| #1 | Block Slider – Responsive Image Slider, Video Slider & Post Slider | 19 | 555 | 1,291 | 3k+ | | | Non-prefixed global variable |
| #2 | SendPress Newsletters | 19 | 2,293 | 1,422 | 1k+ | | | Output is not escaped |
| #3 | Motors – Car Dealership & Classified Listings Plugin | 21 | 5,437 | 6,146 | 9k+ | | | Text Domain Mismatch |
| #4 | MultiParcels Shipping For WooCommerce | 21 | 245 | 426 | 4k+ | | | Request data is not unslashed |
| #5 | WebP Express | 21 | 160 | 427 | 300k+ | | | Non-prefixed global variable |
| #6 | Razorpay for WooCommerce | 21 | 980 | 864 | 100k+ | | | Non-prefixed function |
| #7 | WP-Lister Lite for eBay | 21 | 6,701 | 5,140 | 2k+ | | | Output is not escaped |
| #8 | Imagify Image Optimization: Optimize Images | Compress & Convert to WebP/AVIF | 22 | 416 | 868 | 1m+ | | | Non-prefixed global variable |
| #9 | Mailchimp for WooCommerce | 22 | 524 | 658 | 200k+ | | | Non-prefixed global variable |
| #10 | PagBank / PagSeguro Connect para WooCommerce | 22 | 510 | 759 | 3k+ | | | Non-prefixed global variable |
| #11 | RapidLoad AI – Optimize Web Vitals Automatically | 22 | 81 | 840 | 700 | | | Nonce verification recommended |
| #12 | WP Fusion Lite – Marketing Automation and CRM Integration for WordPress | 22 | 276 | 683 | 5k+ | | | Nonce verification recommended |
| #13 | User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post Submission | 22 | 293 | 1,524 | 20k+ | | | Non-prefixed global variable |
| #14 | WPBITS Addons For Elementor Page Builder | 22 | 996 | 1,399 | 2k+ | | | Non-prefixed global variable |
| #15 | CallTrackingMetrics | 23 | 922 | 286 | 3k+ | | | Unsafe printing function |
| #16 | Email Subscribers & Newsletters – Email Marketing, Post Notifications & Newsletter Plugin for WordPress | 23 | 559 | 1,525 | 50k+ | | | Non-prefixed hook name |
| #17 | Payment forms, Buy now buttons, and Invoicing System | GetPaid | 23 | 392 | 1,268 | 5k+ | | | Non-prefixed global variable |
| #18 | LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes | 23 | 407 | 1,234 | 10k+ | | | Non-prefixed global variable |
| #19 | LLMagnet – AI Visibility & AI SEO for Claude, ChatGPT & More | 23 | 625 | 1,818 | 500 | | | Non-prefixed global variable |
| #20 | Postie | 23 | 408 | 259 | 10k+ | | | Output is not escaped |
| #21 | Premium Addons for Elementor – AI-Ready Elementor Addons, Widgets & Templates | 23 | 201 | 1,168 | 600k+ | | | Non-prefixed hook name |
| #22 | Shipment Tracker for Woocommerce | 23 | 477 | 576 | 1k+ | | | Missing Arg Domain |
| #23 | Travelpayouts | 23 | 761 | 114 | 6k+ | | | Output is not escaped |
| #24 | weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot | 23 | 279 | 560 | 5k+ | | | Non-prefixed global variable |
| #25 | WP Customer Area | 24 | 3,306 | 941 | 10k+ | | | Text Domain Mismatch |
| #26 | Post Affiliate Pro | 24 | 293 | 335 | 400 | | | Nonce verification recommended |
| #27 | Ultimate Addons for Beaver Builder – Lite | 24 | 2,751 | 486 | 20k+ | | | Text Domain Mismatch |
| #28 | WP Hotel Booking | 24 | 901 | 1,532 | 7k+ | | | Non-prefixed global variable |
| #29 | WP Ultimate CSV Importer – WordPress CSV, XML & Excel Import | 24 | 1,196 | 3,898 | 20k+ | | | Direct Query |
| #30 | Export All Posts, Products, Orders & Users | WP Ultimate Exporter | WordPress CSV Export | 24 | 289 | 1,052 | 6k+ | | | Direct Query |
| #31 | Advanced Ads – Ad Manager & AdSense | 25 | 556 | 714 | 100k+ | | | Non-prefixed global variable |
| #32 | DecaLog | 25 | 943 | 236 | 1k+ | | | Exception output is not escaped |
| #33 | Digital License Manager | 25 | 202 | 716 | 800 | | | Non-prefixed hook name |
| #34 | GD Security Headers | 25 | 407 | 521 | 1k+ | | | Output is not escaped |
| #35 | IP Locator | 25 | 492 | 211 | 500 | | | Text Domain Mismatch |
| #36 | Mailjet Email Marketing | 25 | 430 | 206 | 10k+ | | | Unsafe printing function |
| #37 | Object Sync for Salesforce | 25 | 192 | 296 | 500 | | | Non-prefixed global variable |
| #38 | Premmerce Wholesale Pricing for WooCommerce | 25 | 635 | 1,377 | 400 | | | Non-prefixed global variable |
| #39 | Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker | 25 | 380 | 2,630 | 40k+ | | | Non-prefixed hook name |
| #40 | Stylish Cost Calculator – Quote Generator, Lead Gen & Price Estimator | 25 | 650 | 1,021 | 1k+ | | | Output is not escaped |
| #41 | SureDash – Community, Courses & Member Dashboard | 25 | 413 | 816 | 1k+ | | | Non-prefixed global variable |
| #42 | WCPOS – Point of Sale (POS) plugin for WooCommerce | 25 | 86 | 465 | 5k+ | | | Direct Query |
| #43 | ezCache | 26 | 127 | 284 | 10k+ | | | Direct Query |
| #44 | Friends | 26 | 168 | 705 | 900 | | | Non-prefixed global variable |
| #45 | MapSVG – Vector maps, Image maps, Google Maps | 26 | 92 | 56 | 1k+ | | | Missing direct file access protection |
| #46 | Crowdsignal Dashboard – Polls, Surveys & more | 26 | 481 | 491 | 200k+ | | | Unsafe printing function |
| #47 | Cart Abandonment Recovery for WooCommerce – Recover Lost Sales with Automated Emails | 26 | 51 | 325 | 300k+ | | | Direct Query |
| #48 | Essential Addons for Elementor – Popular Elementor Templates & Widgets | 28 | 153 | 235 | 1m+ | | | wp function not compatible with requires wp |
| #49 | PayZen for WooCommerce | 28 | 258 | 214 | 600 | | | Output is not escaped |
| #50 | Pósturinn\'s Shipping with WooCommerce | 29 | 713 | 551 | 500 | | | Text Domain Mismatch |