| #51 | Database Access with Adminer | 22 | 983 | 2,553 | 1k+ | | | Non-prefixed global variable |
| #52 | Download Manager | 22 | 2,290 | 1,301 | 100k+ | | | Output is not escaped |
| #53 | Events Manager – Calendar, Bookings, Tickets, and more! | 22 | 4,722 | 5,621 | 70k+ | | | Output is not escaped |
| #54 | FireBox Popups – Increase Sales and Grow Your Email List | 22 | 153 | 812 | 7k+ | | | Non-prefixed global variable |
| #55 | GeoDirectory – WP Business Directory Plugin and Classified Listings Directory | 22 | 4,466 | 3,972 | 10k+ | | | Output is not escaped |
| #56 | Happyforms – Form Builder for WordPress: Drag & Drop Contact Forms, Surveys, Payments & Multipurpose Forms | 22 | 1,037 | 722 | 20k+ | | | Unsafe printing function |
| #57 | HeadSpace2 SEO | 22 | 940 | 360 | 3k+ | | | Text Domain Mismatch |
| #58 | Számlázz.hu integráció WooCommerce-hez | 22 | 1,169 | 460 | 7k+ | | | Text Domain Mismatch |
| #59 | MailOptin – Popup, Optin Forms & Email Newsletters for Mailchimp, HubSpot, AWeber Etc. | 22 | 2,619 | 2,453 | 10k+ | | | Output is not escaped |
| #60 | Modula Image Gallery – Photo Grid & Video Gallery | 22 | 474 | 436 | 100k+ | | | Text Domain Mismatch |
| #61 | Molongui Authorship – Author Boxes, Guest Authors & Co-Authors for WordPress | 22 | 919 | 1,230 | 10k+ | | | Output is not escaped |
| #62 | Newsletters | 22 | 2,968 | 2,248 | 2k+ | | | Text Domain Mismatch |
| #63 | NinjaFirewall (WP Edition) – Advanced Security Plugin and Firewall | 22 | 1,265 | 2,065 | 100k+ | | | Non-prefixed global variable |
| #64 | NinjaScanner – Virus & Malware scan | 22 | 596 | 551 | 30k+ | | | Non-prefixed global variable |
| #65 | Smart Popup by Supsystic | 22 | 3,172 | 503 | 10k+ | | | Non Singular String Literal Domain |
| #66 | Post SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App | 22 | 1,581 | 2,326 | 300k+ | | | Non-prefixed global variable |
| #67 | PageSpeed Ninja – Cache, Minify, Defer CSS JavaScript, Critical CSS, Optimize Images, Convert WebP | 22 | 984 | 407 | 5k+ | | | Unsafe printing function |
| #68 | RabbitLoader Cache: Optimize your Website for Speed | 22 | 241 | 163 | 2k+ | | | Output is not escaped |
| #69 | Slim Jetpack | 22 | 2,586 | 1,947 | 2k+ | | | Text Domain Mismatch |
| #70 | Stylish Price List – Price Table Builder & QR Code Restaurant Menu | 22 | 674 | 678 | 3k+ | | | Output is not escaped |
| #71 | Swift Performance Lite | 22 | 2,346 | 1,325 | 7k+ | | | Text Domain Mismatch |
| #72 | 10Web Booster – Website speed optimization, Cache & Page Speed optimizer | 22 | 513 | 601 | 80k+ | | | Non-prefixed global variable |
| #73 | Theme Editor | 22 | 798 | 685 | 50k+ | | | Output is not escaped |
| #74 | Welcart e-Commerce | 22 | 10,377 | 10,896 | 10k+ | | | Text Domain Mismatch |
| #75 | Advanced AJAX Product Filters | 22 | 2,683 | 1,205 | 50k+ | | | Text Domain Mismatch |
| #76 | Asset CleanUp: Page Speed Booster | 22 | 2,030 | 2,485 | 100k+ | | | Non-prefixed global variable |
| #77 | WP Express Checkout (Fast Payments via PayPal & Stripe) | 22 | 591 | 627 | 1k+ | | | Output is not escaped |
| #78 | WP Super Minify • Minify, Compress and Cache HTML, CSS & JavaScript | 22 | 164 | 257 | 9k+ | | | Non-prefixed constant |
| #79 | Print Labels with Barcodes. Create price tags, product labels, order labels for WooCommerce | 23 | 1,185 | 1,027 | 1k+ | | | Text Domain Mismatch |
| #80 | Admin and Site Enhancements (ASE) | 23 | 136 | 330 | 200k+ | | | Nonce verification recommended |
| #81 | Advanced Product Labels for WooCommerce | 23 | 921 | 559 | 20k+ | | | Text Domain Mismatch |
| #82 | Affiliate Super Assistent | 23 | 1,280 | 267 | 2k+ | | | Text Domain Mismatch |
| #83 | Autoptimize | 23 | 288 | 191 | 800k+ | | | Output is not escaped |
| #84 | Kadence Security – Password, Two Factor Authentication, and Brute Force Protection | 23 | 1,053 | 967 | 700k+ | | | Missing Translators Comment |
| #85 | Builderall for WordPress | 23 | 4,782 | 1,308 | 1k+ | | | Text Domain Mismatch |
| #86 | Cart Notices for WooCommerce | 23 | 650 | 471 | 2k+ | | | Text Domain Mismatch |
| #87 | Content Views – Post Grid & Filter, Recent Posts, Category Posts … (Shortcode, Gutenberg Blocks, and Widgets for Elementor) | 23 | 306 | 587 | 100k+ | | | Dynamic hook name |
| #88 | DK PDF – WordPress PDF Generator | 23 | 744 | 335 | 3k+ | | | Exception output is not escaped |
| #89 | Events Addon for Elementor | 23 | 779 | 1,339 | 7k+ | | | Non-prefixed global variable |
| #90 | Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI | 23 | 395 | 1,342 | 90k+ | | | Non-prefixed global variable |
| #91 | Ezoic | 23 | 432 | 516 | 10k+ | | | Output is not escaped |
| #92 | Image Photo Gallery Final Tiles Grid | 23 | 578 | 1,502 | 20k+ | | | Non-prefixed global variable |
| #93 | FV Flowplayer Video Player | 23 | 1,311 | 1,454 | 20k+ | | | Output is not escaped |
| #94 | Interactive Content – H5P | 23 | 565 | 380 | 40k+ | | | Non Singular String Literal Domain |
| #95 | Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress | 23 | 91 | 693 | 300k+ | | | Non-prefixed namespace |
| #96 | King Addons for Elementor – 80+ Elementor Widgets, 4 000+ Elementor Templates, WooCommerce, Mega Menu, Popup Builder | 23 | 1,837 | 3,878 | 10k+ | | | Non-prefixed global variable |
| #97 | KiviCare – Clinic & Patient Management System (EHR) | 23 | 206 | 850 | 2k+ | | | Direct Query |
| #98 | MailPoet – Newsletters, Email Marketing, and Automation | 23 | 926 | 710 | 500k+ | | | Exception output is not escaped |
| #99 | MaxButtons – Create buttons | 23 | 655 | 409 | 70k+ | | | Output is not escaped |
| #100 | MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar | 23 | 4,065 | 488 | 20k+ | | | Text Domain Mismatch |