| #51 | WPSSO Core – Complete Schema Markup and Meta Tags | 22 | 1,407 | 412 | 5k+ | | | Missing Translators Comment |
| #52 | Advanced Contact form 7 DB | 23 | 761 | 1,959 | 70k+ | | | Non-prefixed global variable |
| #53 | BA Book Everything | 23 | 1,184 | 1,086 | 10k+ | | | Output is not escaped |
| #54 | BlossomThemes Email Newsletter | 23 | 337 | 239 | 20k+ | | | Output is not escaped |
| #55 | Booking calendar, Appointment Booking System | 23 | 1,079 | 1,125 | 4k+ | | | Output is not escaped |
| #56 | CWW Companion | 23 | 307 | 223 | 1k+ | | | Output is not escaped |
| #57 | Disable Bloat for WordPress & WooCommerce | 23 | 863 | 1,325 | 10k+ | | | Non-prefixed global variable |
| #58 | DK PDF – WordPress PDF Generator | 23 | 744 | 335 | 3k+ | | | Exception output is not escaped |
| #59 | Easy Age Verify | 23 | 1,138 | 2,631 | 1k+ | | | Non-prefixed global variable |
| #60 | Ecwid by Lightspeed Ecommerce Shopping Cart | 23 | 339 | 307 | 20k+ | | | Missing direct file access protection |
| #61 | ElementsReady Addons for Elementor | 23 | 231 | 666 | 3k+ | | | Non-prefixed global variable |
| #62 | Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI | 23 | 395 | 1,342 | 90k+ | | | Non-prefixed global variable |
| #63 | Flexmls® IDX Plugin | 23 | 1,268 | 957 | 1k+ | | | Output is not escaped |
| #64 | Fuse Social Floating Sidebar | 23 | 1,840 | 1,573 | 10k+ | | | Non-prefixed global variable |
| #65 | FV Flowplayer Video Player | 23 | 1,311 | 1,454 | 20k+ | | | Output is not escaped |
| #66 | The GDPR Framework By Data443 | 23 | 1,287 | 517 | 10k+ | | | Short PHP open tag found |
| #67 | Happy Addons for Elementor | 23 | 573 | 444 | 400k+ | | | Output is not escaped |
| #68 | Link Whisper Free | 23 | 3,882 | 5,303 | 30k+ | | | Text Domain Mismatch |
| #69 | MaxButtons – Create buttons | 23 | 655 | 409 | 70k+ | | | Output is not escaped |
| #70 | MediaPress | 23 | 904 | 583 | 4k+ | | | Output is not escaped |
| #71 | MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar | 23 | 4,065 | 488 | 20k+ | | | Text Domain Mismatch |
| #72 | Issues and Series for Newspapers, Magazines, Publishers, Writers | 23 | 346 | 710 | 2k+ | | | Nonce verification recommended |
| #73 | Photo Gallery by 10Web – Mobile-Friendly Image Gallery | 23 | 4,159 | 1,553 | 100k+ | | | Output is not escaped |
| #74 | PowerPress Podcasting plugin by Blubrry | 23 | 4,807 | 2,394 | 20k+ | | | Output is not escaped |
| #75 | Premium Addons for Elementor – Powerful Elementor Templates & Widgets | 23 | 206 | 997 | 700k+ | | | Non-prefixed hook name |
| #76 | Restrict – membership, site, content and user access restrictions for WordPress | 23 | 973 | 1,519 | 2k+ | | | Non-prefixed global variable |
| #77 | Schema | 23 | 1,173 | 245 | 40k+ | | | Text Domain Mismatch |
| #78 | SEO Redirection Plugin – 301 Redirect Manager | 23 | 272 | 727 | 10k+ | | | Non-prefixed global variable |
| #79 | Tag, Category, and Taxonomy Manager – Autotagger Automatically Add Terms | 23 | 405 | 869 | 50k+ | | | Nonce verification recommended |
| #80 | Slider Hero with Video Background, Animation | 23 | 1,565 | 1,253 | 3k+ | | | Text Domain Mismatch |
| #81 | The Events Calendar | 23 | 3,512 | 3,848 | 700k+ | | | Text Domain Mismatch |
| #82 | UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP | 23 | 695 | 2,434 | 20k+ | | | Non-prefixed hook name |
| #83 | Advanced Booking & Appointment System – Webba Booking Calendar | 23 | 1,615 | 3,300 | 2k+ | | | Non-prefixed global variable |
| #84 | ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin | 23 | 7,423 | 2,181 | 90k+ | | | Text Domain Mismatch |
| #85 | WP Crowdfunding | 23 | 199 | 1,629 | 2k+ | | | Non-prefixed global variable |
| #86 | WP Mega Menu | 23 | 992 | 792 | 8k+ | | | Non-prefixed global variable |
| #87 | Affiliates Manager | 24 | 1,268 | 653 | 9k+ | | | Unsafe printing function |
| #88 | All-In-One Security (AIOS) – Security and Firewall | 24 | 552 | 1,228 | 1m+ | | | Non-prefixed global variable |
| #89 | TermsFeed AutoTerms: Privacy Policy Generator, Cookie Consent, GDPR, CCPA, Terms & Conditions, Disclaimers, Cookies Policy, EULA | 24 | 939 | 161 | 80k+ | | | Non Singular String Literal Domain |
| #90 | AutomatorWP – Automator plugin for no-code automations, webhooks & custom integrations in WordPress | 24 | 1,705 | 1,393 | 7k+ | | | Text Domain Mismatch |
| #91 | Popup Box – Create Countdown, Coupon, Video, Contact Form Popups | 24 | 482 | 1,253 | 50k+ | | | Non-prefixed global variable |
| #92 | Better Payment – Instant Payments, Donations, Fundraising with Subscriptions & More | 24 | 342 | 930 | 6k+ | | | Non-prefixed global variable |
| #93 | CF7 Apps – Honeypot, Database, Redirection, Webhook, and Addons for Contact Form 7 | 24 | 1,034 | 1,396 | 300k+ | | | Non-prefixed global variable |
| #94 | Customer Reviews for WooCommerce | 24 | 2,206 | 2,443 | 80k+ | | | Output is not escaped |
| #95 | ECPay Ecommerce for WooCommerce | 24 | 491 | 739 | 2k+ | | | Missing nonce verification |
| #96 | Event Tickets and Registration | 24 | 3,415 | 4,210 | 90k+ | | | Non-prefixed global variable |
| #97 | FluentCRM – Email Newsletter, Automation, Email Marketing, Email Campaigns, Optins, Leads, and CRM Solution | 24 | 193 | 747 | 80k+ | | | Direct Query |
| #98 | Mailchimp for WooCommerce | 24 | 523 | 663 | 200k+ | | | Non-prefixed global variable |
| #99 | Receive customer payments on Woocommerce | 24 | 549 | 1,419 | 1k+ | | | Non-prefixed global variable |
| #100 | MT Addons for Elementor | 24 | 3,073 | 1,442 | 2k+ | | | Text Domain Mismatch |