| #51 | Slider by 10Web – Responsive Image Slider | 23 | 5,814 | 976 | 10k+ | | | Output is not escaped |
| #52 | Product Options and Price Calculation Formulas for WooCommerce – Uni CPO | 23 | 2,514 | 1,929 | 1k+ | | | Output is not escaped |
| #53 | User Menus – Nav Menu Visibility | 23 | 531 | 1,298 | 80k+ | | | Non-prefixed global variable |
| #54 | UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP | 23 | 695 | 2,440 | 20k+ | | | Non-prefixed hook name |
| #55 | Predictive Search for WooCommerce | 23 | 514 | 633 | 700 | | | Output is not escaped |
| #56 | ManageWP Worker | 23 | 506 | 565 | 1m+ | | | Non-prefixed class |
| #57 | WP Courses LMS – Online Courses Builder, eLearning Courses, Courses Solution, Education Courses | 23 | 590 | 876 | 500 | | | Non-prefixed function |
| #58 | WP Free SSL | 23 | 735 | 1,345 | 1k+ | | | Non-prefixed global variable |
| #59 | Stripe Payment Forms by WP Full Pay – Accept Credit Card Payments, Donations & Subscriptions | 23 | 1,113 | 1,863 | 9k+ | | | Output is not escaped |
| #60 | Lead Form Data Collection to CRM | 23 | 211 | 1,698 | 400 | | | Non-prefixed global variable |
| #61 | Customer Support Ticket System & Helpdesk | 23 | 1,723 | 1,454 | 400 | | | Text Domain Mismatch |
| #62 | WP Ultimate CSV Importer – WordPress Import & Export for CSV, XML & Excel | 23 | 1,158 | 3,642 | 20k+ | | | Interpolated SQL is not prepared |
| #63 | WP Webhooks – Automate repetitive tasks by creating powerful automation workflows directly within WordPress | 23 | 4,380 | 888 | 20k+ | | | Output is not escaped |
| #64 | Xpro Addons For Beaver Builder – Lite | 23 | 3,454 | 640 | 700 | | | Text Domain Mismatch |
| #65 | Advanced iFrame | 24 | 887 | 1,120 | 40k+ | | | Non-prefixed global variable |
| #66 | Auto-Install Free SSL – Generate & Install Free SSL Certificates | 24 | 985 | 1,496 | 8k+ | | | Non-prefixed global variable |
| #67 | TermsFeed AutoTerms: Privacy Policy Generator, Cookie Consent, GDPR, CCPA, Terms & Conditions, Disclaimers, Cookies Policy, EULA | 24 | 939 | 161 | 70k+ | | | Non Singular String Literal Domain |
| #68 | AutomatorWP – Automator plugin for no-code automations, webhooks & custom integrations in WordPress | 24 | 1,705 | 1,393 | 7k+ | | | Text Domain Mismatch |
| #69 | Banner Management For WooCommerce | 24 | 865 | 1,862 | 2k+ | | | Non-prefixed global variable |
| #70 | Brave – Create Popup, Optins, Lead Generation, Survey, Sticky Elements & Interactive Content | 24 | 237 | 291 | 20k+ | | | error log print r |
| #71 | Calculated Fields Form – AI Form Builder for WordPress – Contact, Payment, Quote, Quiz & More | 24 | 364 | 637 | 40k+ | | | Non-prefixed global variable |
| #72 | Event Calendar – Calendar | 24 | 1,111 | 1,262 | 2k+ | | | Text Domain Mismatch |
| #73 | Defender Security – Malware Scanner, Login Security & Firewall | 24 | 550 | 593 | 80k+ | | | Non-prefixed namespace |
| #74 | Disable Admin Notices – Hide Dashboard Notifications | 24 | 464 | 195 | 100k+ | | | Output is not escaped |
| #75 | Easy Form Builder by WhiteStudio – Drag & Drop Form Builder | 24 | 212 | 433 | 1k+ | | | Nonce verification recommended |
| #76 | Fast Velocity Minify | 24 | 283 | 254 | 40k+ | | | Unsafe printing function |
| #77 | FeedWordPress | 24 | 496 | 319 | 9k+ | | | Missing Arg Domain |
| #78 | Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder | 24 | 4,745 | 1,279 | 30k+ | | | Non Singular String Literal Domain |
| #79 | Fuse Social Floating Sidebar | 24 | 1,838 | 1,578 | 10k+ | | | Non-prefixed global variable |
| #80 | Connector Wizard (formerly LC Wizard) | 24 | 249 | 448 | 900 | | | Non-prefixed function |
| #81 | NEX-Forms – Ultimate Forms Plugin for WordPress | 24 | 1,972 | 1,192 | 6k+ | | | Text Domain Mismatch |
| #82 | Pagar.me para WooCommerce | 24 | 549 | 116 | 4k+ | | | Text Domain Mismatch |
| #83 | Real3D Flipbook – 3D FlipBook, PDF FlipBook, PDF Viewer, PDF Embedder | 24 | 953 | 1,392 | 10k+ | | | Non-prefixed global variable |
| #84 | RSFirewall! | 24 | 563 | 521 | 4k+ | | | Output is not escaped |
| #85 | Tag, Category, and Taxonomy Manager – Autotagger Automatically Add Terms | 24 | 405 | 842 | 40k+ | | | Nonce verification recommended |
| #86 | Video Slider – Slider Carousel | 24 | 208 | 2,203 | 3k+ | | | Request data is not unslashed |
| #87 | TI WooCommerce Wishlist | 24 | 467 | 546 | 100k+ | | | Output is not escaped |
| #88 | Tutor LMS – eLearning and online course solution | 24 | 332 | 4,432 | 100k+ | | | Non-prefixed global variable |
| #89 | UserFeedback – Create Interactive Feedback Form, User Surveys, and Polls in Seconds | 24 | 441 | 235 | 200k+ | | | Text Domain Mismatch |
| #90 | Disable Updates – Updates Manager, Disable Automatic Updates, Disable All Updates | 24 | 521 | 134 | 10k+ | | | Output is not escaped |
| #91 | EU VAT Assistant for WooCommerce | 24 | 1,742 | 495 | 5k+ | | | Non Singular String Literal Domain |
| #92 | Export All Posts, Products, Orders & Users | WP Ultimate Exporter | WordPress CSV Export | 24 | 363 | 1,130 | 6k+ | | | Direct Query |
| #93 | WP User Manager – User Profile Builder & Membership | 24 | 787 | 539 | 10k+ | | | Exception output is not escaped |
| #94 | WPSpeed – WordPress Speed, Cache & Performance Optimization (Core Web Vitals, PageSpeed 100) | 24 | 482 | 189 | 2k+ | | | Output is not escaped |
| #95 | YayReviews – Advanced Customer Reviews for WooCommerce | 24 | 314 | 1,256 | 100 | | | Non-prefixed global variable |
| #96 | Disable Comments & Delete All Comments | 25 | 502 | 184 | 9k+ | | | Output is not escaped |
| #97 | CSS & JavaScript Toolbox | 25 | 155 | 617 | 10k+ | | | Non-prefixed class |
| #98 | 胖鼠采集(Fat Rat Collect) | 25 | 630 | 190 | 900 | | | Missing Arg Domain |
| #99 | Portfolio Gallery – Responsive Image Gallery | 25 | 108 | 2,463 | 1k+ | | | Non-prefixed global variable |
| #100 | WC Disable Zoom / Lightbox features | 25 | 529 | 1,297 | 700 | | | Non-prefixed global variable |