons, Icons & Related Posts – Shareaholic | 21 | 327 | 181 | 10k+ | | | Output is not escaped |
| #60 | Accept Stripe Payments | 21 | 373 | 892 | 20k+ | | | Missing nonce verification |
| #61 | Trace My IP – Visitor IP Tracker, Stats Analytics & Page Views Counter with Email Alerts | 21 | 871 | 338 | 1k+ | | | wp function not compatible with requires wp |
| #62 | Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin | 21 | 1,064 | 2,978 | 40k+ | | | Direct Query |
| #63 | Wordfence Security – Firewall, Malware Scan, and Login Security | 21 | 1,592 | 2,973 | 5m+ | | | Output is not escaped |
| #64 | WP Compress – Instant Performance & Speed Optimization | 21 | 3,367 | 3,253 | 10k+ | | | Non Singular String Literal Domain |
| #65 | WP-Lister Lite for eBay | 21 | 6,696 | 5,128 | 2k+ | | | Output is not escaped |
| #66 | WP phpMyAdmin | 21 | 4,528 | 6,435 | 50k+ | | | Missing Arg Domain |
| #67 | wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin | 21 | 1,812 | 1,432 | 70k+ | | | Output is not escaped |
| #68 | WP Extended – The Ultimate WordPress Toolkit | 21 | 1,253 | 398 | 600 | | | Non Singular String Literal Domain |
| #69 | WebTotem Security | 21 | 1,110 | 213 | 800 | | | Text Domain Mismatch |
| #70 | Ajax Load More – Infinite Scroll, Load More, & Lazy Load | 22 | 641 | 592 | 30k+ | | | Unsafe printing function |
| #71 | All-in-One Video Gallery – Video Player & Galleries for YouTube, Vimeo & Self-Hosted Videos | 22 | 912 | 2,885 | 20k+ | | | Non-prefixed global variable |
| #72 | ANAC XML Bandi di Gara | 22 | 294 | 244 | 500 | | | Output is not escaped |
| #73 | Better WordPress Minify | 22 | 412 | 484 | 7k+ | | | Non Singular String Literal Domain |
| #74 | Cart Lift – Abandoned Cart Recovery for WooCommerce and EDD | 22 | 669 | 769 | 1k+ | | | Output is not escaped |
| #75 | Clearfy Cache – WordPress optimization plugin, Minify HTML, CSS & JS, Defer | 22 | 2,854 | 1,269 | 50k+ | | | Text Domain Mismatch |
| #76 | Accept PayPal Payments using Contact Form 7 | 22 | 359 | 127 | 600 | | | Text Domain Mismatch |
| #77 | Cozy Blocks – Page Builder for Gutenberg Editor & FSE with 700+ Patterns, 58 Blocks & Templates | 22 | 2,392 | 4,290 | 6k+ | | | Non-prefixed global variable |
| #78 | RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login | 22 | 3,652 | 5,134 | 8k+ | | | Non-prefixed global variable |
| #79 | Database Access with Adminer | 22 | 983 | 2,553 | 1k+ | | | Non-prefixed global variable |
| #80 | Download Manager | 22 | 2,513 | 1,459 | 100k+ | | | Output is not escaped |
| #81 | Diverse Solutions IDX Real Estate Listings & MLS Search | 22 | 745 | 605 | 1k+ | | | Heredoc Output Not Escaped |
| #82 | Ebook Store | 22 | 410 | 1,054 | 700 | | | Non-prefixed global variable |
| #83 | Employee Spotlight – Team Member Showcase & Meet the Team Plugin | 22 | 247 | 689 | 400 | | | Non-prefixed hook name |
| #84 | FACTO – Facturación Electrónica | 22 | 244 | 423 | 400 | | | Request data is not unslashed |
| #85 | FunnelKit Payment Gateway for Stripe WooCommerce | 22 | 244 | 321 | 20k+ | | | Input is not sanitized |
| #86 | GeoDirectory – WP Business Directory Plugin and Classified Listings Directory | 22 | 4,465 | 3,976 | 10k+ | | | Output is not escaped |
| #87 | Happy Addons for Elementor | 22 | 652 | 446 | 400k+ | | | Output is not escaped |
| #88 | HeadSpace2 SEO | 22 | 940 | 360 | 3k+ | | | Text Domain Mismatch |
| #89 | If-So Dynamic Content – Elementor & All Page Builders Personalization | 22 | 966 | 839 | 7k+ | | | Output is not escaped |
| #90 | Insert or Embed Articulate Content into WordPress | 22 | 659 | 1,437 | 2k+ | | | Non-prefixed global variable |
| #91 | Mail Baby SMTP | 22 | 385 | 699 | 600 | | | SQL query is not prepared |
| #92 | MailChimp Subscribe Form, Optin Builder, PopUp Builder, Form Builder | 22 | 1,120 | 3,012 | 2k+ | | | Non-prefixed global variable |
| #93 | Search Atlas SEO – Premier SEO Plugin for One-Click WP Publishing & Integrated AI Optimization | 22 | 1,306 | 2,818 | 8k+ | | | Output is not escaped |
| #94 | Molongui Authorship – Author Boxes, Guest Authors & Co-Authors for WordPress | 22 | 919 | 1,230 | 10k+ | | | Output is not escaped |
| #95 | MStore API – Create Native Android & iOS Apps On The Cloud | 22 | 635 | 856 | 3k+ | | | SQL query is not prepared |
| #96 | NinjaScanner – Virus & Malware scan | 22 | 596 | 551 | 30k+ | | | Non-prefixed global variable |
| #97 | oik | 22 | 489 | 180 | 2k+ | | | Non Singular String Literal Domain |
| #98 | Packeta | 22 | 801 | 333 | 8k+ | | | Exception output is not escaped |
| #99 | PAYCOMET for WooCommerce | 22 | 1,206 | 423 | 2k+ | | | Text Domain Mismatch |
| #100 | Smart Popup by Supsystic | 22 | 3,120 | 492 | 10k+ | | | Non Singular String Literal Domain |