| #1 | WPtouch – Make your WordPress Website Mobile-Friendly | 17 | 1,466 | 325 | 50k+ | | | Text Domain Mismatch |
| #2 | JetFormBuilder — Dynamic Blocks Form Builder | 19 | 2,104 | 1,607 | 80k+ | | | Text Domain Mismatch |
| #3 | SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments | 19 | 533 | 1,149 | 80k+ | | | Non-prefixed global variable |
| #4 | WP Email Template | 19 | 344 | 345 | 2k+ | | | Exception output is not escaped |
| #5 | Event Espresso – Event Registration & Ticketing Sales | 20 | 12,698 | 2,135 | 600 | | | Text Domain Mismatch |
| #6 | GiveWP – Donation Plugin and Fundraising Platform | 20 | 3,411 | 3,559 | 100k+ | | | Output is not escaped |
| #7 | GoUrl Bitcoin Payment Gateway & Paid Downloads & Membership | 20 | 1,832 | 720 | 700 | | | Non Singular String Literal Domain |
| #8 | Pix por Piggly (para Woocommerce) | 20 | 547 | 195 | 4k+ | | | Exception output is not escaped |
| #9 | Powered Cache – Caching and Optimization for WordPress – Easily Improve PageSpeed & Web Vitals Score | 20 | 147 | 231 | 3k+ | | | Exception output is not escaped |
| #10 | Robin Image Optimizer – Unlimited Image Optimization, WebP & AVIF | 20 | 556 | 543 | 100k+ | | | Output is not escaped |
| #11 | Store Locator WordPress | 21 | 2,494 | 1,628 | 10k+ | | | Text Domain Mismatch |
| #12 | Forumax – AI Powered Advanced Community Forum Plugin | 21 | 4,936 | 4,353 | 600 | | | Text Domain Mismatch |
| #13 | Frontend Dashboard | 21 | 384 | 945 | 500 | | | Non-prefixed function |
| #14 | WebP Express | 21 | 160 | 427 | 300k+ | | | Non-prefixed global variable |
| #15 | Paysera Payment Gateway for WooCommerce | 21 | 1,868 | 196 | 7k+ | | | Exception output is not escaped |
| #16 | PPOM – Product Addons & Custom Fields for WooCommerce | 21 | 336 | 1,319 | 20k+ | | | Non-prefixed global variable |
| #17 | WebTotem Security | 21 | 1,110 | 213 | 900 | | | Text Domain Mismatch |
| #18 | Ajax Load More – Infinite Scroll, Load More, & Lazy Load | 22 | 641 | 592 | 30k+ | | | Unsafe printing function |
| #19 | Knowledge Base documentation & wiki plugin – BasePress Docs | 22 | 671 | 1,767 | 2k+ | | | Non-prefixed global variable |
| #20 | Cart Lift – Abandoned Cart Recovery for WooCommerce and EDD | 22 | 669 | 769 | 1k+ | | | Output is not escaped |
| #21 | Accept PayPal Payments using Contact Form 7 | 22 | 359 | 127 | 600 | | | Text Domain Mismatch |
| #22 | Employee Spotlight – Team Member Showcase & Meet the Team Plugin | 22 | 247 | 689 | 400 | | | Non-prefixed hook name |
| #23 | Finale Lite – Sales Countdown Timer & Discount for WooCommerce | 22 | 1,031 | 451 | 4k+ | | | Output is not escaped |
| #24 | FunnelKit Payment Gateway for Stripe WooCommerce | 22 | 244 | 321 | 20k+ | | | Input is not sanitized |
| #25 | Hesabfa Accounting | 22 | 467 | 718 | 500 | | | Text Domain Mismatch |
| #26 | JCH Optimize | 22 | 1,145 | 136 | 4k+ | | | Output is not escaped |
| #27 | Search Atlas SEO – Premier SEO Plugin for One-Click WP Publishing & Integrated AI Optimization | 22 | 1,306 | 2,818 | 8k+ | | | Output is not escaped |
| #28 | Uncanny Toolkit for LearnDash | 22 | 539 | 994 | 20k+ | | | Output is not escaped |
| #29 | Fraud Prevention For WooCommerce and EDD | 22 | 572 | 1,394 | 5k+ | | | Non-prefixed global variable |
| #30 | WPBITS Addons For Elementor Page Builder | 22 | 996 | 1,399 | 2k+ | | | Non-prefixed global variable |
| #31 | Autoptimize | 23 | 288 | 191 | 800k+ | | | Output is not escaped |
| #32 | Shortcodes and extra features for Phlox theme | 23 | 412 | 446 | 90k+ | | | Output is not escaped |
| #33 | Booking calendar, Appointment Booking System | 23 | 1,079 | 1,125 | 3k+ | | | Output is not escaped |
| #34 | Business Directory Plugin – Easy Listing Directories for WordPress | 23 | 611 | 1,064 | 10k+ | | | Non-prefixed global variable |
| #35 | Classified Listing – AI-Powered Classified ads & Business Directory | 23 | 152 | 2,158 | 9k+ | | | Non-prefixed global variable |
| #36 | Conversios – GA4, Google Ads & Meta Conversion Tracking with Product Feed for WooCommerce | 23 | 114 | 1,499 | 10k+ | | | Non-prefixed global variable |
| #37 | Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI | 23 | 395 | 1,343 | 90k+ | | | Non-prefixed global variable |
| #38 | Kenta Companion | 23 | 657 | 1,419 | 2k+ | | | Non-prefixed global variable |
| #39 | Custom Login Page Customizer | 23 | 687 | 1,408 | 90k+ | | | Non-prefixed global variable |
| #40 | MediaPress | 23 | 904 | 583 | 4k+ | | | Output is not escaped |
| #41 | Menu Image, Icons made easy | 23 | 591 | 1,406 | 100k+ | | | Non-prefixed global variable |
| #42 | MPG – Multiple Page Generator, Bulk Landing Pages & Programmatic SEO | 23 | 485 | 580 | 2k+ | | | Missing nonce verification |
| #43 | NitroPack – Performance, Page Speed & Cache Plugin for Core Web Vitals, CDN & Image Optimization | 23 | 311 | 635 | 90k+ | | | Output is not escaped |
| #44 | Ocean Extra | 23 | 1,494 | 2,110 | 500k+ | | | Non-prefixed global variable |
| #45 | Issues and Series for Newspapers, Magazines, Publishers, Writers | 23 | 346 | 710 | 2k+ | | | Nonce verification recommended |
| #46 | Postie | 23 | 408 | 259 | 10k+ | | | Output is not escaped |
| #47 | PowerPress Podcasting plugin by Blubrry | 23 | 4,818 | 2,452 | 20k+ | | | Output is not escaped |
| #48 | Request a Quote – Quote Forms for Any WordPress Site | 23 | 240 | 1,099 | 900 | | | Non-prefixed hook name |
| #49 | Robo Gallery – Photo & Image Slider | 23 | 1,291 | 530 | 40k+ | | | Output is not escaped |
| #50 | Manago AI & Leadoo AI | 23 | 644 | 429 | 1k+ | | | Unsafe printing function |