| #51 | Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program – myCred | 21 | 1,478 | 3,337 | 10k+ | | | Non-prefixed global variable |
| #52 | Oasis Workflow | 21 | 775 | 575 | 700 | | | Text Domain Mismatch |
| #53 | Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction | 21 | 1,953 | 5,297 | 10k+ | | | Non-prefixed hook name |
| #54 | PeachPay — Payments & Express Checkout for WooCommerce (supports Stripe, PayPal, Square, Authorize.net, NMI) | 21 | 485 | 813 | 300 | | | Missing direct file access protection |
| #55 | User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor | 21 | 703 | 1,463 | 40k+ | | | Missing Translators Comment |
| #56 | PublishPress Planner – Editorial Calendar, Marketing Content, Kanban Board | 21 | 603 | 890 | 6k+ | | | Output is not escaped |
| #57 | Five Star Restaurant Reservations – WordPress Booking Plugin | 21 | 1,101 | 1,159 | 10k+ | | | Output is not escaped |
| #58 | Royal Addons for Elementor – Addons and Templates Kit for Elementor | 21 | 13,011 | 2,530 | 600k+ | | | Text Domain Mismatch |
| #59 | Accept Stripe Payments | 21 | 373 | 892 | 20k+ | | | Missing nonce verification |
| #60 | TotalPoll for Polls and Contests | 21 | 1,366 | 155 | 1k+ | | | Text Domain Mismatch |
| #61 | Trace My IP – Visitor IP Tracker, Stats Analytics & Page Views Counter with Email Alerts | 21 | 871 | 338 | 1k+ | | | wp function not compatible with requires wp |
| #62 | UPC/EAN/GTIN Barcode Generator/Importer | 21 | 776 | 311 | 500 | | | Exception output is not escaped |
| #63 | URL Shortify – Simple and Easy URL Shortener | 21 | 1,511 | 2,669 | 10k+ | | | Non-prefixed global variable |
| #64 | Buckaroo Woocommerce Payments Plugin | 21 | 638 | 321 | 2k+ | | | Exception output is not escaped |
| #65 | Paysera Payment Gateway for WooCommerce | 21 | 1,868 | 196 | 7k+ | | | Exception output is not escaped |
| #66 | WP-Lister Lite for eBay | 21 | 6,696 | 5,128 | 2k+ | | | Output is not escaped |
| #67 | WP phpMyAdmin | 21 | 4,528 | 6,435 | 50k+ | | | Missing Arg Domain |
| #68 | wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin | 21 | 1,812 | 1,432 | 70k+ | | | Output is not escaped |
| #69 | WP Extended – The Ultimate WordPress Toolkit | 21 | 1,253 | 398 | 600 | | | Non Singular String Literal Domain |
| #70 | WPScan – WordPress Security Scanner | 21 | 527 | 265 | 8k+ | | | Text Domain Mismatch |
| #71 | WebTotem Security | 21 | 1,110 | 213 | 900 | | | Text Domain Mismatch |
| #72 | Advanced Classifieds & Directory Pro | 22 | 1,229 | 3,512 | 2k+ | | | Non-prefixed global variable |
| #73 | All-in-One Video Gallery – Video Player & Galleries for YouTube, Vimeo & Self-Hosted Videos | 22 | 912 | 2,885 | 20k+ | | | Non-prefixed global variable |
| #74 | Borderless – Addons and Templates for Elementor | 22 | 438 | 1,388 | 5k+ | | | Non-prefixed global variable |
| #75 | Cart Lift – Abandoned Cart Recovery for WooCommerce and EDD | 22 | 669 | 769 | 1k+ | | | Output is not escaped |
| #76 | Clearfy Cache – WordPress optimization plugin, Minify HTML, CSS & JS, Defer | 22 | 2,854 | 1,269 | 50k+ | | | Text Domain Mismatch |
| #77 | Code Profiler – WordPress Performance Profiling and Debugging Made Easy | 22 | 265 | 400 | 8k+ | | | Non-prefixed global variable |
| #78 | RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login | 22 | 3,652 | 5,134 | 8k+ | | | Non-prefixed global variable |
| #79 | Database Access with Adminer | 22 | 983 | 2,553 | 1k+ | | | Non-prefixed global variable |
| #80 | Directorist: AI-Powered Business Directory, Listings & Classified Ads | 22 | 560 | 2,202 | 20k+ | | | Non-prefixed global variable |
| #81 | DirectoryPress – Business Directory And Classified Ad Listing | 22 | 4,787 | 2,795 | 700 | | | Text Domain Mismatch |
| #82 | Download Manager | 22 | 2,513 | 1,459 | 100k+ | | | Output is not escaped |
| #83 | E2Pdf – Export Pdf Tool for WordPress | 22 | 1,081 | 847 | 10k+ | | | Unsafe printing function |
| #84 | easyReservations | 22 | 5,307 | 2,480 | 800 | | | Text Domain Mismatch |
| #85 | Employee Spotlight – Team Member Showcase & Meet the Team Plugin | 22 | 247 | 689 | 400 | | | Non-prefixed hook name |
| #86 | Estatik Real Estate Plugin | 22 | 3,084 | 325 | 10k+ | | | Text Domain Mismatch |
| #87 | Events Manager – Calendar, Bookings, Tickets, and more! | 22 | 4,716 | 5,690 | 70k+ | | | Output is not escaped |
| #88 | Notification Bar, Announcement and Cookie Notice WordPress Plugin – FooBar | 22 | 1,321 | 1,371 | 3k+ | | | Non-prefixed global variable |
| #89 | Five Star Restaurant Menu and Food Ordering | 22 | 754 | 610 | 5k+ | | | Output is not escaped |
| #90 | FunnelKit Payment Gateway for Stripe WooCommerce | 22 | 244 | 321 | 20k+ | | | Input is not sanitized |
| #91 | GeoDirectory – WP Business Directory Plugin and Classified Listings Directory | 22 | 4,465 | 3,976 | 10k+ | | | Output is not escaped |
| #92 | Happy Addons for Elementor | 22 | 652 | 446 | 400k+ | | | Output is not escaped |
| #93 | Happyforms – Form Builder for WordPress: Drag & Drop Contact Forms, Surveys, Payments & Multipurpose Forms | 22 | 1,031 | 722 | 20k+ | | | Unsafe printing function |
| #94 | HeadSpace2 SEO | 22 | 940 | 360 | 3k+ | | | Text Domain Mismatch |
| #95 | Számlázz.hu integráció WooCommerce-hez | 22 | 1,169 | 460 | 7k+ | | | Text Domain Mismatch |
| #96 | JCC Payment Gateway for Woocommerce | 22 | 2,273 | 1,136 | 600 | | | Text Domain Mismatch |
| #97 | MailOptin – Popup, Optin Forms & Email Newsletters for Mailchimp, HubSpot, AWeber Etc. | 22 | 2,625 | 2,458 | 10k+ | | | Output is not escaped |
| #98 | MarketKing — Ultimate WooCommerce Multivendor Marketplace Solution | 22 | 1,131 | 1,846 | 800 | | | Non-prefixed global variable |
| #99 | Search Atlas SEO – Premier SEO Plugin for One-Click WP Publishing & Integrated AI Optimization | 22 | 1,306 | 2,818 | 8k+ | | | Output is not escaped |
| #100 | Modula Image Gallery – Photo Grid & Video Gallery | 22 | 474 | 437 | 100k+ | | | Text Domain Mismatch |