| #101 | YITH WooCommerce Ajax Search | 22 | 408 | 1,659 | 30k+ | | Non-prefixed global variable |
| #102 | Advanced Custom Fields: Extended | 23 | 1,885 | 329 | 100k+ | | Text Domain Mismatch |
| #103 | Advanced Custom Fields (ACF®) | 23 | 2,456 | 1,218 | 2m+ | | Text Domain Mismatch |
| #104 | Advanced Product Labels for WooCommerce | 23 | 921 | 559 | 20k+ | | Text Domain Mismatch |
| #105 | AI Engine – The Chatbot, AI Framework & MCP for WordPress | 23 | 413 | 559 | 100k+ | | error log error log |
| #106 | Affiliate Super Assistent | 23 | 1,280 | 267 | 2k+ | | Text Domain Mismatch |
| #107 | Autoptimize | 23 | 288 | 191 | 800k+ | | Output is not escaped |
| #108 | Kadence Security – Password, Two Factor Authentication, and Brute Force Protection | 23 | 1,053 | 967 | 700k+ | | Missing Translators Comment |
| #109 | Brave Popup Builder – Popup, Optins, Lead Generation, Survey & Interactive Content | 23 | 238 | 294 | 20k+ | | error log print r |
| #110 | BuddyDrive | 23 | 722 | 1,597 | 1k+ | | Non-prefixed global variable |
| #111 | Business Directory Plugin – Easy Listing Directories for WordPress | 23 | 611 | 1,058 | 10k+ | | Non-prefixed global variable |
| #112 | Captivate Sync | 23 | 174 | 557 | 1k+ | | Non-prefixed global variable |
| #113 | Cart Notices for WooCommerce | 23 | 650 | 471 | 2k+ | | Text Domain Mismatch |
| #114 | Classified Listing – AI-Powered Classified ads & Business Directory | 23 | 155 | 1,861 | 9k+ | | Non-prefixed global variable |
| #115 | Content Views – Post Grid & Filter, Recent Posts, Category Posts … (Shortcode, Gutenberg Blocks, and Widgets for Elementor) | 23 | 306 | 587 | 100k+ | | Dynamic hook name |
| #116 | Dokan: AI Powered WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy | 23 | 170 | 821 | 40k+ | | Non-prefixed global variable |
| #117 | Easy Digital Downloads – eCommerce Payments and Subscriptions made easy | 23 | 3,723 | 10,283 | 40k+ | | Non-prefixed namespace |
| #118 | Ecwid by Lightspeed Ecommerce Shopping Cart | 23 | 339 | 307 | 20k+ | | Missing direct file access protection |
| #119 | ElementsReady Addons for Elementor | 23 | 231 | 666 | 3k+ | | Non-prefixed global variable |
| #120 | Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI | 23 | 395 | 1,342 | 90k+ | | Non-prefixed global variable |
| #121 | Front End PM | 23 | 978 | 2,264 | 5k+ | | Non-prefixed global variable |
| #122 | Futurio Extra | 23 | 787 | 205 | 20k+ | | Text Domain Mismatch |
| #123 | FV Flowplayer Video Player | 23 | 1,311 | 1,454 | 20k+ | | Output is not escaped |
| #124 | GAinWP Google Analytics Integration for WordPress | 23 | 525 | 176 | 8k+ | | Output is not escaped |
| #125 | GamiPress – Gamification plugin to reward points, achievements, badges & ranks in WordPress | 23 | 3,662 | 2,971 | 10k+ | | Output is not escaped |
| #126 | Gmedia Photo Gallery | 23 | 350 | 1,121 | 7k+ | | Non-prefixed global variable |
| #127 | Groundhogg — CRM, Newsletters, and Marketing Automation | 23 | 152 | 950 | 2k+ | | Non-prefixed global variable |
| #128 | Happy Addons for Elementor | 23 | 573 | 444 | 400k+ | | Output is not escaped |
| #129 | Hunk Companion | 23 | 2,544 | 687 | 6k+ | | Text Domain Mismatch |
| #130 | Iks Menu – WordPress Category Accordion Menu & FAQs | 23 | 615 | 1,293 | 10k+ | | Non-prefixed global variable |
| #131 | Payment forms, Buy now buttons, and Invoicing System | GetPaid | 23 | 370 | 1,258 | 5k+ | | Non-prefixed global variable |
| #132 | Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress | 23 | 91 | 693 | 300k+ | | Non-prefixed namespace |
| #133 | Jetpack – WP Security, Backup, Speed, & Growth | 23 | 2,821 | 1,303 | 3m+ | | Text Domain Mismatch |
| #134 | Justified Gallery | 23 | 589 | 1,417 | 9k+ | | Non-prefixed global variable |
| #135 | King Addons for Elementor – 80+ Elementor Widgets, 4 000+ Elementor Templates, WooCommerce, Mega Menu, Popup Builder | 23 | 1,837 | 3,878 | 10k+ | | Non-prefixed global variable |
| #136 | KiviCare – Clinic & Patient Management System (EHR) | 23 | 206 | 850 | 2k+ | | Direct Query |
| #137 | Masteriyo LMS – LMS Course Builder, Quizzes & Certificates | 23 | 197 | 1,748 | 5k+ | | Non-prefixed global variable |
| #138 | Master Addons For Elementor – Widgets, Extensions, Theme Builder, Popup Builder & Template Kits | 23 | 525 | 1,541 | 30k+ | | Non-prefixed global variable |
| #139 | MasterStudy LMS WordPress Plugin – for Online Courses and Education | 23 | 1,419 | 4,875 | 10k+ | | Non-prefixed global variable |
| #140 | Media Library Assistant | 23 | 1,144 | 3,943 | 70k+ | | Nonce verification recommended |
| #141 | MediaPress | 23 | 904 | 583 | 4k+ | | Output is not escaped |
| #142 | MotoPress Appointment Booking | 23 | 2,362 | 857 | 2k+ | | Text Domain Mismatch |
| #143 | MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar | 23 | 4,065 | 488 | 20k+ | | Text Domain Mismatch |
| #144 | MStore API – Create Native Android & iOS Apps On The Cloud | 23 | 618 | 764 | 3k+ | | SQL query is not prepared |
| #145 | News Kit Addons For Elementor | 23 | 65 | 419 | 4k+ | | Post Not In exclude |
| #146 | Next Active Directory Integration | 23 | 683 | 284 | 2k+ | | Exception output is not escaped |
| #147 | Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery | 23 | 2,119 | 986 | 400k+ | | Text Domain Mismatch |
| #148 | Ninja Forms – The Contact Form Builder That Grows With You | 23 | 754 | 1,525 | 600k+ | | Nonce verification recommended |
| #149 | Issues and Series for Newspapers, Magazines, Publishers, Writers | 23 | 346 | 710 | 2k+ | | Nonce verification recommended |
| #150 | Postie | 23 | 407 | 261 | 10k+ | | Output is not escaped |