| #101 | Builderall for WordPress | 23 | 4,782 | 1,308 | 1k+ | | | Text Domain Mismatch |
| #102 | Cart Notices for WooCommerce | 23 | 650 | 471 | 2k+ | | | Text Domain Mismatch |
| #103 | Products Suggestions for WooCommerce | 23 | 718 | 502 | 700 | | | Output is not escaped |
| #104 | Content Views – Post Grid & Filter, Recent Posts, Category Posts … (Shortcode, Gutenberg Blocks, and Widgets for Elementor) | 23 | 306 | 587 | 100k+ | | | Dynamic hook name |
| #105 | Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe | 23 | 9,310 | 26,642 | 900 | | | Non-prefixed global variable |
| #106 | Currency Exchange for WooCommerce | 23 | 703 | 502 | 500 | | | Output is not escaped |
| #107 | DK PDF – WordPress PDF Generator | 23 | 744 | 335 | 3k+ | | | Exception output is not escaped |
| #108 | Events Addon for Elementor | 23 | 779 | 1,339 | 7k+ | | | Non-prefixed global variable |
| #109 | Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI | 23 | 395 | 1,342 | 90k+ | | | Non-prefixed global variable |
| #110 | Ezoic | 23 | 432 | 516 | 10k+ | | | Output is not escaped |
| #111 | Fastcache by Host.it | 23 | 1,327 | 203 | 700 | | | Text Domain Mismatch |
| #112 | Image Photo Gallery Final Tiles Grid | 23 | 578 | 1,502 | 20k+ | | | Non-prefixed global variable |
| #113 | FV Flowplayer Video Player | 23 | 1,311 | 1,454 | 20k+ | | | Output is not escaped |
| #114 | Interactive Content – H5P | 23 | 565 | 380 | 40k+ | | | Non Singular String Literal Domain |
| #115 | Ibtana – Ecommerce Product Addons | 23 | 1,547 | 1,718 | 6k+ | | | Non Singular String Literal Domain |
| #116 | Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress | 23 | 91 | 693 | 300k+ | | | Non-prefixed namespace |
| #117 | King Addons for Elementor – 80+ Elementor Widgets, 4 000+ Elementor Templates, WooCommerce, Mega Menu, Popup Builder | 23 | 1,831 | 3,878 | 10k+ | | | Non-prefixed global variable |
| #118 | KiviCare – Clinic & Patient Management System (EHR) | 23 | 206 | 850 | 2k+ | | | Direct Query |
| #119 | MailPoet – Newsletters, Email Marketing, and Automation | 23 | 931 | 719 | 500k+ | | | Exception output is not escaped |
| #120 | MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar | 23 | 4,065 | 488 | 20k+ | | | Text Domain Mismatch |
| #121 | MyWorks Sync for WooCommerce & QuickBooks Online | 23 | 2,292 | 9,101 | 5k+ | | | Non-prefixed global variable |
| #122 | Nirweb support | 23 | 254 | 617 | 800 | | | Request data is not unslashed |
| #123 | Pagination Styler for WooCommerce | 23 | 811 | 445 | 1k+ | | | Output is not escaped |
| #124 | Photo Gallery by 10Web – Mobile-Friendly Image Gallery | 23 | 4,159 | 1,553 | 100k+ | | | Output is not escaped |
| #125 | PowerPress Podcasting plugin by Blubrry | 23 | 4,807 | 2,394 | 20k+ | | | Output is not escaped |
| #126 | Product Watermark for WooCommerce | 23 | 696 | 457 | 2k+ | | | Output is not escaped |
| #127 | Redirection | 23 | 523 | 457 | 100k+ | | | Non-prefixed global variable |
| #128 | Restaurant & Cafe Addon for Elementor | 23 | 889 | 1,326 | 2k+ | | | Non-prefixed global variable |
| #129 | Robo Gallery – Photo & Image Slider | 23 | 1,291 | 530 | 40k+ | | | Output is not escaped |
| #130 | SecuPress with Simple SSL – Simple and Performant Security | 23 | 1,696 | 1,590 | 40k+ | | | Non-prefixed global variable |
| #131 | Shipment Tracker for Woocommerce | 23 | 462 | 559 | 2k+ | | | Missing Arg Domain |
| #132 | Slider by 10Web – Responsive Image Slider | 23 | 5,814 | 976 | 10k+ | | | Output is not escaped |
| #133 | Smart Marketing SMS and Newsletters Forms | 23 | 2,221 | 1,022 | 1k+ | | | Text Domain Mismatch |
| #134 | Smart Slider 3 | 23 | 261 | 268 | 800k+ | | | Non-prefixed global variable |
| #135 | teachPress | 23 | 744 | 1,587 | 2k+ | | | SQL query is not prepared |
| #136 | Legal Terms and Conditions Popup for User Login and WooCommerce Checkout | 23 | 524 | 237 | 700 | | | Output is not escaped |
| #137 | The Events Calendar | 23 | 3,511 | 3,851 | 700k+ | | | Text Domain Mismatch |
| #138 | Tutor LMS – eLearning and online course solution | 23 | 395 | 3,402 | 100k+ | | | Non-prefixed global variable |
| #139 | Ultimate Fields | 23 | 371 | 458 | 800 | | | Alternative PHP tag found |
| #140 | W3 Total Cache | 23 | 307 | 678 | 900k+ | | | Non-prefixed global variable |
| #141 | Product Table & List Builder For WooCommerce | 23 | 1,361 | 2,059 | 10k+ | | | Non-prefixed global variable |
| #142 | Billingo Plus integráció WooCommerce-hez | 23 | 1,119 | 507 | 900 | | | Text Domain Mismatch |
| #143 | Predictive Search for WooCommerce | 23 | 530 | 644 | 700 | | | Output is not escaped |
| #144 | Clone | 23 | 244 | 262 | 40k+ | | | Output is not escaped |
| #145 | Stripe Payment Forms by WP Full Pay – Accept Credit Card Payments, Donations & Subscriptions | 23 | 1,123 | 1,860 | 9k+ | | | Output is not escaped |
| #146 | FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce | 23 | 940 | 2,180 | 20k+ | | | SQL query is not prepared |
| #147 | Subscribe Forms – Beautiful Email Forms, Embedded Newsletter Forms & MailChimp Form | 23 | 419 | 542 | 2k+ | | | Non-prefixed global variable |
| #148 | WP Ultimate CSV Importer – WordPress Import & Export for CSV, XML & Excel | 23 | 1,119 | 3,516 | 20k+ | | | Interpolated SQL is not prepared |
| #149 | WPMobile.App | 23 | 2,983 | 1,527 | 3k+ | | | Output is not escaped |
| #150 | WSW – Shopify WooCommerce / WordPress Integration and Migration | 23 | 1,449 | 1,612 | 600 | | | Non-prefixed global variable |