| #101 | Fuse Social Floating Sidebar | 24 | 1,838 | 1,578 | 10k+ | | | Non-prefixed global variable |
| #102 | Grid/List View for WooCommerce | 24 | 1,071 | 556 | 2k+ | | | Output is not escaped |
| #103 | Hummingbird Performance – Cache & Page Speed Optimization for Core Web Vitals | Critical CSS | Minify CSS | Defer CSS Javascript | CDN | 24 | 3,408 | 866 | 70k+ | | | Text Domain Mismatch |
| #104 | Import and export users and customers | 24 | 1,028 | 360 | 70k+ | | | Unsafe printing function |
| #105 | Dynamics 365 Integration | 24 | 383 | 166 | 600 | | | Output is not escaped |
| #106 | LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes | 24 | 407 | 1,192 | 10k+ | | | Non-prefixed global variable |
| #107 | Mailjet Email Marketing | 24 | 435 | 206 | 10k+ | | | Unsafe printing function |
| #108 | My Agile Privacy® – CMP, Cookie Consent & Privacy Tools | 24 | 1,338 | 704 | 7k+ | | | Text Domain Mismatch |
| #109 | Page Builder: Pagelayer – Drag and Drop website builder | 24 | 829 | 569 | 400k+ | | | Output is not escaped |
| #110 | Pagination Styler for WooCommerce | 24 | 794 | 432 | 1k+ | | | Output is not escaped |
| #111 | Premmerce Product Filter for WooCommerce | 24 | 817 | 1,486 | 2k+ | | | Non-prefixed global variable |
| #112 | Product Tabs Manager for WooCommerce | 24 | 634 | 482 | 2k+ | | | Text Domain Mismatch |
| #113 | Products Compare for WooCommerce | 24 | 930 | 668 | 1k+ | | | Output is not escaped |
| #114 | ProfileGrid – User Profiles, Groups and Communities | 24 | 483 | 2,463 | 5k+ | | | Non-prefixed global variable |
| #115 | PublishPress Revisions: Duplicate Posts, Submit, Approve and Schedule Content Changes | 24 | 422 | 601 | 10k+ | | | Missing Translators Comment |
| #116 | RSFirewall! | 24 | 563 | 521 | 4k+ | | | Output is not escaped |
| #117 | RSVP and Event Management | 24 | 345 | 624 | 3k+ | | | Direct Query |
| #118 | Security Plugin, Firewall & Malware Scanner with Auto Removal | 24 | 1,156 | 813 | 40k+ | | | SQL query is not prepared |
| #119 | SEO Engine – Smart SEO with AI, Schema & Redirection for WordPress | 24 | 261 | 314 | 1k+ | | | Direct Query |
| #120 | SEOKEY – Powerful SEO plugin with Expert Insights and SEO Audit | 24 | 605 | 928 | 1k+ | | | Non-prefixed global variable |
| #121 | SEO Ultimate | 24 | 437 | 269 | 10k+ | | | Output is not escaped |
| #122 | Service Box Slider | 24 | 618 | 1,410 | 400 | | | Non-prefixed global variable |
| #123 | Shortcodes Ultimate – Content Elements | 24 | 656 | 1,552 | 400k+ | | | Non-prefixed global variable |
| #124 | Smart Variations Images & Swatches for WooCommerce | 24 | 990 | 1,486 | 1k+ | | | Non-prefixed global variable |
| #125 | Surbma | GDPR Proof Cookie Consent & Notice Bar | 24 | 825 | 1,309 | 500 | | | Non-prefixed global variable |
| #126 | Terms and Conditions Popup for WooCommerce | 24 | 628 | 422 | 1k+ | | | Text Domain Mismatch |
| #127 | Tiered Pricing Table for WooCommerce | 24 | 643 | 2,071 | 10k+ | | | Non-prefixed global variable |
| #128 | User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder | 24 | 666 | 3,404 | 50k+ | | | Non-prefixed global variable |
| #129 | UserFeedback – Create Interactive Feedback Form, User Surveys, and Polls in Seconds | 24 | 441 | 235 | 200k+ | | | Text Domain Mismatch |
| #130 | pensopay Payments | 24 | 396 | 246 | 1k+ | | | Output is not escaped |
| #131 | NextMove Lite – Thank You Page for WooCommerce | 24 | 916 | 857 | 10k+ | | | Non-prefixed global variable |
| #132 | WP Discourse | 24 | 102 | 114 | 1k+ | | | Nonce verification recommended |
| #133 | WP Helper Premium | 24 | 4,000 | 1,590 | 1k+ | | | Text Domain Mismatch |
| #134 | WP Encryption – Lifetime Free SSL Cert & HTTPS, Force SSL / HTTPS Redirect, SSL Security | 24 | 728 | 1,556 | 50k+ | | | Non-prefixed global variable |
| #135 | WP RSS Aggregator – RSS Import, Feed to Post, Autoblogging, AI Content | 24 | 1,774 | 398 | 40k+ | | | Text Domain Mismatch |
| #136 | WP-Stateless – Google Cloud Storage | 24 | 1,036 | 482 | 4k+ | | | Non Singular String Literal Domain |
| #137 | WP Travel Engine – Tour Booking Plugin – Tour Operator Software | 24 | 2,037 | 5,724 | 20k+ | | | Non-prefixed global variable |
| #138 | Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress | 24 | 2,582 | 2,109 | 100k+ | | | Output is not escaped |
| #139 | Photo Engine (Media Organizer & Lightroom) | 24 | 253 | 645 | 2k+ | | | Direct Query |
| #140 | WP Travel Engine – Elementor Widgets | Create Travel Booking Website Using WordPress and Elementor | 24 | 5,907 | 2,136 | 10k+ | | | Text Domain Mismatch |
| #141 | 3DPrint Lite | 25 | 175 | 1,029 | 700 | | | Non-prefixed global variable |
| #142 | Affiliates | 25 | 689 | 1,483 | 2k+ | | | Output is not escaped |
| #143 | AIO Forms – Craft Complex Forms Easily | 25 | 189 | 419 | 700 | | | Mixed line endings |
| #144 | Booking Activities | 25 | 1,036 | 1,477 | 3k+ | | | Output is not escaped |
| #145 | BuddyPress Docs | 25 | 284 | 421 | 6k+ | | | Nonce verification recommended |
| #146 | Bulk Edit and Create User Profiles – WP Sheet Editor | 25 | 995 | 1,001 | 1k+ | | | Text Domain Mismatch |
| #147 | Conditional Payment Methods for WooCommerce | 25 | 548 | 1,398 | 1k+ | | | Non-prefixed global variable |
| #148 | Cryptocurrency Payment Gateway | 25 | 1,963 | 589 | 400 | | | Text Domain Mismatch |
| #149 | Smash Balloon Social Post Feed – Simple Social Feeds for WordPress | 25 | 534 | 994 | 200k+ | | | Output is not escaped |
| #150 | 胖鼠采集(Fat Rat Collect) | 25 | 630 | 190 | 800 | | | Missing Arg Domain |