| #101 | Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery | 23 | 2,129 | 993 | 400k+ | | | Text Domain Mismatch |
| #102 | Photo Gallery by 10Web – Mobile-Friendly Image Gallery | 23 | 4,159 | 1,553 | 100k+ | | | Output is not escaped |
| #103 | PowerPress Podcasting plugin by Blubrry | 23 | 4,807 | 2,394 | 20k+ | | | Output is not escaped |
| #104 | Pricing Table by Supsystic | 23 | 1,299 | 447 | 10k+ | | | Non Singular String Literal Domain |
| #105 | Print Anywhere & Create PDFs of Order Receipts, Invoices, Labels & More. | 23 | 1,485 | 444 | 1k+ | | | Text Domain Mismatch |
| #106 | Radio Station by netmix® – Manage and play your Show Schedule in WordPress! | 23 | 934 | 3,619 | 1k+ | | | Non-prefixed global variable |
| #107 | Request a Quote – Quote Forms for Any WordPress Site | 23 | 240 | 1,099 | 1k+ | | | Non-prefixed hook name |
| #108 | Simple URLs – Link Cloaking, Product Displays, and Affiliate Link Management | 23 | 295 | 298 | 4k+ | | | Non-prefixed global variable |
| #109 | Slider Hero with Video Background, Animation | 23 | 1,565 | 1,253 | 3k+ | | | Text Domain Mismatch |
| #110 | Strong Testimonials | 23 | 194 | 393 | 90k+ | | | Nonce verification recommended |
| #111 | Legal Terms and Conditions Popup for User Login and WooCommerce Checkout | 23 | 524 | 237 | 700 | | | Output is not escaped |
| #112 | The Events Calendar | 23 | 3,509 | 3,850 | 700k+ | | | Text Domain Mismatch |
| #113 | Directory Listings WordPress plugin – uListing | 23 | 947 | 1,573 | 1k+ | | | Non-prefixed global variable |
| #114 | Product Options and Price Calculation Formulas for WooCommerce – Uni CPO | 23 | 2,514 | 1,929 | 1k+ | | | Output is not escaped |
| #115 | VK All in One Expansion Unit | 23 | 1,026 | 518 | 100k+ | | | Output is not escaped |
| #116 | PostFinance Checkout | 23 | 979 | 214 | 1k+ | | | Text Domain Mismatch |
| #117 | Predictive Search for WooCommerce | 23 | 514 | 633 | 700 | | | Output is not escaped |
| #118 | Clone | 23 | 244 | 262 | 40k+ | | | Output is not escaped |
| #119 | WP Editor | 23 | 502 | 335 | 20k+ | | | Unsafe printing function |
| #120 | WP Free SSL | 23 | 735 | 1,345 | 1k+ | | | Non-prefixed global variable |
| #121 | Subscribe Forms – Beautiful Email Forms, Embedded Newsletter Forms & MailChimp Form | 23 | 419 | 542 | 2k+ | | | Non-prefixed global variable |
| #122 | Customer Support Ticket System & Helpdesk | 23 | 1,719 | 1,464 | 400 | | | Text Domain Mismatch |
| #123 | Masonry Gallery & Posts For Divi (WP Tools) | 23 | 754 | 1,450 | 700 | | | Non-prefixed global variable |
| #124 | YITH Essential Kit for WooCommerce #1 | 23 | 397 | 1,481 | 5k+ | | | Non-prefixed global variable |
| #125 | YITH PayPal Express Checkout for WooCommerce | 23 | 387 | 1,443 | 1k+ | | | Non-prefixed global variable |
| #126 | YITH WooCommerce Affiliates | 23 | 549 | 1,527 | 6k+ | | | Non-prefixed global variable |
| #127 | YITH WooCommerce Ajax Product Filter | 23 | 463 | 1,527 | 80k+ | | | Non-prefixed global variable |
| #128 | Zephyr Project Manager | 23 | 667 | 2,454 | 1k+ | | | Non-prefixed global variable |
| #129 | AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress | 24 | 5,234 | 1,464 | 7k+ | | | Output is not escaped |
| #130 | Advanced iFrame | 24 | 887 | 1,120 | 40k+ | | | Non-prefixed global variable |
| #131 | TermsFeed AutoTerms: Privacy Policy Generator, Cookie Consent, GDPR, CCPA, Terms & Conditions, Disclaimers, Cookies Policy, EULA | 24 | 939 | 161 | 70k+ | | | Non Singular String Literal Domain |
| #132 | Barcode Scanner (+Mobile App) – Inventory manager, Order fulfillment system, POS (Point of Sale) | 24 | 1,865 | 1,089 | 1k+ | | | Text Domain Mismatch |
| #133 | Branda – White Label & Branding, Free Login Page Customizer | 24 | 3,174 | 820 | 20k+ | | | Text Domain Mismatch |
| #134 | Calculated Fields Form – AI Form Builder for WordPress – Contact, Payment, Quote, Quiz & More | 24 | 319 | 611 | 40k+ | | | Non-prefixed global variable |
| #135 | Message Filter for Contact Form 7 | 24 | 1,057 | 1,594 | 1k+ | | | Non-prefixed global variable |
| #136 | CM Pop-Up – Create engaging popups to capture attention and boost interaction | 24 | 466 | 408 | 8k+ | | | Output is not escaped |
| #137 | Contact Form by Supsystic | 24 | 1,913 | 633 | 6k+ | | | Non Singular String Literal Domain |
| #138 | WPBot – ChatBot Conversational Forms | 24 | 1,254 | 1,226 | 2k+ | | | Text Domain Mismatch |
| #139 | Custom CSS | 24 | 703 | 657 | 1k+ | | | Output is not escaped |
| #140 | WP Customer Area | 24 | 3,306 | 941 | 10k+ | | | Text Domain Mismatch |
| #141 | Defender Security – Malware Scanner, Login Security & Firewall | 24 | 306 | 518 | 80k+ | | | Non-prefixed namespace |
| #142 | Easy Form Builder by WhiteStudio — Drag & Drop Form Builder | 24 | 194 | 381 | 1k+ | | | Nonce verification recommended |
| #143 | Email Subscribers & Newsletters – Email Marketing, Post Notifications & Newsletter Plugin for WordPress | 24 | 652 | 1,495 | 60k+ | | | Non-prefixed hook name |
| #144 | Conversios: Google Analytics (GA4), Google Ads, Conversion and Analytics Tracking for Multi-Channels | 24 | 112 | 1,497 | 10k+ | | | Non-prefixed global variable |
| #145 | Event Tickets and Registration | 24 | 3,409 | 4,218 | 90k+ | | | Non-prefixed global variable |
| #146 | FileBird – WordPress Media Library Folders & File Manager | 24 | 239 | 377 | 200k+ | | | wp function not compatible with requires wp |
| #147 | FluentCRM – Email Newsletter, Automation, Email Marketing, Email Campaigns, Optins, Leads, and CRM Solution | 24 | 193 | 753 | 80k+ | | | Direct Query |
| #148 | Forminator Forms – Contact Form, Payment Form & Custom Form Builder | 24 | 826 | 1,314 | 600k+ | | | Non-prefixed global variable |
| #149 | GD Mail Queue | 24 | 502 | 582 | 700 | | | Output is not escaped |
| #150 | GG Woo Feed for WooCommerce Shopping Feed on Google and Other Channels | 24 | 469 | 592 | 1k+ | | | Non-prefixed global variable |