| #1 | Filter Everything — WordPress & WooCommerce Filters | 20 | 568 | 730 | 50k+ | | Output Not Escaped |
| #2 | Microthemer Lite – Visual Editor to Customize CSS | 20 | 1,004 | 1,699 | 10k+ | | Non Prefixed Variable Found |
| #3 | Duplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More | 21 | 2,572 | 1,277 | 1m+ | | Output Not Escaped |
| #4 | Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program – myCred | 21 | 1,469 | 3,333 | 10k+ | | Non Prefixed Variable Found |
| #5 | Five Star Restaurant Reservations – WordPress Booking Plugin | 21 | 1,099 | 1,147 | 10k+ | | Output Not Escaped |
| #6 | Borderless – Addons and Templates for Elementor | 22 | 438 | 1,388 | 5k+ | | Non Prefixed Variable Found |
| #7 | Clearfy Cache – WordPress optimization plugin, Minify HTML, CSS & JS, Defer | 22 | 2,858 | 1,270 | 50k+ | | Text Domain Mismatch |
| #8 | Five Star Restaurant Menu and Food Ordering | 22 | 752 | 609 | 5k+ | | Output Not Escaped |
| #9 | GeoDirectory – WP Business Directory Plugin and Classified Listings Directory | 22 | 4,462 | 3,972 | 10k+ | | Output Not Escaped |
| #10 | Csomagpontok és Címkék WooCommerce-hez | 22 | 2,001 | 769 | 7k+ | | Text Domain Mismatch |
| #11 | NinjaScanner – Virus & Malware scan | 22 | 596 | 551 | 30k+ | | Non Prefixed Variable Found |
| #12 | Customize Feeds for Twitter | 22 | 92 | 171 | 4k+ | | Non Prefixed Variable Found |
| #13 | URL Shortify – Simple and Easy URL Shortener | 22 | 1,520 | 2,689 | 10k+ | | Non Prefixed Variable Found |
| #14 | WPSSO Core – Complete Schema Markup and Meta Tags | 22 | 1,407 | 412 | 5k+ | | Missing Translators Comment |
| #15 | Content Egg – Affiliate Product Importer & Price Comparison | 23 | 1,209 | 1,234 | 10k+ | | Non Prefixed Variable Found |
| #16 | Disable Bloat for WordPress & WooCommerce | 23 | 863 | 1,325 | 10k+ | | Non Prefixed Variable Found |
| #17 | The GDPR Framework By Data443 | 23 | 1,287 | 517 | 10k+ | | Echo Found |
| #18 | Payment forms, Buy now buttons, and Invoicing System | GetPaid | 23 | 370 | 1,258 | 5k+ | | Non Prefixed Variable Found |
| #19 | MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar | 23 | 4,065 | 488 | 20k+ | | Text Domain Mismatch |
| #20 | ND Shortcodes | 23 | 621 | 2,426 | 20k+ | | Non Prefixed Variable Found |
| #21 | The Events Calendar | 23 | 3,512 | 3,848 | 700k+ | | Text Domain Mismatch |
| #22 | WP Migrate Lite – Migration Made Easy | 23 | 368 | 254 | 200k+ | | Exception Not Escaped |
| #23 | Event Tickets and Registration | 24 | 3,415 | 4,210 | 90k+ | | Non Prefixed Variable Found |
| #24 | Music Player for Elementor – Audio Player & Podcast Player | 24 | 608 | 1,302 | 10k+ | | Non Prefixed Variable Found |
| #25 | PrettyLinks – Affiliate Links, Link Branding, Link Tracking, Marketing and Stripe Payments Plugin | 24 | 449 | 1,137 | 300k+ | | Recommended |
| #26 | reGenerate Thumbnails Advanced | 24 | 220 | 122 | 70k+ | | Unsafe Printing Function |
| #27 | Simple Membership | 24 | 2,373 | 1,789 | 40k+ | | Unsafe Printing Function |
| #28 | Ultimate Addons for Beaver Builder – Lite | 24 | 2,751 | 486 | 20k+ | | Text Domain Mismatch |
| #29 | WCMultiShipping — Mondial Relay, Inpost & Chronopost for WooCommerce | 24 | 731 | 499 | 5k+ | | Output Not Escaped |
| #30 | NextMove Lite – Thank You Page for WooCommerce | 24 | 916 | 857 | 10k+ | | Non Prefixed Variable Found |
| #31 | WP Travel Engine – Elementor Widgets | Create Travel Booking Website Using WordPress and Elementor | 24 | 5,907 | 2,136 | 10k+ | | Text Domain Mismatch |
| #32 | BuddyPress Docs | 25 | 284 | 421 | 7k+ | | Recommended |
| #33 | Smash Balloon Social Post Feed – Simple Social Feeds for WordPress | 25 | 554 | 982 | 200k+ | | Output Not Escaped |
| #34 | Fluid Checkout for WooCommerce – Lite | 25 | 370 | 841 | 20k+ | | Non Prefixed Hookname Found |
| #35 | FunnelKit – Funnel Builder for WooCommerce Checkout | 25 | 3,278 | 2,574 | 30k+ | | Text Domain Mismatch |
| #36 | VikBooking Hotel Booking Engine & PMS | 25 | 13,232 | 8,312 | 8k+ | | Output Not Escaped |
| #37 | weForms – Easy Drag & Drop Contact Form Builder For WordPress | 25 | 916 | 450 | 10k+ | | Output Not Escaped |
| #38 | Pay with Vipps and MobilePay for WooCommerce | 25 | 845 | 509 | 5k+ | | Output Not Escaped |
| #39 | Kadence Central – Site Management, Backups, Security, and Reporting | 26 | 462 | 213 | 30k+ | | Text Domain Mismatch |
| #40 | Related Posts Thumbnails Plugin for WordPress | 26 | 382 | 198 | 20k+ | | Output Not Escaped |
| #41 | Interactive Image Map Plugin – Draw Attention | 29 | 620 | 227 | 20k+ | | Output Not Escaped |
| #42 | Exclusive Addons for Elementor | 29 | 3,630 | 266 | 50k+ | | Text Domain Mismatch |
| #43 | Classified Listing Toolkits | 30 | 43 | 1,859 | 4k+ | | Non Prefixed Variable Found |
| #44 | WPZOOM Addons for Beaver Builder | 30 | 2,216 | 152 | 4k+ | | Text Domain Mismatch |
| #45 | reCAPTCHA in WP comments form | 31 | 264 | 60 | 8k+ | | Output Not Escaped |
| #46 | Stackable – Page Builder Gutenberg Blocks | 31 | 477 | 90 | 100k+ | | Non Singular String Literal Domain |
| #47 | Hyyan WooCommerce Polylang Integration | 33 | 141 | 220 | 9k+ | | Recommended |
| #48 | One User Avatar | User Profile Picture | 34 | 68 | 190 | 100k+ | | Non Prefixed Variable Found |
| #49 | Cookies and Content Security Policy | 35 | 261 | 412 | 10k+ | | Output Not Escaped |
| #50 | List category posts | 36 | 162 | 17 | 80k+ | | Output Not Escaped |