| #51 | CartFlows – Funnel Builder & Checkout Plugin for WooCommerce | 21 | 462 | 656 | 200k+ | | | Text Domain Mismatch |
| #52 | Comet Cache | 21 | 857 | 245 | 20k+ | | | Output is not escaped |
| #53 | Daily Prayer Time | 21 | 947 | 1,780 | 1k+ | | | Non-prefixed global variable |
| #54 | DELUCKS SEO | 21 | 362 | 1,171 | 400 | | | Missing nonce verification |
| #55 | Free Downloads WooCommerce | 21 | 430 | 359 | 4k+ | | | Output is not escaped |
| #56 | eRoom – Webinar & Meeting Plugin for Zoom, Google Meet, Microsoft Teams | 21 | 186 | 437 | 9k+ | | | Non-prefixed global variable |
| #57 | Eupago Gateway For Woocommerce | 21 | 612 | 320 | 2k+ | | | Output is not escaped |
| #58 | Feeds for YouTube (YouTube video, channel, and gallery plugin) | 21 | 558 | 978 | 100k+ | | | Output is not escaped |
| #59 | FileOrganizer – WordPress File Manager | 21 | 536 | 241 | 200k+ | | | unlink unlink |
| #60 | Formidable Forms – WordPress Form Builder for Contact Forms, Calculators, Quizzes & More | 21 | 52 | 1,959 | 300k+ | | | Non-prefixed global variable |
| #61 | Front End Users | 21 | 719 | 2,759 | 400 | | | Non-prefixed global variable |
| #62 | Imagify Image Optimization: Optimize Images | Compress & Convert to WebP/AVIF | 21 | 426 | 862 | 1m+ | | | Non-prefixed global variable |
| #63 | Mooberry Book Manager | 21 | 1,040 | 399 | 1k+ | | | Text Domain Mismatch |
| #64 | Oasis Workflow | 21 | 775 | 575 | 700 | | | Text Domain Mismatch |
| #65 | OneLogin SAML SSO | 21 | 507 | 330 | 7k+ | | | wp function not compatible with requires wp |
| #66 | PublishPress Planner – Editorial Calendar, Marketing Content, Kanban Board | 21 | 603 | 890 | 6k+ | | | Output is not escaped |
| #67 | Five Star Restaurant Reservations – WordPress Booking Plugin | 21 | 1,099 | 1,147 | 10k+ | | | Output is not escaped |
| #68 | Rocket Maintenance Mode & Coming Soon Page | 21 | 1,176 | 1,406 | 4k+ | | | Non-prefixed global variable |
| #69 | Professional Social Sharing Buttons, Icons & Related Posts – Shareaholic | 21 | 327 | 181 | 10k+ | | | Output is not escaped |
| #70 | Testerwp ecommerce companion | 21 | 811 | 436 | 1k+ | | | Text Domain Mismatch |
| #71 | ThirstyAffiliates – Affiliate Links, Link Branding, Link Tracking & Marketing Plugin | 21 | 190 | 660 | 30k+ | | | Non-prefixed global variable |
| #72 | TotalPoll for Polls and Contests | 21 | 1,366 | 155 | 1k+ | | | Text Domain Mismatch |
| #73 | BuddyPress WooCommerce My Account Integration. Create WooCommerce Member Pages | 21 | 668 | 1,569 | 800 | | | Non-prefixed global variable |
| #74 | IS-theme-companion | 21 | 3,559 | 511 | 1k+ | | | Non Singular String Literal Domain |
| #75 | Wise Chat | 21 | 470 | 506 | 5k+ | | | Output is not escaped |
| #76 | PPOM – Product Addons & Custom Fields for WooCommerce | 21 | 336 | 1,322 | 20k+ | | | Non-prefixed global variable |
| #77 | WP Compress – Instant Performance & Speed Optimization | 21 | 3,367 | 3,253 | 10k+ | | | Non Singular String Literal Domain |
| #78 | wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin | 21 | 1,811 | 1,432 | 70k+ | | | Output is not escaped |
| #79 | ANAC XML Bandi di Gara | 22 | 294 | 244 | 600 | | | Output is not escaped |
| #80 | Cleanup Action Scheduler | 22 | 545 | 1,306 | 1k+ | | | Non-prefixed global variable |
| #81 | Clearfy Cache – WordPress optimization plugin, Minify HTML, CSS & JS, Defer | 22 | 2,858 | 1,270 | 50k+ | | | Text Domain Mismatch |
| #82 | RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login | 22 | 3,653 | 5,078 | 8k+ | | | Non-prefixed global variable |
| #83 | Data Tables Generator by Supsystic | 22 | 158 | 152 | 10k+ | | | Exception output is not escaped |
| #84 | Database Access with Adminer | 22 | 983 | 2,553 | 1k+ | | | Non-prefixed global variable |
| #85 | Download Manager | 22 | 2,513 | 1,462 | 100k+ | | | Output is not escaped |
| #86 | Diverse Solutions IDX Real Estate Listings & MLS Search | 22 | 745 | 605 | 1k+ | | | Heredoc Output Not Escaped |
| #87 | Dynamic QR Code – generator | 22 | 238 | 208 | 6k+ | | | Missing direct file access protection |
| #88 | Easy Social Feed – Social Photos Gallery and Post Feed for WordPress | 22 | 1,567 | 1,277 | 30k+ | | | Non-prefixed global variable |
| #89 | easyReservations | 22 | 5,307 | 2,480 | 800 | | | Text Domain Mismatch |
| #90 | EleSpare – News, Magazine and Blog Addons for Elementor | 22 | 733 | 1,423 | 10k+ | | | Non-prefixed global variable |
| #91 | Employee Spotlight – Team Member Showcase & Meet the Team Plugin | 22 | 247 | 689 | 400 | | | Non-prefixed hook name |
| #92 | FACTO – Facturación Electrónica | 22 | 242 | 432 | 400 | | | Request data is not unslashed |
| #93 | File Manager Pro – Filester | 22 | 565 | 391 | 100k+ | | | Request data is not unslashed |
| #94 | Five Star Restaurant Menu and Food Ordering | 22 | 752 | 609 | 5k+ | | | Output is not escaped |
| #95 | GeoDirectory – WP Business Directory Plugin and Classified Listings Directory | 22 | 4,466 | 3,972 | 10k+ | | | Output is not escaped |
| #96 | Happyforms – Form Builder for WordPress: Drag & Drop Contact Forms, Surveys, Payments & Multipurpose Forms | 22 | 1,037 | 722 | 20k+ | | | Unsafe printing function |
| #97 | HeadSpace2 SEO | 22 | 940 | 360 | 3k+ | | | Text Domain Mismatch |
| #98 | History Log by click5 | 22 | 675 | 1,290 | 400 | | | Direct Query |
| #99 | Csomagpontok és Címkék WooCommerce-hez | 22 | 2,001 | 769 | 7k+ | | | Text Domain Mismatch |
| #100 | Insert or Embed Articulate Content into WordPress | 22 | 659 | 1,437 | 2k+ | | | Non-prefixed global variable |