| #51 | Wordfence Security – Firewall, Malware Scan, and Login Security | 21 | 1,592 | 2,973 | 5m+ | | | Output is not escaped |
| #52 | WP Compress – Instant Performance & Speed Optimization | 21 | 3,367 | 3,253 | 10k+ | | | Non Singular String Literal Domain |
| #53 | WP phpMyAdmin | 21 | 4,528 | 6,435 | 40k+ | | | Missing Arg Domain |
| #54 | wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin | 21 | 1,812 | 1,432 | 70k+ | | | Output is not escaped |
| #55 | All-in-One Video Gallery – Video Player & Galleries for YouTube, Vimeo & Self-Hosted Videos | 22 | 912 | 2,885 | 20k+ | | | Non-prefixed global variable |
| #56 | Better WordPress Minify | 22 | 412 | 484 | 7k+ | | | Non Singular String Literal Domain |
| #57 | Clearfy Cache – WordPress optimization plugin, Minify HTML, CSS & JS, Defer | 22 | 2,854 | 1,269 | 50k+ | | | Text Domain Mismatch |
| #58 | Cozy Blocks – Page Builder for Gutenberg Editor & FSE with 700+ Patterns, 58 Blocks & Templates | 22 | 2,392 | 4,290 | 6k+ | | | Non-prefixed global variable |
| #59 | RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login | 22 | 3,652 | 5,134 | 8k+ | | | Non-prefixed global variable |
| #60 | Database Access with Adminer | 22 | 983 | 2,553 | 1k+ | | | Non-prefixed global variable |
| #61 | Download Manager | 22 | 2,513 | 1,459 | 100k+ | | | Output is not escaped |
| #62 | Events Manager – Calendar, Bookings, Tickets, and more! | 22 | 4,716 | 5,690 | 70k+ | | | Output is not escaped |
| #63 | FACTO – Facturación Electrónica | 22 | 244 | 423 | 400 | | | Request data is not unslashed |
| #64 | FireBox Popups – Increase Sales and Grow Your Email List | 22 | 157 | 826 | 7k+ | | | Non-prefixed global variable |
| #65 | GeoDirectory – WP Business Directory Plugin and Classified Listings Directory | 22 | 4,465 | 3,985 | 10k+ | | | Output is not escaped |
| #66 | Happyforms – Form Builder for WordPress: Drag & Drop Contact Forms, Surveys, Payments & Multipurpose Forms | 22 | 1,031 | 722 | 20k+ | | | Unsafe printing function |
| #67 | HeadSpace2 SEO | 22 | 940 | 360 | 3k+ | | | Text Domain Mismatch |
| #68 | If-So Dynamic Content – Elementor & All Page Builders Personalization | 22 | 966 | 839 | 7k+ | | | Output is not escaped |
| #69 | Számlázz.hu integráció WooCommerce-hez | 22 | 1,169 | 460 | 7k+ | | | Text Domain Mismatch |
| #70 | MailChimp Subscribe Form, Optin Builder, PopUp Builder, Form Builder | 22 | 1,120 | 3,012 | 2k+ | | | Non-prefixed global variable |
| #71 | MailOptin – Popup, Optin Forms & Email Newsletters for Mailchimp, HubSpot, AWeber Etc. | 22 | 2,625 | 2,458 | 10k+ | | | Output is not escaped |
| #72 | Search Atlas SEO – Premier SEO Plugin for One-Click WP Publishing & Integrated AI Optimization | 22 | 1,306 | 2,818 | 8k+ | | | Output is not escaped |
| #73 | Modula Image Gallery – Photo Grid & Video Gallery | 22 | 474 | 437 | 100k+ | | | Text Domain Mismatch |
| #74 | Molongui Authorship – Author Boxes, Guest Authors & Co-Authors for WordPress | 22 | 919 | 1,230 | 10k+ | | | Output is not escaped |
| #75 | Newsletters | 22 | 2,977 | 2,261 | 2k+ | | | Text Domain Mismatch |
| #76 | NinjaFirewall (WP Edition) – Advanced Security Plugin and Firewall | 22 | 1,263 | 2,046 | 100k+ | | | Non-prefixed global variable |
| #77 | NinjaScanner – Virus & Malware scan | 22 | 596 | 551 | 30k+ | | | Non-prefixed global variable |
| #78 | Packeta | 22 | 801 | 333 | 8k+ | | | Exception output is not escaped |
| #79 | Smart Popup by Supsystic | 22 | 3,120 | 492 | 10k+ | | | Non Singular String Literal Domain |
| #80 | Post SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App | 22 | 1,581 | 2,326 | 300k+ | | | Non-prefixed global variable |
| #81 | PageSpeed Ninja – Cache, Minify, Defer CSS JavaScript, Critical CSS, Optimize Images, Convert WebP | 22 | 984 | 407 | 5k+ | | | Unsafe printing function |
| #82 | RabbitLoader Cache: Optimize your Website for Speed | 22 | 241 | 163 | 2k+ | | | Output is not escaped |
| #83 | Sellsy | 22 | 586 | 490 | 400 | | | Non Singular String Literal Domain |
| #84 | Slim Jetpack | 22 | 2,586 | 1,947 | 2k+ | | | Text Domain Mismatch |
| #85 | Stylish Price List – Price Table Builder & QR Code Restaurant Menu | 22 | 674 | 678 | 3k+ | | | Output is not escaped |
| #86 | Swift Performance Lite | 22 | 2,346 | 1,325 | 6k+ | | | Text Domain Mismatch |
| #87 | 10Web Booster – Website speed optimization, Cache & Page Speed optimizer | 22 | 513 | 601 | 70k+ | | | Non-prefixed global variable |
| #88 | Theme Editor | 22 | 798 | 685 | 50k+ | | | Output is not escaped |
| #89 | Welcart e-Commerce | 22 | 10,368 | 10,882 | 10k+ | | | Text Domain Mismatch |
| #90 | Advanced AJAX Product Filters | 22 | 2,840 | 1,252 | 50k+ | | | Text Domain Mismatch |
| #91 | Asset CleanUp: Page Speed Booster | 22 | 2,030 | 2,485 | 100k+ | | | Non-prefixed global variable |
| #92 | Master Accordion ( Former WP Awesome FAQ Plugin ) | 22 | 1,774 | 1,286 | 700 | | | Non-prefixed global variable |
| #93 | WP Express Checkout (Fast Payments via PayPal & Stripe) | 22 | 591 | 627 | 1k+ | | | Output is not escaped |
| #94 | WP Super Minify • Minify, Compress and Cache HTML, CSS & JavaScript | 22 | 164 | 257 | 8k+ | | | Non-prefixed constant |
| #95 | Print Labels with Barcodes. Create price tags, product labels, order labels for WooCommerce | 23 | 1,185 | 1,027 | 1k+ | | | Text Domain Mismatch |
| #96 | Gutenberg Blocks – ACF Blocks Suite | 23 | 1,097 | 1,449 | 400 | | | Non-prefixed global variable |
| #97 | Ad Inserter – Ad Manager & AdSense Ads | 23 | 4,267 | 812 | 300k+ | | | Output is not escaped |
| #98 | Admin and Site Enhancements (ASE) | 23 | 139 | 328 | 200k+ | | | Nonce verification recommended |
| #99 | Advanced Product Labels for WooCommerce | 23 | 921 | 559 | 20k+ | | | Text Domain Mismatch |
| #100 | Affiliate Super Assistent | 23 | 1,280 | 267 | 1k+ | | | Text Domain Mismatch |