| #51 | Kadence Security – Password, Two Factor Authentication, and Brute Force Protection | 21 | 1,060 | 957 | 700k+ | | | Missing Translators Comment |
| #52 | Booking Ultra Pro Appointments Booking Calendar Plugin | 21 | 761 | 2,083 | 400 | | | Request data is not unslashed |
| #53 | Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots | 21 | 1,614 | 2,030 | 10k+ | | | Direct Query |
| #54 | rtMedia for WordPress, BuddyPress and bbPress | 21 | 363 | 647 | 7k+ | | | Non-prefixed constant |
| #55 | Comet Cache | 21 | 857 | 245 | 20k+ | | | Output is not escaped |
| #56 | Daily Prayer Time | 21 | 947 | 1,780 | 1k+ | | | Non-prefixed global variable |
| #57 | DELUCKS SEO | 21 | 362 | 1,171 | 400 | | | Missing nonce verification |
| #58 | Free Downloads WooCommerce | 21 | 430 | 359 | 4k+ | | | Output is not escaped |
| #59 | Duplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More | 21 | 2,572 | 1,277 | 1m+ | | | Output is not escaped |
| #60 | Envo Extra | 21 | 878 | 600 | 20k+ | | | Text Domain Mismatch |
| #61 | eRoom – Webinar & Meeting Plugin for Zoom, Google Meet, Microsoft Teams | 21 | 186 | 437 | 9k+ | | | Non-prefixed global variable |
| #62 | Eupago Gateway For Woocommerce | 21 | 576 | 233 | 2k+ | | | Output is not escaped |
| #63 | EventPrime – Events Calendar, Bookings and Tickets | 21 | 873 | 4,310 | 7k+ | | | Non-prefixed global variable |
| #64 | Feeds for YouTube (YouTube video, channel, and gallery plugin) | 21 | 506 | 995 | 100k+ | | | Output is not escaped |
| #65 | FileOrganizer – WordPress File Manager | 21 | 536 | 241 | 200k+ | | | unlink unlink |
| #66 | Filter Everything — WordPress & WooCommerce Filters | 21 | 643 | 933 | 50k+ | | | Non-prefixed global variable |
| #67 | Formidable Forms – WordPress Form Builder for Contact Forms, Calculators, Quizzes & More | 21 | 52 | 2,118 | 300k+ | | | Non-prefixed global variable |
| #68 | Front End Users | 21 | 719 | 2,759 | 400 | | | Non-prefixed global variable |
| #69 | Imagify Image Optimization: Optimize Images | Compress & Convert to WebP/AVIF | 21 | 428 | 867 | 1m+ | | | Non-prefixed global variable |
| #70 | Mapster WP Maps | 21 | 3,440 | 2,894 | 3k+ | | | Text Domain Mismatch |
| #71 | Mergado Pack | 21 | 2,323 | 588 | 700 | | | Output is not escaped |
| #72 | Modular DS: Monitor, update, and backup multiple websites | 21 | 191 | 82 | 40k+ | | | Exception output is not escaped |
| #73 | Mooberry Book Manager | 21 | 1,040 | 399 | 1k+ | | | Text Domain Mismatch |
| #74 | MotoPress Hotel Booking | 21 | 3,067 | 1,037 | 10k+ | | | Text Domain Mismatch |
| #75 | Oasis Workflow | 21 | 775 | 575 | 600 | | | Text Domain Mismatch |
| #76 | OneLogin SAML SSO | 21 | 507 | 330 | 7k+ | | | wp function not compatible with requires wp |
| #77 | Landing Page Builder – Coming Soon page, Maintenance Mode, Lead Page, WordPress Landing Pages | 21 | 1,120 | 2,913 | 9k+ | | | Non-prefixed global variable |
| #78 | Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction | 21 | 1,953 | 5,297 | 10k+ | | | Non-prefixed hook name |
| #79 | PeachPay — Payments & Express Checkout for WooCommerce (supports Stripe, PayPal, Square, Authorize.net, NMI) | 21 | 485 | 813 | 300 | | | Missing direct file access protection |
| #80 | User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor | 21 | 703 | 1,463 | 40k+ | | | Missing Translators Comment |
| #81 | Quill Forms | Conversational Multi Step Forms, Surveys & quizzes | 21 | 401 | 370 | 3k+ | | | Text Domain Mismatch |
| #82 | Razorpay Quick Payments | 21 | 399 | 63 | 2k+ | | | Exception output is not escaped |
| #83 | Rocket Maintenance Mode & Coming Soon Page | 21 | 1,176 | 1,406 | 4k+ | | | Non-prefixed global variable |
| #84 | Royal Addons for Elementor – Addons and Templates Kit for Elementor | 21 | 13,016 | 2,440 | 600k+ | | | Text Domain Mismatch |
| #85 | Seamless Donations is Sunset | 21 | 600 | 514 | 2k+ | | | Text Domain Mismatch |
| #86 | SeatReg | 21 | 312 | 1,637 | 400 | | | Missing nonce verification |
| #87 | Professional Social Sharing Buttons, Icons & Related Posts – Shareaholic | 21 | 327 | 181 | 10k+ | | | Output is not escaped |
| #88 | Smart Forms – when you need more than just a contact form | 21 | 776 | 574 | 5k+ | | | Output is not escaped |
| #89 | Testerwp ecommerce companion | 21 | 811 | 436 | 1k+ | | | Text Domain Mismatch |
| #90 | TotalPoll for Polls and Contests | 21 | 1,366 | 155 | 1k+ | | | Text Domain Mismatch |
| #91 | Trace My IP – Visitor IP Tracker, Stats Analytics & Page Views Counter with Email Alerts | 21 | 871 | 338 | 1k+ | | | wp function not compatible with requires wp |
| #92 | Revive Social – Social Media Auto Post and Scheduling Automation Plugin | 21 | 256 | 431 | 20k+ | | | Non-prefixed hook name |
| #93 | Uncanny Automator – AI + Automation for WordPress | AI Agent, AI Page Builder, Free AI Usage Included | 21 | 1,082 | 3,112 | 40k+ | | | Direct Query |
| #94 | UPC/EAN/GTIN Barcode Generator/Importer | 21 | 776 | 311 | 500 | | | Exception output is not escaped |
| #95 | URL Shortify – Simple and Easy URL Shortener | 21 | 1,507 | 2,665 | 10k+ | | | Non-prefixed global variable |
| #96 | Buckaroo Woocommerce Payments Plugin | 21 | 638 | 321 | 2k+ | | | Exception output is not escaped |
| #97 | BuddyPress WooCommerce My Account Integration. Create WooCommerce Member Pages | 21 | 668 | 1,569 | 800 | | | Non-prefixed global variable |
| #98 | IS-theme-companion | 21 | 3,559 | 511 | 1k+ | | | Non Singular String Literal Domain |
| #99 | WebP Express | 21 | 160 | 427 | 300k+ | | | Non-prefixed global variable |
| #100 | Paysera Payment Gateway for WooCommerce | 21 | 1,868 | 196 | 7k+ | | | Exception output is not escaped |