| #51 | Frontend Admin by DynamiApps | 22 | 5,922 | 3,208 | 10k+ | | Text Domain Mismatch |
| #52 | Advanced Ads – Ad Manager & AdSense | 22 | 578 | 734 | 100k+ | | Non-prefixed global variable |
| #53 | Ajax Load More – Infinite Scroll, Load More, & Lazy Load | 22 | 641 | 595 | 40k+ | | Unsafe printing function |
| #54 | All-in-One Video Gallery | 22 | 911 | 2,892 | 20k+ | | Non-prefixed global variable |
| #55 | Shortcodes and extra features for Phlox theme | 22 | 413 | 426 | 90k+ | | Output is not escaped |
| #56 | Knowledge Base documentation & wiki plugin – BasePress Docs | 22 | 671 | 1,767 | 2k+ | | Non-prefixed global variable |
| #57 | Borderless – Addons and Templates for Elementor | 22 | 438 | 1,388 | 5k+ | | Non-prefixed global variable |
| #58 | Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots | 22 | 1,604 | 2,019 | 10k+ | | Direct Query |
| #59 | BuddyPress | 22 | 583 | 9,008 | 100k+ | | Non-prefixed function |
| #60 | Cozy Blocks – Page Builder for Gutenberg Editor & FSE with 500+ Patterns, 57 Blocks & Templates | 22 | 2,167 | 4,175 | 7k+ | | Non-prefixed global variable |
| #61 | RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login | 22 | 3,654 | 5,061 | 8k+ | | Non-prefixed global variable |
| #62 | WP Customer Area | 22 | 3,308 | 941 | 10k+ | | Text Domain Mismatch |
| #63 | Directorist: AI-Powered Business Directory, Listings & Classified Ads | 22 | 443 | 2,129 | 20k+ | | Non-prefixed global variable |
| #64 | Download Manager | 22 | 2,290 | 1,301 | 100k+ | | Output is not escaped |
| #65 | E2Pdf – Export Pdf Tool for WordPress | 22 | 1,075 | 836 | 10k+ | | Unsafe printing function |
| #66 | Easy Social Feed – Social Photos Gallery and Post Feed for WordPress | 22 | 1,567 | 1,277 | 30k+ | | Non-prefixed global variable |
| #67 | EleSpare – News, Magazine and Blog Addons for Elementor | 22 | 733 | 1,423 | 10k+ | | Non-prefixed global variable |
| #68 | Estatik Real Estate Plugin | 22 | 3,049 | 325 | 10k+ | | Text Domain Mismatch |
| #69 | Events Manager – Calendar, Bookings, Tickets, and more! | 22 | 4,722 | 5,621 | 70k+ | | Output is not escaped |
| #70 | Falang multilanguage for WordPress | 22 | 716 | 769 | 1k+ | | Output is not escaped |
| #71 | FireBox Popups – Increase Sales and Grow Your Email List | 22 | 153 | 812 | 7k+ | | Non-prefixed global variable |
| #72 | GeoDirectory – WP Business Directory Plugin and Classified Listings Directory | 22 | 4,462 | 3,972 | 10k+ | | Output is not escaped |
| #73 | Gutenberg | 22 | 628 | 342 | 300k+ | | Missing direct file access protection |
| #74 | HeadSpace2 SEO | 22 | 940 | 360 | 3k+ | | Text Domain Mismatch |
| #75 | Csomagpontok és Címkék WooCommerce-hez | 22 | 2,001 | 769 | 7k+ | | Text Domain Mismatch |
| #76 | InfiniteWP Client | 22 | 2,286 | 1,812 | 200k+ | | Exception output is not escaped |
| #77 | LearnPress – WordPress LMS Plugin for Create and Sell Online Courses | 22 | 2,361 | 3,384 | 70k+ | | Non-prefixed global variable |
| #78 | Leyka | 22 | 253 | 3,445 | 2k+ | | Request data is not unslashed |
| #79 | Molongui Authorship – Author Boxes, Guest Authors & Co-Authors for WordPress | 22 | 919 | 1,230 | 10k+ | | Output is not escaped |
| #80 | Motors – Car Dealership & Classified Listings Plugin | 22 | 5,340 | 5,958 | 9k+ | | Text Domain Mismatch |
| #81 | Newsletters | 22 | 2,968 | 2,248 | 2k+ | | Text Domain Mismatch |
| #82 | oik | 22 | 489 | 180 | 2k+ | | Non Singular String Literal Domain |
| #83 | Post SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App | 22 | 1,581 | 2,326 | 300k+ | | Non-prefixed global variable |
| #84 | Secure Custom Fields | 22 | 241 | 1,369 | 80k+ | | Non-prefixed function |
| #85 | Slick Popup: Contact Form 7 Popup Plugin | 22 | 2,322 | 316 | 2k+ | | Text Domain Mismatch |
| #86 | Slim Jetpack | 22 | 2,586 | 1,947 | 2k+ | | Text Domain Mismatch |
| #87 | NextScripts: Social Networks Auto-Poster | 22 | 2,408 | 1,133 | 30k+ | | Output is not escaped |
| #88 | SportsPress – Sports Club & League Manager | 22 | 460 | 2,242 | 10k+ | | Non-prefixed global variable |
| #89 | Swift Performance Lite | 22 | 2,346 | 1,325 | 7k+ | | Text Domain Mismatch |
| #90 | Tag Groups is the Advanced Way to Display Your Taxonomy Terms | 22 | 575 | 465 | 3k+ | | Unsafe printing function |
| #91 | ThemeHunk Customizer | 22 | 3,969 | 582 | 7k+ | | Text Domain Mismatch |
| #92 | Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin | 22 | 530 | 2,334 | 40k+ | | Direct Query |
| #93 | WCFM Marketplace – Multivendor Marketplace for WooCommerce | 22 | 1,937 | 1,969 | 10k+ | | Non-prefixed global variable |
| #94 | WCFM Membership – WooCommerce Memberships for Multivendor Marketplace | 22 | 559 | 675 | 10k+ | | Non-prefixed global variable |
| #95 | WooCommerce | 22 | 1,355 | 6,129 | 7m+ | | Non-prefixed global variable |
| #96 | Advanced AJAX Product Filters | 22 | 2,683 | 1,205 | 50k+ | | Text Domain Mismatch |
| #97 | CoDesigner – All in One Elementor WooCommerce Builder | 22 | 4,131 | 774 | 5k+ | | Text Domain Mismatch |
| #98 | WP Fusion Lite – Marketing Automation and CRM Integration for WordPress | 22 | 276 | 683 | 5k+ | | Nonce verification recommended |
| #99 | User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration | 22 | 287 | 1,432 | 20k+ | | Non-prefixed global variable |
| #100 | WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell | 22 | 5,996 | 2,790 | 5k+ | | Text Domain Mismatch |