| #1 | Pix por Piggly (para Woocommerce) | 20 | 547 | 195 | 4k+ | | Exception Not Escaped |
| #2 | CartFlows – Funnel Builder & Checkout Plugin for WooCommerce | 21 | 461 | 614 | 200k+ | | Text Domain Mismatch |
| #3 | Wordfence Security – Firewall, Malware Scan, and Login Security | 21 | 1,592 | 2,973 | 5m+ | | Output Not Escaped |
| #4 | WPScan – WordPress Security Scanner | 21 | 527 | 265 | 8k+ | | Text Domain Mismatch |
| #5 | IMPress for IDX Broker | 22 | 1,085 | 636 | 7k+ | | Text Domain Mismatch |
| #6 | Post SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App | 22 | 1,581 | 2,326 | 300k+ | | Non Prefixed Variable Found |
| #7 | Seraphinite Accelerator | 22 | 594 | 255 | 50k+ | | Output Not Escaped |
| #8 | SportsPress – Sports Club & League Manager | 22 | 460 | 2,242 | 10k+ | | Non Prefixed Variable Found |
| #9 | Tag Groups is the Advanced Way to Display Your Taxonomy Terms | 22 | 575 | 465 | 3k+ | | Unsafe Printing Function |
| #10 | 10Web Booster – Website speed optimization, Cache & Page Speed optimizer | 22 | 513 | 601 | 80k+ | | Non Prefixed Variable Found |
| #11 | CoDesigner – All in One Elementor WooCommerce Builder | 22 | 4,131 | 774 | 5k+ | | Text Domain Mismatch |
| #12 | User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration | 22 | 287 | 1,432 | 20k+ | | Non Prefixed Variable Found |
| #13 | Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder | 23 | 4,746 | 1,279 | 30k+ | | Non Singular String Literal Domain |
| #14 | GamiPress – Gamification plugin to reward points, achievements, badges & ranks in WordPress | 23 | 3,662 | 2,971 | 10k+ | | Output Not Escaped |
| #15 | Happy Addons for Elementor | 23 | 573 | 444 | 400k+ | | Output Not Escaped |
| #16 | Link Whisper Free | 23 | 3,882 | 5,303 | 30k+ | | Text Domain Mismatch |
| #17 | Media Library Assistant | 23 | 1,144 | 3,943 | 70k+ | | Recommended |
| #18 | MediaPress | 23 | 904 | 583 | 4k+ | | Output Not Escaped |
| #19 | Photo Gallery by 10Web – Mobile-Friendly Image Gallery | 23 | 4,159 | 1,553 | 100k+ | | Output Not Escaped |
| #20 | Tag, Category, and Taxonomy Manager – Autotagger Automatically Add Terms | 23 | 405 | 869 | 50k+ | | Recommended |
| #21 | Slider by 10Web – Responsive Image Slider | 23 | 5,814 | 976 | 10k+ | | Output Not Escaped |
| #22 | Travelpayouts | 23 | 769 | 110 | 6k+ | | Output Not Escaped |
| #23 | Shield Security – Smart Bot Blocking, Brute-Force Login Protection & File Scanning | 23 | 1,118 | 202 | 40k+ | | Missing Translators Comment |
| #24 | WP Delicious – Recipe Plugin for Food Bloggers (formerly Delicious Recipes) | 24 | 845 | 2,665 | 4k+ | | Non Prefixed Variable Found |
| #25 | Email Subscribers & Newsletters – Email Marketing, Post Notifications & Newsletter Plugin for WordPress | 24 | 652 | 1,495 | 60k+ | | Non Prefixed Hookname Found |
| #26 | Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns | 24 | 112 | 632 | 200k+ | | Non Prefixed Variable Found |
| #27 | Simple Calendar – Google Calendar Plugin | 24 | 2,035 | 591 | 50k+ | | missing direct file access protection |
| #28 | SEO Ultimate | 24 | 437 | 269 | 20k+ | | Output Not Escaped |
| #29 | Stripe Payment Forms by WP Simple Pay – Accept Credit Card Payments + Subscriptions with Stripe | 24 | 634 | 652 | 9k+ | | Exception Not Escaped |
| #30 | SureForms – Drag & Drop Contact Form & Form Builder, Payment Form, Survey, Quiz & Calculator | 24 | 351 | 250 | 500k+ | | Text Domain Mismatch |
| #31 | WP RSS Aggregator – RSS Import, Feed to Post, Autoblogging, AI Content | 24 | 1,775 | 393 | 40k+ | | Text Domain Mismatch |
| #32 | WP Travel Engine – Elementor Widgets | Create Travel Booking Website Using WordPress and Elementor | 24 | 5,907 | 2,136 | 10k+ | | Text Domain Mismatch |
| #33 | PublishPress Capabilities – User Role Editor, Access Permissions, User Capabilities, Admin Menus | 25 | 362 | 1,586 | 100k+ | | Non Prefixed Variable Found |
| #34 | Independent Analytics – WordPress Analytics Plugin | 25 | 1,148 | 2,293 | 100k+ | | Non Prefixed Variable Found |
| #35 | Themesflat Addons For Elementor | 28 | 714 | 227 | 40k+ | | Output Not Escaped |
| #36 | 10WebSocial | 28 | 584 | 185 | 10k+ | | Unsafe Printing Function |
| #37 | DEPRECATED – Shipmondo – A complete shipping solution for WooCommerce | 32 | 166 | 119 | 5k+ | | Output Not Escaped |
| #38 | PublishPress Checklists: Pre-Publishing Approval Checklist – Validate Post Requirements | 33 | 140 | 182 | 3k+ | | Missing Translators Comment |
| #39 | Cornerstone | 34 | 161 | 174 | 30k+ | | Recommended |
| #40 | Gum Addon for Elementor | 35 | 660 | 72 | 50k+ | | Text Domain Mismatch |
| #41 | ShopEngine Elementor WooCommerce Builder Addon – All in One WooCommerce Solution | 36 | 63 | 667 | 100k+ | | Non Prefixed Variable Found |
| #42 | WP fail2ban Blocklist | 36 | 61 | 63 | 3k+ | | Not Prepared |
| #43 | Ultimate Tag Cloud Widget | 37 | 715 | 16 | 4k+ | | Output Not Escaped |
| #44 | QR Redirector | 39 | 48 | 54 | 4k+ | | Output Not Escaped |
| #45 | Reusable Blocks Extended | 42 | 38 | 15 | 20k+ | | Output Not Escaped |
| #46 | FakerPress | 53 | 66 | 152 | 10k+ | | Non Prefixed Variable Found |
| #47 | Simple Blog Stats | 53 | 25 | 76 | 4k+ | | Non Prefixed Function Found |