| #101 | Premmerce Product Filter for WooCommerce | 24 | 817 | 1,486 | 2k+ | | Non-prefixed global variable |
| #102 | Product Tabs Manager for WooCommerce | 24 | 646 | 479 | 2k+ | | Text Domain Mismatch |
| #103 | ProfileGrid – User Profiles, Groups and Communities | 24 | 473 | 2,463 | 6k+ | | Non-prefixed global variable |
| #104 | PublishPress Revisions: Duplicate Posts, Submit, Approve and Schedule Content Changes | 24 | 414 | 573 | 10k+ | | Missing Translators Comment |
| #105 | RSFirewall! | 24 | 563 | 521 | 4k+ | | Output is not escaped |
| #106 | Security Plugin, Firewall & Malware Scanner with Auto Removal | 24 | 1,192 | 770 | 30k+ | | Output is not escaped |
| #107 | SEO Engine – Smart SEO with AI, Schema & Redirection for WordPress | 24 | 236 | 304 | 1k+ | | Direct Query |
| #108 | SEOKEY – Powerful SEO plugin with Expert Insights and SEO Audit | 24 | 605 | 928 | 1k+ | | Non-prefixed global variable |
| #109 | SEO Ultimate | 24 | 437 | 269 | 20k+ | | Output is not escaped |
| #110 | Shortcodes Ultimate – Content Elements | 24 | 656 | 1,552 | 400k+ | | Non-prefixed global variable |
| #111 | Simple Social Media Share Buttons – Social Sharing for Everyone | 24 | 468 | 101 | 20k+ | | Output is not escaped |
| #112 | Smart Variations Images & Swatches for WooCommerce | 24 | 990 | 1,486 | 2k+ | | Non-prefixed global variable |
| #113 | Sugar Calendar – Events Calendar, Event Tickets, and Events Management Platform | 24 | 428 | 956 | 10k+ | | Output is not escaped |
| #114 | Terms and Conditions Popup for WooCommerce | 24 | 644 | 435 | 1k+ | | Text Domain Mismatch |
| #115 | Tiered Pricing Table for WooCommerce | 24 | 658 | 1,881 | 10k+ | | Non-prefixed global variable |
| #116 | Ultimate Maps by Supsystic | 24 | 1,034 | 374 | 10k+ | | Non Singular String Literal Domain |
| #117 | User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder | 24 | 664 | 3,318 | 60k+ | | Non-prefixed global variable |
| #118 | Enhanced Ecommerce Google Analytics for WooCommerce | 24 | 771 | 1,480 | 2k+ | | Non-prefixed global variable |
| #119 | Flat Rate Shipping Method for WooCommerce | 24 | 1,238 | 1,772 | 5k+ | | Non-prefixed global variable |
| #120 | pensopay Payments | 24 | 397 | 246 | 2k+ | | Output is not escaped |
| #121 | NextMove Lite – Thank You Page for WooCommerce | 24 | 916 | 857 | 10k+ | | Non-prefixed global variable |
| #122 | WP Hotel Booking | 24 | 1,250 | 1,555 | 7k+ | | Non-prefixed global variable |
| #123 | WP RSS Aggregator – RSS Import, Feed to Post, Autoblogging, AI Content | 24 | 1,775 | 393 | 40k+ | | Text Domain Mismatch |
| #124 | WP-Stateless – Google Cloud Storage | 24 | 1,036 | 482 | 4k+ | | Non Singular String Literal Domain |
| #125 | WP Travel Engine – Tour Booking Plugin – Tour Operator Software | 24 | 2,010 | 5,688 | 20k+ | | Non-prefixed global variable |
| #126 | Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress | 24 | 2,576 | 2,103 | 100k+ | | Output is not escaped |
| #127 | WP Travel Engine – Elementor Widgets | Create Travel Booking Website Using WordPress and Elementor | 24 | 5,907 | 2,136 | 10k+ | | Text Domain Mismatch |
| #128 | Affiliates | 25 | 689 | 1,483 | 2k+ | | Output is not escaped |
| #129 | Animated Number Counters | 25 | 408 | 1,949 | 2k+ | | Non-prefixed global variable |
| #130 | Booking Activities | 25 | 1,036 | 1,469 | 3k+ | | Output is not escaped |
| #131 | BuddyPress Docs | 25 | 284 | 421 | 7k+ | | Nonce verification recommended |
| #132 | Conditional Payment Methods for WooCommerce | 25 | 548 | 1,398 | 1k+ | | Non-prefixed global variable |
| #133 | Smash Balloon Social Post Feed – Simple Social Feeds for WordPress | 25 | 554 | 982 | 200k+ | | Output is not escaped |
| #134 | FlatPM – Ad Manager, AdSense and Custom Code | 25 | 3,017 | 557 | 10k+ | | Text Domain Mismatch |
| #135 | WPBruiser {no- Captcha anti-Spam} | 25 | 646 | 259 | 10k+ | | Non Singular String Literal Domain |
| #136 | IP Location Block | 25 | 521 | 624 | 10k+ | | Output is not escaped |
| #137 | Media Cleaner: Clean your WordPress! | 25 | 151 | 391 | 90k+ | | Direct Query |
| #138 | NotificationX – FOMO, Live Sales Notification, WooCommerce Sales Popup, GDPR, Social Proof, Announcement Banner & Floating Notification Bar | 25 | 257 | 397 | 40k+ | | Non-prefixed hook name |
| #139 | Spexo Addons for Elementor – Elementor Widgets, Mega Menu, Popup Builder, Template Kits and Starter Templates for Elementor | 25 | 9 | 981 | 5k+ | | Non-prefixed global variable |
| #140 | BerqWP – Automatic WordPress Website Speed Optimization | 25 | 198 | 501 | 3k+ | | Non-prefixed global variable |
| #141 | Social Media Share Buttons & Social Sharing Icons | 25 | 2,433 | 1,383 | 100k+ | | Unsafe printing function |
| #142 | VikBooking Hotel Booking Engine & PMS | 25 | 13,232 | 8,312 | 8k+ | | Output is not escaped |
| #143 | weForms – Easy Drag & Drop Contact Form Builder For WordPress | 25 | 916 | 450 | 10k+ | | Output is not escaped |
| #144 | Secure Gateway for Authorize.net and WooCommerce by Pledged Plugins | 25 | 907 | 1,418 | 10k+ | | Non-prefixed global variable |
| #145 | Wordfence Login Security | 25 | 248 | 418 | 70k+ | | Output is not escaped |
| #146 | WP Encryption – One Click Free SSL Certificate & SSL / HTTPS Redirect, Security & SSL Scan | 25 | 727 | 1,554 | 50k+ | | Non-prefixed global variable |
| #147 | Perfect Images: Regenerate Thumbnails, Image Sizes, WebP & AVIF | 25 | 154 | 118 | 60k+ | | Non-prefixed global variable |
| #148 | WP Statistics – Simple, privacy-friendly Google Analytics alternative | 25 | 610 | 2,465 | 600k+ | | Non-prefixed global variable |
| #149 | WP Super Cache | 25 | 800 | 989 | 1m+ | | Output is not escaped |
| #150 | Video Gallery – YouTube Gallery, Playlist & Video Grid | 25 | 275 | 1,070 | 2k+ | | Non-prefixed hook name |