| #51 | ThirstyAffiliates – Affiliate Links, Link Branding, Link Tracking & Marketing Plugin | 21 | 190 | 660 | 30k+ | | | Non-prefixed global variable |
| #52 | Revive Social – Social Media Auto Post and Scheduling Automation Plugin | 21 | 256 | 431 | 20k+ | | | Non-prefixed hook name |
| #53 | Uncanny Automator – AI + Automation for WordPress | AI Agent, AI Page Builder, Free AI Usage Included | 21 | 1,082 | 3,112 | 40k+ | | | Direct Query |
| #54 | Buckaroo Woocommerce Payments Plugin | 21 | 638 | 321 | 2k+ | | | Exception output is not escaped |
| #55 | BuddyPress WooCommerce My Account Integration. Create WooCommerce Member Pages | 21 | 668 | 1,569 | 800 | | | Non-prefixed global variable |
| #56 | Paysera Payment Gateway for WooCommerce | 21 | 1,868 | 196 | 7k+ | | | Exception output is not escaped |
| #57 | Booster for WooCommerce – PDF Invoices, Abandoned Cart, Variation Swatches & 100+ Tools | 21 | 786 | 3,393 | 30k+ | | | Non-prefixed global variable |
| #58 | Pay For Post with WooCommerce | 21 | 958 | 1,477 | 1k+ | | | Non-prefixed global variable |
| #59 | PPOM – Product Addons & Custom Fields for WooCommerce | 21 | 336 | 1,319 | 20k+ | | | Non-prefixed global variable |
| #60 | WP-Lister Lite for eBay | 21 | 6,701 | 5,132 | 2k+ | | | Output is not escaped |
| #61 | WP phpMyAdmin | 21 | 4,528 | 6,435 | 40k+ | | | Missing Arg Domain |
| #62 | wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin | 21 | 1,812 | 1,432 | 70k+ | | | Output is not escaped |
| #63 | WP Extended – The Ultimate WordPress Toolkit | 21 | 1,253 | 398 | 600 | | | Non Singular String Literal Domain |
| #64 | WPScan – WordPress Security Scanner | 21 | 527 | 265 | 8k+ | | | Text Domain Mismatch |
| #65 | WP Sessions Time Monitoring Full Automatic | 22 | 869 | 1,529 | 500 | | | Non-prefixed global variable |
| #66 | Better WordPress Minify | 22 | 412 | 484 | 7k+ | | | Non Singular String Literal Domain |
| #67 | CartFlows – Funnel Builder & Checkout Plugin for WooCommerce | 22 | 460 | 656 | 200k+ | | | Text Domain Mismatch |
| #68 | Clearfy Cache – WordPress optimization plugin, Minify HTML, CSS & JS, Defer | 22 | 2,854 | 1,269 | 50k+ | | | Text Domain Mismatch |
| #69 | Code Profiler – WordPress Performance Profiling and Debugging Made Easy | 22 | 265 | 400 | 8k+ | | | Non-prefixed global variable |
| #70 | Accept PayPal Payments using Contact Form 7 | 22 | 359 | 127 | 600 | | | Text Domain Mismatch |
| #71 | Cozy Blocks – Page Builder for Gutenberg Editor & FSE with 700+ Patterns, 58 Blocks & Templates | 22 | 2,437 | 4,402 | 6k+ | | | Non-prefixed global variable |
| #72 | E2Pdf – Export Pdf Tool for WordPress | 22 | 1,081 | 847 | 10k+ | | | Unsafe printing function |
| #73 | Employee Spotlight – Team Member Showcase & Meet the Team Plugin | 22 | 247 | 689 | 400 | | | Non-prefixed hook name |
| #74 | Estatik Real Estate Plugin | 22 | 3,084 | 325 | 10k+ | | | Text Domain Mismatch |
| #75 | Falang multilanguage for WordPress | 22 | 716 | 769 | 1k+ | | | Output is not escaped |
