| #101 | RealPress – Real Estate Plugin | 22 | 604 | 1,167 | 500 | | | Non-prefixed global variable |
| #102 | Social Sharing Plugin – Sassy Social Share | 22 | 1,689 | 233 | 100k+ | | | wp function not compatible with requires wp |
| #103 | Slick Popup: Contact Form 7 Popup Plugin | 22 | 2,322 | 316 | 2k+ | | | Text Domain Mismatch |
| #104 | NextScripts: Social Networks Auto-Poster | 22 | 2,408 | 1,133 | 30k+ | | | Output is not escaped |
| #105 | Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent | 22 | 225 | 519 | 8k+ | | | error log error log |
| #106 | Customize Feeds for Twitter | 22 | 92 | 171 | 4k+ | | | Non-prefixed global variable |
| #107 | Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin | 22 | 532 | 2,367 | 40k+ | | | Direct Query |
| #108 | UpStream: a Project Management Plugin for WordPress | 22 | 683 | 703 | 600 | | | Non-prefixed global variable |
| #109 | WCFM – Frontend Manager for WooCommerce | 22 | 4,754 | 5,054 | 20k+ | | | Non-prefixed global variable |
| #110 | WCFM Marketplace – Multivendor Marketplace for WooCommerce | 22 | 1,934 | 1,966 | 10k+ | | | Non-prefixed global variable |
| #111 | WCFM Membership – WooCommerce Memberships for Multivendor Marketplace | 22 | 559 | 675 | 10k+ | | | Non-prefixed global variable |
| #112 | Fraud Prevention For WooCommerce and EDD | 22 | 572 | 1,394 | 5k+ | | | Non-prefixed global variable |
| #113 | WooCommerce | 22 | 1,359 | 6,171 | 7m+ | | | Non-prefixed global variable |
| #114 | Advanced AJAX Product Filters | 22 | 2,683 | 1,205 | 50k+ | | | Text Domain Mismatch |
| #115 | CoDesigner – All in One Elementor WooCommerce Builder | 22 | 4,131 | 774 | 5k+ | | | Text Domain Mismatch |
| #116 | Simple Shopping Cart | 22 | 796 | 536 | 10k+ | | | Unsafe printing function |
| #117 | ManageWP Worker | 22 | 507 | 565 | 1m+ | | | Non-prefixed class |
| #118 | WP Affiliate Disclosure | 22 | 1,358 | 1,504 | 1k+ | | | Non-prefixed global variable |
| #119 | Asset CleanUp: Page Speed Booster | 22 | 2,030 | 2,485 | 100k+ | | | Non-prefixed global variable |
| #120 | Master Accordion ( Former WP Awesome FAQ Plugin ) | 22 | 1,774 | 1,286 | 700 | | | Non-prefixed global variable |
| #121 | WP Easy Pay – Payment and Donation form Builder for Square | 22 | 893 | 1,828 | 1k+ | | | Non-prefixed global variable |
| #122 | WP Express Checkout (Fast Payments via PayPal & Stripe) | 22 | 591 | 627 | 1k+ | | | Output is not escaped |
| #123 | File Manager | 22 | 740 | 520 | 1m+ | | | Unsafe printing function |
| #124 | WP Fusion Lite – Marketing Automation and CRM Integration for WordPress | 22 | 275 | 683 | 5k+ | | | Nonce verification recommended |
| #125 | WP Umbrella: Update Backup Restore & Monitoring | 22 | 918 | 916 | 70k+ | | | Exception output is not escaped |
| #126 | Wp-Insert | 22 | 267 | 301 | 10k+ | | | Output is not escaped |
| #127 | SchedulePress – Auto Post & Publish, Auto Social Share, Schedule Posts with Editorial Calendar & Missed Schedule Post Publisher | 22 | 307 | 245 | 10k+ | | | Output is not escaped |
| #128 | AidWP – Donation & Payment Forms (Stripe Powered) | 22 | 1,317 | 1,675 | 800 | | | Non-prefixed global variable |
| #129 | WP Super Minify • Minify, Compress and Cache HTML, CSS & JavaScript | 22 | 164 | 257 | 9k+ | | | Non-prefixed constant |
| #130 | NotifSMS – SMS Notifications OTP & 2FA for WordPress & WooCommerce | 22 | 1,353 | 1,412 | 2k+ | | | Non-prefixed global variable |
| #131 | User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration | 22 | 287 | 1,432 | 20k+ | | | Non-prefixed global variable |
| #132 | WP-WebAuthn | 22 | 957 | 396 | 2k+ | | | Exception output is not escaped |
| #133 | WPBITS Addons For Elementor Page Builder | 22 | 996 | 1,399 | 2k+ | | | Non-prefixed global variable |
| #134 | WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell | 22 | 5,996 | 2,790 | 5k+ | | | Text Domain Mismatch |
| #135 | ShopWP | 22 | 430 | 225 | 700 | | | Text Domain Mismatch |
| #136 | WPSSO Core – Complete Schema Markup and Meta Tags | 22 | 1,407 | 412 | 5k+ | | | Missing Translators Comment |
| #137 | YaySMTP – WP Mail SMTP with Email Logs, Tracking & Reports | 22 | 654 | 435 | 10k+ | | | Exception output is not escaped |
| #138 | YITH WooCommerce Ajax Search | 22 | 408 | 1,659 | 30k+ | | | Non-prefixed global variable |
| #139 | ЮKassa для WooCommerce | 22 | 590 | 168 | 9k+ | | | Short PHP open tag found |
| #140 | Print Labels with Barcodes. Create price tags, product labels, order labels for WooCommerce | 23 | 1,185 | 1,027 | 1k+ | | | Text Domain Mismatch |
| #141 | Gutenberg Blocks – ACF Blocks Suite | 23 | 1,097 | 1,449 | 400 | | | Non-prefixed global variable |
| #142 | Advanced Custom Fields: Extended | 23 | 1,885 | 329 | 100k+ | | | Text Domain Mismatch |
| #143 | Custom WooCommerce Checkout Fields Editor | 23 | 755 | 1,386 | 2k+ | | | Non-prefixed global variable |
| #144 | Advanced Menu Manager Pro – Built for Content-heavy WordPress Sites to Add, Filter, Lock, and Edit Menus Easily | 23 | 545 | 1,397 | 400 | | | Non-prefixed global variable |
| #145 | Advanced Custom Fields (ACF®) | 23 | 2,456 | 1,218 | 2m+ | | | Text Domain Mismatch |
| #146 | Advanced Product Labels for WooCommerce | 23 | 921 | 559 | 20k+ | | | Text Domain Mismatch |
| #147 | AI Engine – The Chatbot, AI Framework & MCP for WordPress | 23 | 412 | 544 | 100k+ | | | error log error log |
| #148 | AR for WordPress | 23 | 149 | 511 | 400 | | | Non-prefixed global variable |
| #149 | B2BKing — Ultimate WooCommerce B2B and Wholesale Plugin — Wholesale Prices, Bulk Order Form & More | 23 | 1,347 | 409 | 10k+ | | | Text Domain Mismatch |
| #150 | Kadence Security – Password, Two Factor Authentication, and Brute Force Protection | 23 | 1,053 | 967 | 700k+ | | | Missing Translators Comment |