| #76 | Finale Lite – Sales Countdown Timer & Discount for WooCommerce | 22 | 1,031 | 451 | 4k+ | | | Output is not escaped |
| #77 | Notification Bar, Announcement and Cookie Notice WordPress Plugin – FooBar | 22 | 1,321 | 1,371 | 3k+ | | | Non-prefixed global variable |
| #78 | FunnelKit Payment Gateway for Stripe WooCommerce | 22 | 244 | 321 | 20k+ | | | Input is not sanitized |
| #79 | GeoDirectory – WP Business Directory Plugin and Classified Listings Directory | 22 | 4,455 | 3,979 | 10k+ | | | Output is not escaped |
| #80 | Happyforms – Form Builder for WordPress: Drag & Drop Contact Forms, Surveys, Payments & Multipurpose Forms | 22 | 1,031 | 722 | 20k+ | | | Unsafe printing function |
| #81 | Csomagpontok és Címkék WooCommerce-hez | 22 | 2,002 | 769 | 7k+ | | | Text Domain Mismatch |
| #82 | Insert or Embed Articulate Content into WordPress | 22 | 659 | 1,437 | 2k+ | | | Non-prefixed global variable |
| #83 | Számlázz.hu integráció WooCommerce-hez | 22 | 1,169 | 460 | 7k+ | | | Text Domain Mismatch |
| #84 | JCC Payment Gateway for Woocommerce | 22 | 2,273 | 1,136 | 600 | | | Text Domain Mismatch |
| #85 | Jetpack – WP Security, Backup, Speed, & Growth | 22 | 3,292 | 1,438 | 3m+ | | | Text Domain Mismatch |
| #86 | LearnPress – WordPress LMS Plugin for Create and Sell Online Courses | 22 | 2,433 | 3,594 | 70k+ | | | Non-prefixed global variable |
| #87 | Mailchimp for WooCommerce | 22 | 524 | 658 | 200k+ | | | Non-prefixed global variable |
| #88 | MailChimp Subscribe Form, Optin Builder, PopUp Builder, Form Builder | 22 | 1,120 | 3,012 | 2k+ | | | Non-prefixed global variable |
| #89 | MarketKing — Ultimate WooCommerce Multivendor Marketplace Solution | 22 | 1,131 | 1,845 | 700 | | | Non-prefixed global variable |
| #90 | Search Atlas SEO – Premier SEO Plugin for One-Click WP Publishing & Integrated AI Optimization | 22 | 1,359 | 2,800 | 8k+ | | | Output is not escaped |
| #91 | Molongui Authorship – Author Boxes, Guest Authors & Co-Authors for WordPress | 22 | 919 | 1,230 | 10k+ | | | Output is not escaped |
| #92 | Motors – Car Dealership & Classified Listings Plugin | 22 | 5,391 | 6,082 | 9k+ | | | Text Domain Mismatch |
| #93 | myCred Addons – Ultimate myCred Modules To Support WordPress Gamification and Loyalty Rewards | 22 | 2,344 | 1,320 | 400 | | | Output is not escaped |
| #94 | Simple Newsletter Plugin – Noptin | 22 | 73 | 599 | 10k+ | | | Non-prefixed global variable |
| #95 | NinjaFirewall (WP Edition) – Advanced Security Plugin and Firewall | 22 | 1,263 | 2,046 | 100k+ | | | Non-prefixed global variable |
| #96 | WP OAuth Server (OAuth Authentication) | 22 | 189 | 345 | 3k+ | | | Non-prefixed function |
| #97 | PagBank / PagSeguro Connect para WooCommerce | 22 | 505 | 757 | 4k+ | | | Non-prefixed global variable |
| #98 | PAYCOMET for WooCommerce | 22 | 1,223 | 423 | 2k+ | | | Text Domain Mismatch |
| #99 | PDF Builder for WPForms | 22 | 321 | 266 | 900 | | | SQL query is not prepared |
| #100 | RealPress – Real Estate Plugin | 22 | 604 | 1,167 | 400 | | | Non-prefixed global variable |